Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          74hcG9ewq6TqQLT5UH0Bb+hRszMFUocEA5NuEv1iB0M=
Subject key identifier:   0C:E1:09:2F:6A:F4:D0:69:77:B3:18:75:AB:74:8B:6F:73:F1:E4:3A
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       019D284DC8FBAD4B97D3EF41DAAE2BE45504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 04:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:19 +0000
Files and hashes:         1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
                          2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: 09/LB8p6RTOtZqakx7Vm27J5zWZujqpWWMJHx8cWBKU=)
                          4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c8:fb:ad:4b:97:d3:ef:41:da:ae:2b:e4:55:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Mar 26 04:01:19 2026 GMT
            Not After : Mar 27 04:01:19 2026 GMT
        Subject: CN=0ce1092f6af4d06977b31875ab748b6f73f1e43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:aa:57:37:39:5f:cb:18:cc:ff:37:da:3b:
                    7e:6c:41:d4:04:a6:37:25:01:1b:51:a5:fb:73:2e:
                    c2:a9:cd:11:4e:f8:56:69:7b:85:fd:9c:9c:13:c2:
                    c4:09:5c:86:e8:aa:66:b1:74:1f:05:9e:35:6f:01:
                    45:57:2f:e5:58:68:36:4e:f8:54:ce:1c:80:57:3c:
                    4b:47:61:94:4f:e2:4e:ae:22:45:b6:b4:98:57:9b:
                    31:d0:57:92:9f:8b:3a:fe:cc:0f:83:86:0d:b1:65:
                    62:9f:71:ed:b4:98:02:84:91:28:bf:f2:f5:a9:ab:
                    9b:1a:cb:d6:c7:b4:2b:eb:35:ee:0f:d2:5e:a5:93:
                    bf:fe:ce:e6:b3:88:b9:92:93:f5:b4:98:f6:ab:12:
                    66:e4:b3:94:5c:fc:34:aa:bc:72:92:ec:8a:91:93:
                    88:8e:96:6c:c5:98:ae:83:af:f2:38:b7:da:74:c1:
                    63:07:54:04:81:28:35:58:5a:f0:50:db:05:89:0b:
                    d7:b8:bd:96:f8:11:c7:6e:08:5d:8b:e2:d9:b1:1c:
                    30:2e:d4:9c:b7:3c:2e:fe:c9:ad:ee:bf:0c:27:8c:
                    1c:db:72:1e:18:7c:79:ff:eb:80:c5:e8:2e:7f:a6:
                    93:b9:30:a1:4d:4a:c4:96:d3:48:ba:d3:f7:67:e9:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:09:2F:6A:F4:D0:69:77:B3:18:75:AB:74:8B:6F:73:F1:E4:3A
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ad:97:56:63:ed:1b:d6:a6:a4:ed:06:94:d1:fd:90:df:a6:
         29:8c:f7:1b:df:b3:0e:63:98:97:c8:39:62:eb:3e:af:43:a0:
         71:0d:7f:51:90:b6:65:ea:f7:ad:76:c5:67:12:74:dc:9d:1f:
         3a:4e:17:76:b6:d4:20:67:b9:fc:14:4b:59:6a:ec:bf:f4:e2:
         ee:22:24:38:3b:a0:7f:58:75:dd:71:75:33:c6:d0:83:dd:81:
         68:e5:da:1a:25:53:57:64:44:18:73:49:58:c5:9d:31:31:67:
         e7:93:c1:f0:bd:87:21:6f:d4:56:87:a3:55:28:8e:14:fd:12:
         20:fa:8f:a4:18:56:27:17:67:80:95:0d:71:d3:7e:ac:df:c0:
         dd:ce:61:30:0e:75:03:d5:cf:33:30:c3:f0:79:86:d6:37:16:
         26:b7:83:da:94:7e:d3:40:dc:c7:f3:bf:84:c0:b8:64:3c:77:
         e5:7e:5e:14:1a:a5:41:1e:48:3c:3a:77:d2:df:fb:20:c4:dc:
         b5:a8:e4:71:54:9f:74:28:f5:4d:4d:73:e7:01:e9:00:34:d4:
         fa:7f:9a:af:8d:0c:ac:fc:97:89:0e:0a:44:74:50:8d:0e:c0:
         c0:24:11:0f:2c:57:d6:bd:86:cd:77:54:6e:91:7a:ec:fa:8f:
         8c:42:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:30 2026 by rpki-client