Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File:                     L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier:          MTz26LSRpCpfMLvdLumn/IZIPAmF+JwD9oN3/hvWrfs=
Subject key identifier:   26:B1:75:0F:70:7D:CF:30:A4:B2:6E:DB:13:56:27:3D:B2:55:5D:A4
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer:       /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial:       019E1F7F18EF623097F1B9178B39D8EC9D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number:          1649
Signing time:             Wed 13 May 2026 04:01:23 +0000
Manifest this update:     Wed 13 May 2026 04:01:23 +0000
Manifest next update:     Thu 14 May 2026 04:01:23 +0000
Files and hashes:         1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
                          2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: zVrZDy8NclziVU8H7/ntiAtr1QsSBcd2LdNqRqdChRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:18:ef:62:30:97:f1:b9:17:8b:39:d8:ec:9d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
        Validity
            Not Before: May 13 04:01:23 2026 GMT
            Not After : May 14 04:01:23 2026 GMT
        Subject: CN=26b1750f707dcf30a4b26edb1356273db2555da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:a5:b3:cb:ee:86:55:d9:31:f6:b7:35:04:
                    25:b4:fc:31:42:a4:9b:04:52:f7:5d:14:39:05:d6:
                    c6:31:13:38:5d:f6:78:d6:16:c1:b7:79:3a:60:f8:
                    da:bf:f7:8e:2f:b8:a0:b2:7b:fa:3b:97:ec:a2:f0:
                    13:bd:b8:a4:94:9a:6f:cd:c7:f9:35:18:b3:78:e3:
                    35:40:92:5c:23:b8:51:ef:8c:05:d7:53:9d:79:b8:
                    8a:d3:f2:be:d8:6e:9d:db:7a:75:f0:0e:02:51:21:
                    22:6e:45:ff:ca:b8:79:f1:67:fa:74:84:33:62:ce:
                    e9:33:ab:cb:e7:c0:39:b8:13:ac:84:a2:e9:1f:4d:
                    15:f4:93:da:57:0e:ea:97:46:1c:f1:53:89:96:b0:
                    39:a9:87:db:0e:ac:62:65:2d:b3:ed:7b:62:5a:30:
                    5b:bc:13:14:74:f1:8e:ff:7a:3a:5a:36:95:fa:2c:
                    b5:01:f7:50:2e:74:c2:74:ce:40:d7:7e:cc:8e:29:
                    4a:59:19:fd:13:fb:30:98:46:fe:de:f1:3b:3b:e5:
                    dd:23:82:a7:ce:bc:22:45:9c:32:9e:8c:f0:18:d1:
                    af:3d:af:9a:0e:bc:50:21:87:12:e1:f7:cd:0e:34:
                    bc:f6:e0:9f:3b:be:5d:f4:a2:77:cb:22:fb:96:92:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B1:75:0F:70:7D:CF:30:A4:B2:6E:DB:13:56:27:3D:B2:55:5D:A4
            X509v3 Authority Key Identifier:
                keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:cc:69:50:80:39:37:e1:dc:be:19:d2:c7:b2:26:97:f7:
         6c:62:d7:d4:eb:b4:46:50:8c:84:6d:0d:48:af:1e:73:9b:1b:
         7e:4e:e2:44:76:b3:c6:cb:37:b3:b9:9d:82:d0:56:1c:22:b0:
         1d:0e:bd:4b:04:cc:b4:39:3d:24:6f:10:bd:f8:de:cd:af:04:
         53:e0:dc:05:81:3e:11:b5:6f:cc:17:c4:18:7c:87:3a:da:d4:
         27:96:b0:04:96:cd:b5:71:51:9b:4a:86:0e:d5:df:05:f8:1f:
         8d:7d:38:72:ef:66:33:67:b3:7d:1b:03:27:c0:ea:f8:63:d1:
         e8:a4:cb:31:96:63:49:c0:c6:6d:fe:1a:86:21:65:4b:1c:03:
         1a:1b:f5:cb:cd:fb:02:5e:0a:6e:80:25:1a:13:7b:be:aa:29:
         c2:92:cd:f4:99:c6:05:08:86:17:9b:46:37:66:ab:69:26:45:
         c0:ba:7f:b3:02:b6:16:c3:0d:ee:85:91:e5:ff:eb:e6:91:73:
         a2:21:34:52:69:04:b8:3b:a1:f9:e5:3c:6c:21:33:2d:0d:7a:
         7a:bb:5f:a4:2e:97:c7:83:43:1d:c5:5e:5d:d2:23:d8:b4:88:
         ab:66:78:44:9f:b9:28:9c:de:db:cc:1f:8b:32:fb:d3:f1:15:
         da:29:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:47 2026 by rpki-client