Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File:                     LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier:          FFFPC/sjl3snz1FZGAsdXapKLDwwI80yf6j6KblEllM=
Subject key identifier:   3F:07:FD:B4:44:DA:75:31:DB:12:FC:9E:FA:AC:DB:BB:7C:A5:20:88
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer:       /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial:       019E1DFEA4D5B01F623BEA36E554D446B054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number:          14D7
Signing time:             Tue 12 May 2026 21:01:28 +0000
Manifest this update:     Tue 12 May 2026 21:01:28 +0000
Manifest next update:     Wed 13 May 2026 21:01:28 +0000
Files and hashes:         1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: B/Vx5NuFvMe7b7/jybldKm+8dbdBvAY5MEMceoxb4do=)
                          2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:a4:d5:b0:1f:62:3b:ea:36:e5:54:d4:46:b0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
        Validity
            Not Before: May 12 21:01:28 2026 GMT
            Not After : May 13 21:01:28 2026 GMT
        Subject: CN=3f07fdb444da7531db12fc9efaacdbbb7ca52088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:db:68:5f:74:a1:5a:87:f6:68:59:bf:7d:
                    21:f7:12:99:32:71:69:09:9e:4d:ca:3a:76:47:4d:
                    8c:a3:fa:bb:19:bb:9a:d1:b2:e5:47:43:42:2a:de:
                    c7:9e:4d:89:08:df:58:9e:f2:00:29:91:e7:52:a8:
                    5e:0b:b7:e2:45:95:72:f9:be:3f:9d:f1:cc:6a:b0:
                    9f:b6:dc:d0:9b:3c:e8:47:f7:32:86:11:1f:7e:86:
                    7e:03:21:fc:5c:fc:08:60:dd:e5:4f:ed:4d:b7:34:
                    61:36:34:94:d3:85:6c:fd:52:0f:33:5e:d2:d5:57:
                    b3:3e:f6:93:ba:fc:5c:0b:ac:9b:0d:ce:51:c7:62:
                    3c:0c:a3:a1:2e:c7:c2:2d:0b:83:da:88:ea:b6:44:
                    23:ea:fe:f8:b5:59:49:b3:f5:bc:a6:eb:77:ac:06:
                    98:78:a7:9f:72:78:5c:b2:42:cc:f0:24:03:4a:8e:
                    63:77:18:0e:62:e4:ad:16:9e:00:7e:99:6b:96:86:
                    24:85:c2:8d:1e:27:5a:53:c3:7b:4a:f2:a8:f0:53:
                    9b:ef:7c:6c:55:d7:3e:19:59:dd:76:50:c8:20:17:
                    44:36:75:ae:b4:40:45:9f:e0:e1:31:47:bd:a0:93:
                    e6:cc:81:0b:0b:fb:43:29:1c:ff:dd:c1:47:b8:f1:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:07:FD:B4:44:DA:75:31:DB:12:FC:9E:FA:AC:DB:BB:7C:A5:20:88
            X509v3 Authority Key Identifier:
                keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:dd:b2:23:ce:8f:54:21:8f:ac:19:e7:7d:64:22:b3:60:
         1e:d0:90:b5:2a:0b:a3:61:cd:b3:ef:7d:4a:08:35:43:a8:82:
         06:89:ba:8d:96:10:13:eb:d0:7c:86:b5:07:55:0b:55:ea:5d:
         64:c0:05:1d:25:c3:f3:6c:03:96:a7:a0:83:b1:b1:67:f2:c5:
         76:09:d7:be:73:84:1b:e5:3b:b4:48:53:2a:90:09:29:59:97:
         8c:d0:f4:8d:f7:f2:21:4f:c3:50:ca:d0:aa:87:ea:8b:1c:c7:
         7a:e5:72:4a:a8:76:75:07:c2:e8:b3:6a:3f:13:69:1e:6b:5a:
         ba:b6:c5:15:05:95:5f:a9:9f:f8:82:fe:07:65:07:d8:a9:17:
         8e:ed:f0:3b:26:c5:bb:39:73:99:e2:ab:b7:55:ff:ab:88:4a:
         50:01:2e:72:14:48:8d:c1:3a:5f:ff:23:f8:35:30:40:ec:43:
         3c:9c:6f:f7:f5:08:3f:b4:cd:68:19:ef:57:3d:3d:5a:2d:e4:
         fb:e4:05:00:79:66:62:29:fd:72:2b:7e:06:f2:7a:e3:f0:f7:
         32:cc:05:be:72:65:f4:09:23:d8:69:38:db:5e:16:e1:f7:21:
         92:f9:4b:88:b9:ae:01:d3:e4:16:95:3a:78:27:0e:05:8a:44:
         bd:5a:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:13 2026 by rpki-client