Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File:                     LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier:          aO6JU8uaCQDeeJ+iddTaHj0HsaWJhskOa5hxX65CBjg=
Subject key identifier:   8C:C3:8F:EF:8F:82:B3:0A:46:59:DC:B7:85:B3:EE:DD:74:7C:96:3A
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer:       /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial:       019D2A72D53483474B4C714FF30E07119A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 14:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 14:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:01 +0000
Files and hashes:         1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
                          2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: Bl2DCDPvXohPdcb5TJMB/OWJVAiL1w3ZrBaCeZmDnas=)
                          3: zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa (hash: T17rFq6E9471MLMBhrGLFdRcWoO+rQ0ILITYoqDpgKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:d5:34:83:47:4b:4c:71:4f:f3:0e:07:11:9a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
        Validity
            Not Before: Mar 26 14:01:01 2026 GMT
            Not After : Mar 27 14:01:01 2026 GMT
        Subject: CN=8cc38fef8f82b30a4659dcb785b3eedd747c963a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:4e:7f:15:14:07:58:4c:fc:1e:36:1d:81:
                    84:a6:17:ab:0a:c3:fc:b6:b9:23:54:a0:c0:56:38:
                    76:60:f3:d4:80:c6:d5:25:7a:e8:9d:ba:12:c0:6e:
                    66:89:08:b9:27:29:97:c2:2c:98:d4:37:63:7f:b5:
                    a2:37:86:7a:0f:80:61:01:ac:eb:d0:f2:a6:13:b9:
                    fd:fc:39:58:7f:ab:d3:c1:fc:34:94:49:0e:d4:a6:
                    4f:94:b2:4c:77:23:09:d3:6a:b5:fc:79:8c:8f:3a:
                    f3:00:83:41:9c:24:97:d0:54:57:55:6b:01:bd:6a:
                    19:3c:a2:43:ce:90:63:fd:e0:24:a4:58:cc:6d:5a:
                    7f:fb:dd:49:00:08:17:3d:a6:07:67:bd:09:cd:e8:
                    42:88:c0:37:a0:22:7d:fc:f5:c7:d6:c5:ac:69:c8:
                    56:78:ca:22:68:15:32:33:b6:ea:9c:29:9e:fd:c3:
                    b1:3e:3c:e8:22:6e:10:be:a9:86:ae:80:0c:4c:c6:
                    72:6c:01:85:cb:d0:a1:56:8b:58:ba:fb:3b:8c:5d:
                    5c:5a:e4:cf:1f:1e:27:bf:0a:d1:c7:74:61:62:1f:
                    53:ca:5a:df:73:95:d4:18:17:e8:84:fe:ab:c5:0f:
                    01:f0:cd:f4:ee:8e:8a:62:6c:90:7b:35:9d:40:05:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:8F:EF:8F:82:B3:0A:46:59:DC:B7:85:B3:EE:DD:74:7C:96:3A
            X509v3 Authority Key Identifier:
                keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:74:48:5a:fe:f3:35:dc:e5:57:da:c3:92:13:de:08:64:da:
         b3:15:e9:11:5b:4e:0a:ef:24:df:eb:c7:74:40:84:f6:81:95:
         35:62:36:28:8b:ec:47:87:1a:c3:25:71:4a:96:b2:38:a1:b7:
         63:35:f6:32:e1:4a:c5:be:cb:23:42:a2:5b:61:b6:b7:c4:f6:
         a4:4f:69:64:c9:c9:ec:44:fe:e0:0c:58:68:e0:e0:db:06:af:
         35:c3:cd:ff:52:bc:5b:85:80:84:db:8d:91:a1:98:32:22:01:
         51:5a:b4:70:89:a3:e7:7e:04:69:a6:18:f1:df:ce:1a:d0:9b:
         56:dc:8c:e8:ed:08:3e:af:87:b4:d3:e6:b3:82:fc:76:a7:04:
         9f:00:25:fc:6f:7f:7c:f7:42:f2:b1:6e:e5:64:e4:b5:c6:2c:
         f7:6e:8f:89:20:b0:b4:14:12:3e:f6:af:49:47:68:a9:6b:3d:
         14:8c:6e:d9:64:2f:1b:52:79:d6:42:5f:73:ea:9a:2d:1d:d7:
         6e:bf:72:e0:69:a6:95:2e:a2:29:f4:35:ce:5d:1c:73:cf:f6:
         2b:67:25:75:8b:b3:67:3a:91:a5:e7:e2:1b:f7:42:bd:f5:82:
         cc:18:9b:3d:9e:dc:cb:85:bc:ba:03:06:5f:a8:c9:c2:62:96:
         cc:04:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:55:09 2026 by rpki-client