Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File:                     lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier:          f7XRDb0phQbiEwtUgXFgVxJrFFJXNJ53qn9AqfsAATw=
Subject key identifier:   9B:06:9B:C0:71:03:8C:79:42:6F:5D:B8:EC:5F:77:B5:02:F5:C4:DD
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer:       /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial:       019E1DFDE9A0D4970911D8DE1195042C21FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number:          035E
Signing time:             Tue 12 May 2026 21:00:39 +0000
Manifest this update:     Tue 12 May 2026 21:00:39 +0000
Manifest next update:     Wed 13 May 2026 21:00:39 +0000
Files and hashes:         1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=)
                          2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: vE52pmKHBvnm8+IasxA/3KGHJb9Hy1NvXkD9Q45ayXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:e9:a0:d4:97:09:11:d8:de:11:95:04:2c:21:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
        Validity
            Not Before: May 12 21:00:39 2026 GMT
            Not After : May 13 21:00:39 2026 GMT
        Subject: CN=9b069bc071038c79426f5db8ec5f77b502f5c4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:b7:b4:da:cd:ba:da:d3:36:1a:0d:63:d9:
                    27:32:19:ed:b2:41:e4:d9:f6:96:84:92:f5:e2:83:
                    39:e3:ce:58:c2:4b:1f:b1:c3:94:5f:c9:43:ce:ab:
                    a5:56:16:8d:91:be:62:54:77:e9:66:f7:6a:88:5f:
                    a9:32:3b:ce:b1:bd:cb:1d:4a:6a:bd:a1:4d:92:68:
                    76:c7:d7:ba:a1:7d:c3:37:e8:a4:99:62:54:41:c1:
                    29:2c:b5:be:c3:28:b5:09:23:f1:89:55:ee:90:60:
                    00:f3:ca:a3:ef:e1:1b:9d:a0:5c:af:fa:f5:b0:9e:
                    da:c7:5d:1e:ab:4e:9b:d0:ed:8a:3f:af:46:d4:c7:
                    ec:b5:3c:e3:32:6e:8f:eb:24:78:85:16:98:cb:96:
                    d9:c0:d3:af:6e:6b:ef:4a:4c:06:0f:78:54:3b:0a:
                    e7:fa:4b:6d:4d:b8:c0:77:b1:84:ee:f4:4c:82:1f:
                    21:89:3c:a9:0f:e7:bf:32:d6:c9:c0:02:c9:43:06:
                    b8:a9:cc:ec:58:c1:d1:66:8b:a8:63:3d:cd:0c:6c:
                    68:aa:1a:26:b8:6c:f9:1e:c7:e2:9b:f5:9f:5c:6d:
                    5b:55:13:26:13:07:b6:41:c1:cd:b8:81:d7:d9:6c:
                    b2:21:6e:ea:2b:67:21:e5:39:89:c6:ba:0a:f8:b8:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:9B:C0:71:03:8C:79:42:6F:5D:B8:EC:5F:77:B5:02:F5:C4:DD
            X509v3 Authority Key Identifier:
                keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:41:a9:d6:ec:b5:8e:af:ee:e8:af:26:7a:d4:d7:aa:42:13:
         fb:06:f9:f1:72:7c:fe:10:d7:da:27:88:21:16:ce:2c:f8:ca:
         cb:dd:50:f4:83:81:f3:80:47:9e:62:a0:4c:34:2a:89:e6:12:
         d1:c9:5b:34:8d:e2:91:5c:00:0b:d2:e4:f9:8c:81:1e:81:a7:
         a2:9d:5b:f4:2b:76:55:b2:a6:09:26:79:48:5e:95:08:2b:65:
         72:52:19:0e:34:9f:1b:33:b7:8a:1a:2e:3a:db:7d:81:5b:d5:
         4f:91:c9:23:6c:91:f7:ee:19:55:6e:bc:8f:dd:c8:87:c4:bd:
         6b:12:f6:42:2e:ee:ad:56:86:59:61:8d:a5:e7:e5:fb:e0:84:
         37:79:1d:80:b8:6e:63:6d:77:ea:c3:9c:75:96:ce:8d:80:c1:
         89:78:72:95:c0:a5:82:bb:37:fa:40:0b:46:cf:24:33:41:9d:
         0c:b2:6c:02:5a:74:d9:4a:f9:f8:dc:35:2d:95:81:4a:19:91:
         f7:aa:5e:1d:d0:a0:93:5a:2b:18:d3:71:d3:28:c5:f5:58:bb:
         07:6e:cf:82:59:41:c5:c6:71:a3:0c:de:89:b2:1f:67:92:b6:
         66:d8:ed:cd:5c:04:a8:e0:d0:7d:a6:e6:72:b2:86:cf:0f:7a:
         3e:cd:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:58 2026 by rpki-client