Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File:                     lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier:          +AWztUclbRM81KvuHHnqWA8GScisani0w9MUZ2GrzHU=
Subject key identifier:   FE:24:A9:C6:1A:D2:27:8F:5C:AF:46:97:14:7C:ED:22:FA:F9:34:CB
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer:       /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial:       019E1ED9DF0BD137A4CD2BE107AF5A3C81A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number:          0424
Signing time:             Wed 13 May 2026 01:00:55 +0000
Manifest this update:     Wed 13 May 2026 01:00:55 +0000
Manifest next update:     Thu 14 May 2026 01:00:55 +0000
Files and hashes:         1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
                          2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
                          3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
                          4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: f5y+pK17if57ecIYcI3thcWkomzPQLhK1PHFWY/mVc0=)
                          5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:df:0b:d1:37:a4:cd:2b:e1:07:af:5a:3c:81:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
        Validity
            Not Before: May 13 01:00:55 2026 GMT
            Not After : May 14 01:00:55 2026 GMT
        Subject: CN=fe24a9c61ad2278f5caf4697147ced22faf934cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:97:15:cb:94:84:b2:7f:86:ee:d7:81:c3:
                    8d:75:0a:66:14:d9:e2:a8:95:b5:25:56:f7:86:4b:
                    4a:81:1e:27:1f:f1:b9:12:b6:a0:7c:d2:b4:ea:de:
                    bb:a8:55:c8:30:af:b9:f6:a4:1a:e5:32:5e:e3:8d:
                    eb:a9:4c:95:9d:9d:a3:6e:91:e1:87:bb:a6:aa:68:
                    ce:8a:66:72:09:4e:0f:a2:f3:b7:97:2f:13:ce:2f:
                    e7:60:a4:4e:f4:3f:23:73:de:ae:75:fd:1b:ef:b6:
                    89:53:77:8b:c2:27:87:96:a2:fc:1a:60:11:45:21:
                    a4:b7:46:e8:8f:cd:9c:5b:a5:14:dd:41:8f:e0:5b:
                    a5:eb:1b:65:65:d4:35:c7:c7:61:40:fb:11:79:2b:
                    ad:92:2a:f5:24:66:7d:70:fb:b1:84:15:b2:14:3c:
                    41:d2:90:40:2e:7e:7e:43:c8:4c:54:da:dd:bc:7f:
                    d4:60:30:e0:b5:a3:a1:d8:bc:d5:19:34:74:69:a7:
                    cf:21:54:e6:dc:70:5e:c7:75:dd:e4:0d:24:3e:43:
                    94:5c:22:ce:63:d3:f1:ac:fe:6c:f0:a0:e9:c3:e7:
                    78:54:01:6b:06:14:52:6f:44:34:59:78:4f:c4:ab:
                    92:29:ce:17:ef:9c:bc:d0:bd:bb:79:88:cf:32:85:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:24:A9:C6:1A:D2:27:8F:5C:AF:46:97:14:7C:ED:22:FA:F9:34:CB
            X509v3 Authority Key Identifier:
                keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:67:11:f3:fe:42:f0:56:c7:fb:84:28:5a:6f:95:b1:bf:f6:
         44:56:bd:60:b2:2f:e7:5f:85:93:81:e8:6e:ef:31:4c:c1:f2:
         42:23:3d:a1:d8:6b:a9:cd:e2:24:4e:f1:ba:62:0d:14:ff:41:
         d9:ed:96:39:3f:cf:7a:70:9f:53:33:af:61:70:3a:52:9d:8a:
         ad:c2:e9:cd:8b:a6:18:27:90:95:27:32:01:f9:fd:76:df:fb:
         b7:ab:03:e5:8e:a7:18:9f:e8:b3:80:84:30:c5:8b:62:88:ee:
         e9:f7:26:5c:54:85:e6:7b:a0:0f:0f:8d:83:75:8a:f0:cd:98:
         25:20:6b:90:5a:ef:c5:c3:f6:5a:53:94:53:d4:5c:a4:9c:8f:
         9f:a1:8b:6a:91:f2:a7:84:83:0c:f0:46:0b:0d:fc:a0:ba:3b:
         20:41:b2:ec:76:bc:3f:2d:8d:ce:89:50:0d:3a:1e:63:5f:ff:
         20:14:fd:05:20:20:95:85:2d:08:07:30:90:b5:87:d4:d9:52:
         ad:a3:dd:80:9f:6d:f2:a6:77:b4:22:39:6e:52:27:b9:d5:9e:
         60:42:8c:09:3a:20:b4:00:23:58:a5:b1:25:aa:92:ba:76:f7:
         b4:98:b0:dc:ac:da:a2:f4:ad:c3:74:64:35:01:e6:30:3f:d9:
         54:1c:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:03 2026 by rpki-client