Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          nTInEVepvtH+rDzHEdW3Gn0V/J4GM1QpeiL5pL//2J4=
Subject key identifier:   E6:A3:2D:FA:DB:7F:1B:A8:EA:65:A9:1D:05:FE:00:15:86:98:7C:10
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       019D2704297F0CA181B3EE7018C50957D7E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 22:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:17 +0000
Files and hashes:         1: Bb9QyEQzV03EaTR7wLylrCdBBvA.roa (hash: ajzUK2Os2Vg3pTgwsENMtTaJGe2FDCIo+i+dlQF9074=)
                          2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: c1MvajEBc6nyIgGbhjCoF3Do7AHChkyTusZdSIu5ojI=)
                          3: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
                          4: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:29:7f:0c:a1:81:b3:ee:70:18:c5:09:57:d7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Mar 25 22:01:17 2026 GMT
            Not After : Mar 26 22:01:17 2026 GMT
        Subject: CN=e6a32dfadb7f1ba8ea65a91d05fe001586987c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:e8:80:98:dc:71:31:e6:d1:9e:b5:35:32:
                    dd:ed:06:eb:a9:53:46:d9:3f:0f:98:a6:be:0a:d0:
                    ad:bb:c8:53:27:3b:ba:68:ed:01:f6:9a:f1:7c:57:
                    b9:e9:0b:6f:00:44:14:a6:b2:54:7d:85:90:94:9e:
                    7c:ff:5b:91:a2:02:49:e8:90:16:2c:a6:33:0a:32:
                    ed:4c:90:57:41:80:d5:4f:fc:88:9c:ae:83:9d:4c:
                    5d:28:ba:40:7f:10:8f:99:1f:e7:50:6f:ae:2e:fe:
                    27:86:27:01:0b:82:ba:5c:93:87:8d:7b:e3:4c:8a:
                    2c:fc:d4:d8:d3:be:83:f1:fe:82:0d:34:38:c7:fe:
                    4a:9c:5e:69:a7:f2:f0:cd:85:99:36:52:f0:27:98:
                    2d:1f:fa:72:3d:2b:60:04:ac:db:52:ff:43:9a:5c:
                    df:b6:f4:db:22:92:4f:e7:78:6d:0e:b1:28:34:29:
                    05:08:77:3b:0d:61:1e:8b:e4:27:04:73:5e:61:fc:
                    85:ca:98:e1:66:b7:47:a2:1c:46:45:a0:e8:3a:7c:
                    6d:76:d2:ec:84:2b:91:2e:07:d0:c2:f8:af:da:80:
                    4a:7f:a2:b5:c7:cf:c0:3e:03:46:ff:f6:af:8c:98:
                    07:e7:af:ad:a7:29:99:f8:4c:19:f5:eb:00:9e:fd:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A3:2D:FA:DB:7F:1B:A8:EA:65:A9:1D:05:FE:00:15:86:98:7C:10
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:d1:e4:bf:5a:1d:95:3e:32:a9:e5:32:45:44:9a:d6:44:
         e9:2f:a4:1d:29:f5:6a:9c:a3:26:97:4b:f9:75:d2:18:0d:42:
         1b:eb:92:96:8d:e4:b4:a6:32:3a:94:c3:8b:74:70:ee:c2:a0:
         18:5a:5d:5e:d7:92:32:8f:48:e4:33:56:16:8f:6e:a8:a6:84:
         58:f4:94:e8:d4:29:2f:fd:db:eb:14:79:cb:0a:59:56:24:2e:
         10:68:ef:be:c4:35:a9:98:1c:3e:3f:f3:54:ba:82:6f:64:f9:
         d0:25:bb:26:39:fa:26:59:6c:30:79:7b:d1:cb:96:33:0b:86:
         ea:43:0b:68:8b:f5:47:b2:01:84:d4:8b:b4:8a:73:b1:53:59:
         81:5a:67:48:53:49:7a:4f:83:f5:d8:d0:93:1e:18:92:22:1b:
         5c:d9:7b:2b:3b:7e:23:3e:8f:2b:5b:fc:84:73:da:ac:92:3e:
         c0:13:96:6c:0e:6a:24:3c:5f:f3:d6:54:e4:47:86:e2:28:97:
         3c:aa:1c:fc:64:ae:51:b0:65:c4:7c:ab:de:ab:d0:07:02:0f:
         7a:ec:a5:b2:82:eb:5e:8c:f1:ff:b1:78:54:85:4b:6c:80:57:
         ce:cb:dc:0d:65:ac:be:29:78:b1:47:1c:ed:91:c6:da:20:18:
         7a:a2:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:33 2026 by rpki-client