Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          EmnMLHuC71bj1kS4W4e6kh/l1uSHUVS2peCittNtL3k=
Subject key identifier:   79:90:08:6D:85:31:6B:C3:F0:D9:89:29:AC:5B:7A:B5:54:BC:01:E3
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       019E1EA3A58DAC61E27A4391AF9F96CBC93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          14D0
Signing time:             Wed 13 May 2026 00:01:41 +0000
Manifest this update:     Wed 13 May 2026 00:01:41 +0000
Manifest next update:     Thu 14 May 2026 00:01:41 +0000
Files and hashes:         1: FoFknui6N7AV-MVsL0GcCguJMuY.roa (hash: zSrSbQATu/hSvIQfL/GtZLhgnMs95GytYnvic5x5vKc=)
                          2: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: vu4c7eMTOzwHMBMkzxU+dSWvPeGmFJKiQgvuOmahaHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:a5:8d:ac:61:e2:7a:43:91:af:9f:96:cb:c9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: May 13 00:01:41 2026 GMT
            Not After : May 14 00:01:41 2026 GMT
        Subject: CN=7990086d85316bc3f0d98929ac5b7ab554bc01e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:ba:d8:d8:b6:4b:26:49:8d:1b:cf:86:e2:
                    ea:b7:08:a7:44:97:de:10:40:f1:48:01:4a:30:98:
                    8e:0f:40:09:c8:35:70:bd:f8:c6:8a:91:10:b3:0f:
                    d3:76:d3:51:09:37:d4:d9:f6:17:75:fa:82:44:4d:
                    d7:3f:d2:a4:a0:08:5f:ba:7b:ab:47:d5:a9:9b:c7:
                    14:4a:82:b5:b8:3a:ae:25:53:b6:7a:98:cf:ce:57:
                    6c:82:d9:cc:63:71:5b:8c:60:cc:af:9b:41:1e:80:
                    e5:cd:68:ec:32:ff:ba:2a:81:a8:e0:ad:c7:64:d4:
                    96:6a:dc:cc:a4:db:6f:38:d0:38:6e:cf:00:a2:95:
                    82:fb:a2:1e:25:c0:98:6a:24:18:85:72:c7:74:85:
                    f8:59:d9:0b:fa:32:2f:82:72:47:0f:17:a9:27:88:
                    90:a8:f1:54:d3:ec:b7:cc:61:e9:d1:bc:4a:77:4b:
                    dc:f7:0b:4b:3c:97:2a:bf:dc:b0:14:07:cc:15:39:
                    22:23:70:3a:b8:b3:e8:20:d5:67:98:2e:13:29:0c:
                    98:20:27:ff:22:c1:2d:06:5b:0c:54:57:2f:ab:19:
                    30:dc:3d:c7:04:c9:ae:2a:89:60:10:eb:f8:60:38:
                    1c:2f:38:65:b4:4f:93:e0:e6:6a:fe:ac:54:2d:45:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:08:6D:85:31:6B:C3:F0:D9:89:29:AC:5B:7A:B5:54:BC:01:E3
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e8:77:b0:96:cb:54:0e:bb:6e:dc:f0:eb:84:39:a0:72:f4:
         f0:a0:15:94:fe:c3:80:1f:6a:1a:68:df:36:24:6a:4d:61:3f:
         8e:1d:2d:c6:87:0d:f8:c6:21:5f:15:2a:0d:60:78:14:04:02:
         a6:5b:0d:45:e6:33:51:25:8b:0c:a8:48:ac:d9:f4:7f:d9:32:
         1c:2f:7e:29:21:e8:e1:a9:f7:d5:d8:70:a3:14:a7:ca:45:23:
         5d:41:ee:5a:4c:99:21:ca:99:45:eb:70:24:08:fb:fa:9c:58:
         9d:a1:9b:ff:8e:f1:5a:d1:42:6f:eb:80:c4:27:06:79:b9:03:
         3f:14:c0:b0:c3:dc:59:55:9a:17:1e:4e:6e:bc:87:b4:24:db:
         de:18:81:7c:69:2b:4f:d7:62:8b:2d:38:b5:0e:4b:13:cc:5f:
         6c:1a:72:66:d3:9c:ca:e2:12:d4:b4:fa:a5:5f:04:5c:fc:70:
         38:9c:77:bd:05:13:87:29:30:4a:a8:23:1e:36:c5:67:4b:fa:
         22:5b:86:e2:a9:66:fb:76:c0:a5:9b:f5:4b:0a:36:b4:60:a4:
         02:d0:33:bd:6c:9d:c0:5a:f2:70:ab:32:74:ca:1c:e9:f0:8e:
         dc:c6:91:6d:71:fb:2e:60:56:ac:f8:19:a2:27:72:0a:70:31:
         1d:12:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:37 2026 by rpki-client