Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File:                     LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier:          fzfsnL1B9xAqJzoU3/GUR61FQrNPWAQeGSk0cabfcXs=
Subject key identifier:   21:69:71:9F:D4:74:23:CA:06:C6:7B:C5:2C:3E:5E:8D:F4:3B:35:23
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer:       /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial:       019E1CB5180684F4CCED062756CE7AED27C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number:          48
Signing time:             Tue 12 May 2026 15:01:30 +0000
Manifest this update:     Tue 12 May 2026 15:01:30 +0000
Manifest next update:     Wed 13 May 2026 15:01:30 +0000
Files and hashes:         1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
                          2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: WRT2KaIiZRDnLW6vjxQLWngan+7kiL88OSLNSfXJGOM=)
                          3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:18:06:84:f4:cc:ed:06:27:56:ce:7a:ed:27:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
        Validity
            Not Before: May 12 15:01:30 2026 GMT
            Not After : May 13 15:01:30 2026 GMT
        Subject: CN=2169719fd47423ca06c67bc52c3e5e8df43b3523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:fe:62:71:0c:65:bb:18:75:d5:0b:1c:2e:
                    ab:ee:c1:c8:14:b3:54:58:e2:08:f5:e3:6a:02:22:
                    d0:ba:03:44:11:36:22:95:29:e5:63:96:30:5d:19:
                    8e:93:a9:7c:ff:b2:41:8c:76:e6:4f:6d:7a:12:5e:
                    78:b1:00:a9:e3:8a:b8:a6:e5:86:90:5c:6f:c0:99:
                    ee:02:17:03:8b:bc:a8:97:d1:79:ee:e7:a1:2d:5a:
                    52:6b:ee:39:4b:ab:50:fa:26:45:44:58:8c:f7:97:
                    1b:ed:3e:fb:11:d9:a6:e9:8f:08:ce:c9:62:81:fc:
                    b2:55:c7:fe:22:bc:8f:f4:1e:e1:49:d5:ea:a5:27:
                    48:2b:df:cd:73:3a:8f:6a:09:08:8f:0b:e0:cf:11:
                    d6:58:93:2d:e1:a4:5e:dc:78:50:39:f3:09:2e:53:
                    f5:86:40:dc:ee:41:b3:73:76:00:59:8a:4b:c9:f7:
                    bc:b8:01:be:6a:3f:6e:df:e1:f0:c1:5d:5e:6a:f3:
                    4c:71:b7:21:d8:17:65:de:e1:78:fb:94:c4:51:66:
                    6b:d1:7c:a4:64:cd:e4:17:48:08:d0:06:b4:cd:1c:
                    3e:5a:27:db:a4:aa:6c:e9:35:4c:68:ea:5a:72:0c:
                    66:5e:2b:70:1d:ac:ac:a5:c1:85:07:76:5a:80:4f:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:69:71:9F:D4:74:23:CA:06:C6:7B:C5:2C:3E:5E:8D:F4:3B:35:23
            X509v3 Authority Key Identifier:
                keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:f2:8b:6f:c0:2e:7d:35:9c:4a:d0:32:83:59:73:f6:68:
         45:6a:fd:22:3d:b6:6e:7a:51:90:5d:90:03:70:1c:45:e3:c8:
         f4:e4:ce:fc:90:3a:4f:5f:2d:c5:1d:db:f0:d1:24:10:0e:92:
         23:e7:97:d8:f2:52:7a:19:65:0e:70:9b:22:49:bb:c3:dd:e2:
         ee:67:e4:21:db:01:3b:f1:7e:07:76:18:df:f8:6e:1a:bc:50:
         7f:b2:e0:84:8f:93:03:2f:94:74:84:2c:10:1b:5f:d7:24:b2:
         ff:77:5e:ff:11:4a:a1:73:a3:09:47:97:8d:f0:ea:7b:ef:21:
         44:ae:b6:5b:31:fb:c7:f4:9c:ab:e1:1a:e1:47:34:12:ae:26:
         51:e3:d9:97:e4:bd:94:94:7b:b0:2c:58:a9:b9:63:d2:de:18:
         88:1b:f9:a6:53:56:93:6e:eb:b4:98:41:06:d0:79:f8:33:6c:
         47:5c:33:31:e4:23:45:cd:83:d2:36:db:3e:2d:2f:45:e7:ae:
         1d:55:12:19:50:62:f9:8b:d5:8a:a6:b8:3d:72:de:5e:4f:b9:
         5f:64:da:90:10:6a:4e:48:f9:24:8a:39:08:8f:76:b9:77:e2:
         6f:76:ed:a0:6f:93:47:2f:94:41:44:19:b9:f6:bb:03:5d:eb:
         4b:62:a6:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctRgGhPTM7QYnVs567SfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMmQ4ODM0NDlmNjdhZDQ3MDlkNWNhYmI0MDZlYThiYzM4
NzM0MjEwHhcNMjYwNTEyMTUwMTMwWhcNMjYwNTEzMTUwMTMwWjAzMTEwLwYDVQQD
EygyMTY5NzE5ZmQ0NzQyM2NhMDZjNjdiYzUyYzNlNWU4ZGY0M2IzNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L7+YnEMZbsYddULHC6r7sHIFLNU
WOII9eNqAiLQugNEETYilSnlY5YwXRmOk6l8/7JBjHbmT216El54sQCp44q4puWG
kFxvwJnuAhcDi7yol9F57uehLVpSa+45S6tQ+iZFRFiM95cb7T77Edmm6Y8Izsli
gfyyVcf+IryP9B7hSdXqpSdIK9/NczqPagkIjwvgzxHWWJMt4aRe3HhQOfMJLlP1
hkDc7kGzc3YAWYpLyfe8uAG+aj9u3+HwwV1eavNMcbch2Bdl3uF4+5TEUWZr0Xyk
ZM3kF0gI0Aa0zRw+WifbpKps6TVMaOpacgxmXitwHayspcGFB3ZagE9N/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFpcZ/UdCPKBsZ7xSw+Xo30OzUjMB8GA1UdIwQY
MBaAFCwtiDRJ9nrUcJ1cq7QG6ovDhzQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEMySU5FbjJldFJ3blZ5cnRBYnFpOE9ITkNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kYmU4YTMtMzBmYi00ZGZlLTlmZmQt
MTIzNGFlY2Q1MTNlLzEvTEMySU5FbjJldFJ3blZ5cnRBYnFpOE9ITkNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kYmU4YTMtMzBmYi00ZGZlLTlmZmQtMTIzNGFlY2Q1MTNl
LzEvTEMySU5FbjJldFJ3blZ5cnRBYnFpOE9ITkNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQR7yi2/A
Ln01nErQMoNZc/ZoRWr9Ij22bnpRkF2QA3AcRePI9OTO/JA6T18txR3b8NEkEA6S
I+eX2PJSehllDnCbIkm7w93i7mfkIdsBO/F+B3YY3/huGrxQf7LghI+TAy+UdIQs
EBtf1ySy/3de/xFKoXOjCUeXjfDqe+8hRK62WzH7x/Scq+Ea4Uc0Eq4mUePZl+S9
lJR7sCxYqblj0t4YiBv5plNWk27rtJhBBtB5+DNsR1wzMeQjRc2D0jbbPi0vReeu
HVUSGVBi+YvViqa4PXLeXk+5X2TakBBqTkj5JIo5CI92uXfib3btoG+TRy+UQUQZ
ufa7A13rS2KmoA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:39:39 2026 by rpki-client