Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          VsbhEh/g94rAolz2H3Tt/vhQTCFmmiL8yAGwu86ZDOo=
Subject key identifier:   CF:05:BB:92:6A:8F:9A:3D:09:A6:EE:2A:7B:70:80:D4:71:5B:C2:14
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       019E1FECD8DE0CFAA06B09B1AD47521A6354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          1313
Signing time:             Wed 13 May 2026 06:01:16 +0000
Manifest this update:     Wed 13 May 2026 06:01:16 +0000
Manifest next update:     Thu 14 May 2026 06:01:16 +0000
Files and hashes:         1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: kkoV7WOup7YOjqKnYKWK5xcK+OjVL+3xPtzEaG4Y6AY=)
                          2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:d8:de:0c:fa:a0:6b:09:b1:ad:47:52:1a:63:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: May 13 06:01:16 2026 GMT
            Not After : May 14 06:01:16 2026 GMT
        Subject: CN=cf05bb926a8f9a3d09a6ee2a7b7080d4715bc214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:96:51:bd:f3:1b:e8:bb:8b:56:68:0e:d9:
                    6f:2f:09:3e:22:11:0d:2f:9a:0e:42:5c:91:d4:7e:
                    41:28:56:8d:2d:9d:d7:56:a7:c8:5c:67:31:95:09:
                    97:34:10:34:48:74:8b:44:89:75:b2:53:3b:dc:e5:
                    84:b6:6d:b1:6d:7e:fc:e1:a9:c8:ba:9a:c8:32:10:
                    21:23:4b:2d:8f:b4:83:8a:4a:56:78:7d:b2:68:b9:
                    b0:a5:81:3d:00:62:21:b5:f1:61:76:af:4c:65:c7:
                    07:91:3b:35:3a:b5:b9:a9:24:05:41:57:01:ee:7d:
                    f4:29:9a:ee:29:4a:c4:7b:72:1b:8a:40:1d:65:58:
                    9b:7f:14:bf:0c:5c:bb:88:f1:28:5c:b0:57:69:5a:
                    af:fc:8b:00:6b:da:92:52:6f:51:7c:87:c8:83:f3:
                    33:88:64:42:28:ca:42:9e:44:16:06:8c:d6:b3:ed:
                    6f:f2:a6:cc:b9:a8:1d:32:d1:69:0a:28:38:0a:62:
                    e2:3a:70:92:a3:09:cd:36:88:21:80:46:d6:8d:66:
                    df:07:f3:de:ea:a5:3e:a0:9f:57:c1:db:21:e9:31:
                    ba:7d:41:ce:3e:8b:2f:90:2b:46:c3:69:4e:4d:c5:
                    9e:a8:9b:24:c3:46:5b:71:e7:4d:db:1f:8b:f3:78:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:05:BB:92:6A:8F:9A:3D:09:A6:EE:2A:7B:70:80:D4:71:5B:C2:14
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:58:cd:a2:ca:85:2f:d2:32:1c:ff:75:5b:5c:48:6d:5d:75:
         f6:55:64:7e:0d:ba:46:2d:b1:63:7c:4f:fc:2d:28:4d:4a:e0:
         d4:85:4d:4e:77:88:7f:77:94:d2:b6:9e:54:ec:9e:3a:2e:2d:
         3a:34:6e:9c:6a:b1:86:4c:7d:2a:9e:fa:c4:bb:c8:91:55:a8:
         b0:d2:a3:e4:2d:d1:20:42:ea:c9:9d:39:5c:df:a4:5c:01:6c:
         03:f6:88:22:fe:14:47:b0:d1:35:0d:9b:5e:26:ac:28:79:92:
         ef:0f:3f:29:fc:92:f8:26:d0:02:d6:04:e3:b7:8d:cc:cc:f2:
         8a:13:81:3b:84:0c:20:8f:ca:a1:6d:6a:49:51:1c:12:55:4e:
         6f:2a:ea:98:cc:d7:72:c1:37:9a:b1:11:e5:65:f2:f8:69:7a:
         c0:57:9c:77:f8:f8:ba:2a:06:2c:a5:b4:ab:71:86:bb:88:97:
         39:37:b1:23:c4:6e:d3:46:02:7c:99:af:d3:45:76:bc:f9:e8:
         42:b3:42:9c:28:09:c8:fd:fe:16:09:58:8e:0a:91:d0:8a:a4:
         be:75:55:58:43:97:2d:a0:4b:5a:54:ac:c2:d8:28:35:a8:10:
         38:27:0e:f8:b1:09:e4:ee:58:a8:da:87:1b:5d:68:0f:56:09:
         83:13:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:11 2026 by rpki-client