Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File:                     LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier:          6K17O38c4gfYuI0T5jWvEO9Zz2GNqOp5rJADsk2qceU=
Subject key identifier:   71:C9:B0:C7:D2:AB:04:28:A0:78:F2:B1:16:D6:45:45:4D:54:5A:BE
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer:       /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial:       019E2135D7AFC0BCDF82ABF57DDE6A64B3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 12:00:37 +0000
Manifest this update:     Wed 13 May 2026 12:00:37 +0000
Manifest next update:     Thu 14 May 2026 12:00:37 +0000
Files and hashes:         1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: Q+zz5QcQ+VfOfVopFRDFSN1zTOqZ6ZsO/fyk9XbfKvM=)
                          2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
                          3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
                          4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:35:d7:af:c0:bc:df:82:ab:f5:7d:de:6a:64:b3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
        Validity
            Not Before: May 13 12:00:37 2026 GMT
            Not After : May 14 12:00:37 2026 GMT
        Subject: CN=71c9b0c7d2ab0428a078f2b116d645454d545abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:89:bf:52:ed:0b:56:76:f8:3c:f1:7f:73:
                    1e:aa:ca:3f:7d:d8:3c:c5:ca:d3:a5:4b:c2:28:8f:
                    ee:bf:47:d2:bc:dc:2a:12:88:3c:7e:43:24:d0:c5:
                    fe:aa:44:50:fb:e1:49:40:d0:0e:af:f8:9e:0e:75:
                    29:20:2b:fe:31:96:32:d9:6d:57:a7:40:e9:de:06:
                    1d:a5:22:d4:ce:16:9b:43:92:b9:fe:2f:c6:b2:a8:
                    40:d4:66:e7:4f:4d:12:11:fd:ea:3c:36:e0:e1:bd:
                    23:39:06:34:30:0a:b7:68:eb:09:5f:fa:dd:5f:31:
                    23:a4:8d:b1:53:d9:bc:fb:5f:25:94:27:fa:2a:68:
                    a4:75:6f:51:3e:8a:6c:76:11:b3:b5:85:61:fb:7e:
                    ef:63:fb:8d:2b:26:f3:14:07:58:85:55:10:ac:5e:
                    80:76:f7:1f:d5:62:ae:0f:26:76:9f:25:6e:ee:cf:
                    aa:49:9e:c6:21:ae:9c:6f:31:1c:46:dd:96:39:a3:
                    37:fb:69:ab:aa:f1:6a:e6:98:62:21:4f:dd:2b:c6:
                    c2:6e:ba:5f:59:97:1b:fc:a8:9e:f4:73:2d:fa:9e:
                    34:89:8a:5f:e6:84:b1:28:86:3c:40:93:6f:0d:ca:
                    b7:d7:4f:07:f5:69:68:9c:cf:88:2e:cd:eb:c8:00:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C9:B0:C7:D2:AB:04:28:A0:78:F2:B1:16:D6:45:45:4D:54:5A:BE
            X509v3 Authority Key Identifier:
                keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:09:aa:83:cc:8b:35:b4:26:20:8a:93:43:13:32:51:d6:5e:
         5e:42:6b:11:74:99:8a:d7:3f:9c:9a:a6:3c:9d:6b:46:5f:cf:
         bd:9c:b9:07:62:6b:8c:9e:ae:2d:eb:df:af:42:64:ce:90:89:
         ee:7b:f5:6b:0f:a2:70:3b:0d:59:95:ac:55:d4:f8:b4:da:d1:
         52:aa:96:36:f2:e1:40:4f:21:32:7e:f2:9d:ad:73:eb:5a:65:
         32:17:fc:5f:6f:ac:a1:c7:be:5b:6e:9a:7d:59:66:27:1d:1a:
         36:c5:f8:3c:90:a5:4e:a6:b9:08:a8:bf:3c:01:7a:d1:20:f5:
         b9:ab:96:63:1f:8c:ec:c1:4f:dc:8d:e5:10:ce:3c:19:a7:5b:
         bc:b4:71:5b:d9:cf:66:0e:78:4a:9d:6c:10:1c:e7:01:8f:b9:
         fe:82:24:30:16:5c:d4:6a:88:d9:75:a0:77:32:ae:e9:c3:79:
         57:3c:6a:5f:19:e5:9b:01:87:cb:89:d6:26:45:ef:6e:96:d1:
         db:03:ce:ea:c4:d9:c8:d9:a1:2f:f4:ca:13:6e:b8:c0:62:80:
         c3:21:cc:ac:b4:04:e4:a6:5b:9e:d5:c1:98:4e:96:a9:96:55:
         2f:03:29:72:59:cc:91:2b:2e:24:7d:89:25:b0:92:af:a4:3a:
         8d:1e:70:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNdevwLzfgqv1fd5qZLPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjYwNTEzMTIwMDM3WhcNMjYwNTE0MTIwMDM3WjAzMTEwLwYDVQQD
Eyg3MWM5YjBjN2QyYWIwNDI4YTA3OGYyYjExNmQ2NDU0NTRkNTQ1YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM2Jv1LtC1Z2+Dzxf3Meqso/fdg8
xcrTpUvCKI/uv0fSvNwqEog8fkMk0MX+qkRQ++FJQNAOr/ieDnUpICv+MZYy2W1X
p0Dp3gYdpSLUzhabQ5K5/i/GsqhA1GbnT00SEf3qPDbg4b0jOQY0MAq3aOsJX/rd
XzEjpI2xU9m8+18llCf6KmikdW9RPopsdhGztYVh+37vY/uNKybzFAdYhVUQrF6A
dvcf1WKuDyZ2nyVu7s+qSZ7GIa6cbzEcRt2WOaM3+2mrqvFq5phiIU/dK8bCbrpf
WZcb/Kie9HMt+p40iYpf5oSxKIY8QJNvDcq3108H9WlonM+ILs3ryACjQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHJsMfSqwQooHjysRbWRUVNVFq+MB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQmqg8yL
NbQmIIqTQxMyUdZeXkJrEXSZitc/nJqmPJ1rRl/PvZy5B2JrjJ6uLevfr0JkzpCJ
7nv1aw+icDsNWZWsVdT4tNrRUqqWNvLhQE8hMn7yna1z61plMhf8X2+soce+W26a
fVlmJx0aNsX4PJClTqa5CKi/PAF60SD1uauWYx+M7MFP3I3lEM48GadbvLRxW9nP
Zg54Sp1sEBznAY+5/oIkMBZc1GqI2XWgdzKu6cN5VzxqXxnlmwGHy4nWJkXvbpbR
2wPO6sTZyNmhL/TKE264wGKAwyHMrLQE5KZbntXBmE6WqZZVLwMpclnMkSsuJH2J
JbCSr6Q6jR5wTw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:17:33 2026 by rpki-client