Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File:                     LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier:          h50hGUXWU1MRBkyTdOfiQwxws1ExXZPI3dP7YvjdPEY=
Subject key identifier:   C9:2B:09:F1:D2:4B:DD:DC:67:70:06:D6:C1:40:BE:8B:11:19:F4:2F
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer:       /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial:       019D27DF928F440666423AFB35738AF70E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number:          05AE
Signing time:             Thu 26 Mar 2026 02:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:56 +0000
Files and hashes:         1: 1VDI8LOlZotQXEwbdB6SzbnLPM4.roa (hash: l27UrnMvu8nzJebzCXh2pQXrYsMLQuNNu0v0Sq6JVOs=)
                          2: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: t1xUXYKC/vM4hOJ/zimZc/fR/IhT4pojouD9U3TodzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:92:8f:44:06:66:42:3a:fb:35:73:8a:f7:0e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
        Validity
            Not Before: Mar 26 02:00:56 2026 GMT
            Not After : Mar 27 02:00:56 2026 GMT
        Subject: CN=c92b09f1d24bdddc677006d6c140be8b1119f42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:63:3a:78:b8:53:ed:b4:4f:8d:e1:1e:34:
                    4b:15:46:4b:d0:9f:73:de:00:53:d3:05:ad:8a:61:
                    c8:f1:a5:3e:50:6c:4f:7f:d0:18:a7:92:ce:87:4d:
                    c8:cf:57:9a:84:ec:5a:74:63:69:ed:a1:d6:86:c4:
                    3a:5f:07:50:0b:e7:ce:de:d1:5e:2f:0a:8d:07:f2:
                    1e:a6:1c:c0:ad:d8:3b:94:86:26:54:4a:a2:85:ae:
                    3f:72:6a:31:02:d4:2f:19:65:f6:56:24:4d:31:9e:
                    e8:4b:85:14:9a:f5:89:97:9e:7b:08:b7:95:28:21:
                    ba:7a:6e:dc:3f:c4:3c:dd:57:af:8f:f4:86:ea:b5:
                    b7:fb:b7:84:1b:18:96:cb:33:41:cc:70:39:4d:7e:
                    4a:84:90:cd:98:bd:c4:44:53:86:61:96:9b:8d:07:
                    41:fb:81:dc:9b:99:15:46:0b:57:cd:07:55:85:5b:
                    86:a1:ef:13:e4:71:3d:2f:11:74:d9:4c:5b:6d:1d:
                    70:1b:a7:4c:83:6e:da:99:55:32:b5:24:58:24:42:
                    aa:2f:5f:6d:a5:8d:21:b8:ff:99:b5:f9:c2:69:7e:
                    bf:ad:d0:29:7b:a1:b5:f0:30:e4:1e:7f:e2:ca:22:
                    34:cc:87:c0:ce:ee:ef:f0:6f:c7:c4:59:a5:a5:d8:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:09:F1:D2:4B:DD:DC:67:70:06:D6:C1:40:BE:8B:11:19:F4:2F
            X509v3 Authority Key Identifier:
                keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:24:14:0a:ae:52:45:e5:b9:9e:05:5e:f9:03:bb:ef:bb:f0:
         7a:77:fd:d6:8d:b3:d5:d6:87:f2:85:cb:40:0d:5e:a4:3c:8f:
         4d:af:2b:e6:04:33:20:07:77:d6:91:41:31:85:4d:e9:81:00:
         fc:94:66:7d:1a:18:b9:c8:33:57:e3:f8:0f:9c:65:c3:71:cf:
         c2:e9:92:42:cd:d1:ea:da:a2:b8:4b:7a:0f:c6:ff:fd:14:dd:
         a5:00:46:ab:fc:a7:d3:f6:32:8c:1b:d7:6f:18:82:e5:81:f9:
         0c:41:b1:59:8a:19:ca:98:98:2e:19:77:20:ad:95:0f:9d:6b:
         87:23:6a:fd:fb:db:29:78:be:8d:be:8d:68:0b:65:b0:b1:3b:
         40:ae:81:ad:07:15:bb:59:49:51:72:9e:1f:f3:b9:d7:41:71:
         fb:ff:57:c8:d4:fc:c8:10:8f:38:17:cb:bc:2f:2a:10:5d:40:
         31:fc:4e:f8:e4:31:ad:f8:1c:f8:36:f7:e8:0d:4f:3d:b3:74:
         b7:7e:0b:21:88:70:fa:f4:20:c0:63:20:71:a6:0f:26:5f:97:
         0b:09:e9:93:0e:d2:9d:aa:c1:1a:e0:3b:67:e4:eb:3e:eb:db:
         da:e3:40:8e:1a:8f:ea:95:6f:59:72:24:08:1d:2c:f0:58:1a:
         83:7e:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:13 2026 by rpki-client