Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          rNuj1hG0Z0knrGRf4V0TP4/061Q9+/pFK2VLX+03zcI=
Subject key identifier:   80:BD:46:80:36:A7:F8:92:26:89:FF:00:7F:14:19:A2:A8:C2:B6:D4
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       019D2772C292BBD805B6EEC0BFAD8A5903B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 00:02:05 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:05 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:05 +0000
Files and hashes:         1: 3x92TrF8N94ZpyZCm4fts9AHkrI.roa (hash: sNwt0zp1LxcJpyDYVc0cP5yyw+nZAgDz5XkvLtfBLcY=)
                          2: CvN-OPpHrkoiSwngHGByZ8d5Y50.roa (hash: HUmo1OpTkAigfX6oXWD0/+6iPG83y0OXXAaTcOrXIoE=)
                          3: JejL0L9MCBQWF6peNve4-RWHF1w.roa (hash: PXp7lUFrDYOjtMqq8880S6RWrXRSNsHPCPxIMrX1zVU=)
                          4: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: 0vtH2uHvgM8yjKOEEcJ/5o7QwzvpT1thAyo0hybpdU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:c2:92:bb:d8:05:b6:ee:c0:bf:ad:8a:59:03:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Mar 26 00:02:05 2026 GMT
            Not After : Mar 27 00:02:05 2026 GMT
        Subject: CN=80bd468036a7f8922689ff007f1419a2a8c2b6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:e2:f7:34:ad:72:d1:59:06:bb:f7:76:b2:
                    8d:39:38:1a:05:99:54:a5:3d:72:7c:f1:92:cb:0e:
                    7e:5f:c6:81:57:07:b7:42:6d:6a:02:4f:7f:c5:04:
                    15:f4:10:f1:37:a1:a1:92:98:eb:d5:b6:67:78:ff:
                    a5:e6:ae:ec:11:fd:5c:54:1a:8a:00:be:83:ec:bd:
                    da:3a:f7:32:0f:7d:be:65:7e:4b:08:88:9d:7b:6a:
                    be:5a:71:3d:6e:02:37:c4:25:e5:5c:0c:e4:82:02:
                    cf:9e:9a:57:0b:57:24:46:07:22:06:fd:1e:98:f3:
                    94:26:00:2d:28:98:b1:d5:66:c0:bd:f0:22:be:f8:
                    86:ba:f3:a6:e2:4a:fe:1b:b3:6e:81:be:c0:6c:bb:
                    3e:b6:f5:ca:9d:51:e9:c4:54:10:77:df:d6:e4:7a:
                    78:a1:26:f3:87:ea:d7:1a:c7:15:6c:40:26:69:89:
                    1b:42:da:15:15:fa:51:21:15:65:d5:4a:db:ee:2c:
                    4c:21:5d:2e:38:09:fa:c3:ee:e4:6f:01:e7:ad:9d:
                    16:2e:a4:74:fb:e0:7f:3d:3d:1e:e6:0a:6d:b2:14:
                    63:02:96:a1:38:de:9b:77:1f:08:1c:78:94:13:1e:
                    e8:ee:d9:23:44:27:83:e8:8e:26:6f:04:43:99:6e:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:46:80:36:A7:F8:92:26:89:FF:00:7F:14:19:A2:A8:C2:B6:D4
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a9:89:6e:a6:b7:1a:f9:63:c3:a3:de:64:fb:07:f4:df:81:
         5e:ad:c7:88:fc:7f:98:7a:6f:40:10:e5:c1:0a:ba:9e:61:2b:
         30:82:73:46:27:a3:91:8d:26:fc:d7:10:6d:ba:b6:bc:7b:52:
         e0:56:d7:7d:01:8a:c7:e3:64:8b:43:32:b3:bf:67:00:ff:68:
         3b:b6:f9:af:62:c6:ad:db:3d:63:81:1f:d6:8b:4d:2e:ce:8a:
         16:1f:8e:87:77:46:20:10:da:71:00:f5:f1:8f:e3:b1:4c:06:
         a7:05:80:58:0a:1d:a1:6d:8a:06:68:89:c1:fb:04:57:31:7f:
         45:13:5f:ee:c8:1b:8a:bd:ca:d3:9f:57:e5:c1:8b:ff:e4:20:
         a4:74:5c:dd:31:06:43:d6:ed:ec:18:5c:06:87:45:07:d5:a3:
         f0:15:1e:a0:27:02:04:89:aa:97:11:8f:91:c2:c0:d3:12:b9:
         e8:26:f5:ae:db:88:c2:f3:85:25:bb:58:a3:bb:c9:de:9c:34:
         bd:8f:db:6a:0e:dd:d9:c4:9f:08:8b:7b:19:d9:32:2f:f4:09:
         4c:e7:40:da:83:d4:22:c8:24:1e:d7:ca:73:16:91:76:1c:30:
         c4:42:66:35:4c:a1:fc:5e:d6:49:d4:47:be:52:e3:61:23:70:
         d5:ac:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:26 2026 by rpki-client