Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          jMZ2cSy4GhwRwLh5sbpDl4244LbMLeRJfVBmEnwugew=
Subject key identifier:   4A:1A:97:4B:76:26:00:5E:7E:A7:ED:E9:E9:8C:E6:2F:A3:C4:18:50
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       019D2628851B3448D6F070EE36D680AB9C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          17DC
Signing time:             Wed 25 Mar 2026 18:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:22 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: RZlHDQkGU90u9VfvRhHbfXL6wAroTeeXy/CHSVoPzRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:85:1b:34:48:d6:f0:70:ee:36:d6:80:ab:9c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Mar 25 18:01:22 2026 GMT
            Not After : Mar 26 18:01:22 2026 GMT
        Subject: CN=4a1a974b7626005e7ea7ede9e98ce62fa3c41850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:6f:68:12:70:f4:0a:98:f1:b1:d4:c4:b6:
                    8b:d5:e7:4f:82:0d:21:fc:ea:5d:1e:15:d9:46:85:
                    38:ec:da:f2:e1:a9:de:60:22:bb:04:37:14:df:12:
                    a8:67:65:0a:87:3f:b7:06:61:48:80:b9:16:a3:68:
                    a8:b1:dd:ab:3a:0b:2e:08:51:d4:7d:55:85:21:55:
                    94:93:c1:43:c5:7a:3f:d7:9e:51:cf:e7:b6:59:de:
                    b5:e0:39:8d:11:5b:b7:5f:c1:e7:60:c0:48:14:65:
                    f8:96:3e:c7:94:7e:31:f2:61:15:24:ad:ad:19:62:
                    55:ba:65:c8:eb:8a:66:41:01:72:78:e8:dd:2d:bd:
                    f8:d9:e4:06:23:27:a4:80:59:d4:86:2e:ed:ef:f8:
                    83:b8:9d:e8:6b:01:04:41:43:3a:71:80:6d:2f:ad:
                    5a:38:08:94:4c:eb:5e:d3:dc:56:4d:67:22:f2:ea:
                    ea:bb:5f:76:a2:8f:97:94:50:4a:c1:69:90:17:a7:
                    7f:69:1a:e9:d4:97:a7:6a:34:e9:08:32:0c:25:bd:
                    16:b8:30:e6:63:47:93:31:22:d7:47:9f:fb:70:85:
                    40:66:da:f6:65:5a:d7:12:d0:91:2e:d2:20:be:0a:
                    d3:91:fe:c0:7a:69:e7:79:7d:20:1d:0d:0a:44:b3:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:97:4B:76:26:00:5E:7E:A7:ED:E9:E9:8C:E6:2F:A3:C4:18:50
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:16:7d:8c:04:c5:84:5f:dd:8b:d8:9f:1c:40:b1:bb:cc:40:
         8e:7e:71:bd:78:18:b3:49:76:a3:ab:e0:0b:7e:18:ac:60:60:
         73:98:c1:f7:6f:d4:39:c0:55:da:fb:f0:f5:9a:d6:54:90:6a:
         27:94:9f:3e:c2:07:27:2c:8c:ed:ed:73:86:94:0e:86:d7:0a:
         84:9e:49:20:74:16:1a:3c:e3:52:eb:d2:9c:39:2d:b0:f9:b7:
         d9:44:bd:21:29:70:68:53:03:d6:0d:d5:60:96:56:38:8a:5f:
         3e:06:bd:0a:54:f2:aa:42:51:ae:92:ba:8a:80:05:2b:ef:df:
         58:99:5f:a8:e1:92:e7:90:a6:f4:d7:46:9f:af:d3:97:af:21:
         bc:a9:55:98:9d:7a:b9:f7:75:fa:ad:8b:3e:6a:e4:f0:65:ab:
         81:68:fa:1f:1f:b3:6f:7c:6e:f9:99:28:c6:24:f5:e1:d7:c2:
         b6:31:55:14:65:f6:a6:69:1b:b7:0f:42:92:f0:2f:9e:ea:ee:
         f7:22:f4:10:b2:64:8e:9f:f4:b1:e5:8a:ba:48:4e:2b:01:70:
         06:8c:6d:75:d3:d6:80:7c:b9:38:ca:c2:16:64:69:13:29:11:
         b1:12:d0:69:55:3d:84:e6:70:64:3e:58:16:14:e0:4e:56:36:
         9f:0d:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:27 2026 by rpki-client