Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File:                     LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier:          7MGekpBlYAgUsgjClsWc3mw8lr7s6hWAXYsgpk1/BkA=
Subject key identifier:   CA:9B:00:72:51:64:DE:AB:7C:E7:7F:51:D2:89:DB:05:CB:49:C2:CE
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer:       /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial:       01A0287CDADEDB528D037F866F6B44CC1C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number:          1828
Signing time:             Sat 22 Aug 2026 08:01:06 +0000
Manifest this update:     Sat 22 Aug 2026 08:01:06 +0000
Manifest next update:     Sun 23 Aug 2026 08:01:06 +0000
Files and hashes:         1: Du6kGTRHXI4yfntbUGKdYnjPgko.roa (hash: 1oJFFLp85i5EIPDvvQ2y+xVdVmVO4zl8WcaNvzV96iI=)
                          2: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: uzbUDyWqpD3HDa3fPAvCwEq5kW+JXsbBIKLoBlM8t7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:28:7c:da:de:db:52:8d:03:7f:86:6f:6b:44:cc:1c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
        Validity
            Not Before: Aug 22 08:01:06 2026 GMT
            Not After : Aug 23 08:01:06 2026 GMT
        Subject: CN=ca9b00725164deab7ce77f51d289db05cb49c2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:0f:3b:1e:bc:04:f3:b1:91:1c:50:41:2c:
                    69:16:bf:29:a0:4e:96:d5:26:cc:20:96:67:3b:4e:
                    bf:73:b3:b4:e4:90:4b:c8:f6:f1:35:5e:bc:3a:b1:
                    72:f3:66:95:b6:6d:00:fd:1b:2f:22:f7:5d:cb:33:
                    b4:c1:ae:a9:07:59:b5:6f:c4:74:fe:e2:48:77:95:
                    0f:96:69:06:94:f7:58:54:46:7f:83:9e:55:77:58:
                    37:bc:70:0d:47:66:8b:0a:d1:0d:e9:c1:d9:55:98:
                    bf:b0:3e:0a:24:4a:2f:d9:c3:74:03:60:16:83:6c:
                    32:ca:e3:1c:b9:04:2d:29:57:78:0c:bb:87:12:14:
                    b9:44:29:e3:e6:b3:ff:79:10:8b:5d:34:68:b0:07:
                    dd:53:ec:a8:f7:10:c4:99:8b:10:4d:21:92:93:56:
                    ab:a1:10:7e:f5:0a:32:80:fd:4d:3f:6d:64:34:ce:
                    98:bf:ed:e4:8b:43:f7:c0:75:1e:9c:d8:ea:3d:bd:
                    5a:f9:66:9e:ba:44:ba:bf:5e:52:1a:05:5f:13:e6:
                    a6:43:28:0b:ba:56:66:97:3b:3a:97:aa:07:d6:b3:
                    4b:11:dc:fb:b2:13:27:36:6a:16:9c:37:24:00:61:
                    ad:07:fd:f3:02:56:fd:86:7c:99:64:21:73:3f:df:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:00:72:51:64:DE:AB:7C:E7:7F:51:D2:89:DB:05:CB:49:C2:CE
            X509v3 Authority Key Identifier:
                keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:45:fb:bc:a5:4e:88:8b:86:c4:6a:49:83:a9:08:e1:b2:
         69:fa:b8:a0:ed:0b:7e:9b:45:12:8d:e2:6e:fe:55:b8:ad:b2:
         9e:9e:2e:37:14:a4:59:32:2e:4c:24:79:0c:0f:8d:95:41:7c:
         50:8f:ea:1b:bf:20:c3:81:36:1a:ec:96:70:04:9f:92:8f:9c:
         3e:2d:a3:a2:f1:49:34:f2:ea:ce:81:f4:fd:d3:43:8a:df:02:
         50:08:f9:1f:4d:6c:15:51:e7:96:51:41:2c:4f:5b:9b:58:38:
         24:a7:b7:2d:48:6e:d1:c6:76:ae:23:b2:f5:00:5e:5d:1e:b7:
         da:54:2b:d9:d3:ce:4c:09:69:6a:69:3c:c3:c6:5e:d0:59:f0:
         58:33:3c:ef:bf:36:e9:c4:a3:17:81:a2:ff:01:f1:f0:e2:5a:
         1c:c0:09:87:75:78:22:74:8c:59:cf:73:f5:64:bd:fd:0a:b7:
         69:4a:2d:0d:1e:30:69:ef:0e:ca:e9:5a:5d:bd:f0:c4:05:c2:
         41:0a:0c:87:37:90:ad:c1:f0:60:f2:a7:19:24:1c:a4:67:02:
         c4:c6:99:15:81:c8:7c:67:0d:51:8b:b3:0f:b5:36:3c:3d:b7:
         ab:f7:9b:f0:aa:a6:f2:b4:e9:36:3e:5e:8d:eb:23:a6:fd:3e:
         3c:52:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 12:30:15 2026 by rpki-client