Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File:                     lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier:          r+IOv/qFK85osHJ/5Vs7j+rhhLf6d1F0XlSbIwkutNs=
Subject key identifier:   B3:79:54:31:3F:CB:05:50:C0:D2:76:CD:84:0C:B5:22:B3:D1:83:03
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer:       /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial:       019E1E356A418416D79F2D9B2C7CE17A1670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number:          0E7E
Signing time:             Tue 12 May 2026 22:01:17 +0000
Manifest this update:     Tue 12 May 2026 22:01:17 +0000
Manifest next update:     Wed 13 May 2026 22:01:17 +0000
Files and hashes:         1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
                          2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: QXYxhWF1LQ/7km8cjC0+WXiXQ5UKcgnUkO6zi6TwJq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:6a:41:84:16:d7:9f:2d:9b:2c:7c:e1:7a:16:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
        Validity
            Not Before: May 12 22:01:17 2026 GMT
            Not After : May 13 22:01:17 2026 GMT
        Subject: CN=b37954313fcb0550c0d276cd840cb522b3d18303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6a:82:4f:4c:3e:b8:05:bd:52:c7:85:71:45:
                    44:1a:bb:9c:82:6c:9b:8f:c9:7d:7c:5c:5c:d0:3b:
                    a8:b3:8e:8a:f9:d1:a3:63:b5:41:e5:f2:0e:94:43:
                    54:c9:59:b1:f2:16:2d:ed:f4:8d:da:8b:7d:4a:bd:
                    d4:9f:7f:18:02:6d:e6:fc:a4:d4:2f:2a:3c:c4:eb:
                    06:cd:1e:c2:37:d2:1b:56:24:84:61:8f:7b:be:79:
                    3d:57:ef:ca:c4:cd:ad:a7:0f:bd:76:cb:63:eb:18:
                    a0:5d:ee:c4:62:a1:c9:af:bf:9f:6e:e2:cd:2e:d6:
                    62:ff:c6:33:4e:23:42:3d:16:55:60:e5:ab:88:a7:
                    17:1c:7d:c5:79:d3:79:30:10:33:de:50:dc:f0:f5:
                    28:fd:18:e9:0f:8c:83:5b:52:5b:72:02:8a:eb:5a:
                    01:92:9b:1e:33:58:2e:51:bf:6c:0a:1e:50:da:38:
                    64:cf:32:03:53:0a:d6:0b:c3:ca:bf:ed:82:60:84:
                    2b:e4:75:28:ce:39:3e:ee:df:db:18:3f:64:79:1a:
                    8a:87:8a:e1:7d:c3:2b:9f:b5:35:78:45:93:b3:b7:
                    62:10:28:26:db:92:0d:9e:23:51:c0:ce:4c:1d:b0:
                    3f:15:26:01:7d:1d:39:3b:e2:37:3b:e4:00:cd:c6:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:54:31:3F:CB:05:50:C0:D2:76:CD:84:0C:B5:22:B3:D1:83:03
            X509v3 Authority Key Identifier:
                keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:9e:8a:80:71:34:31:a0:f8:46:ff:2b:ae:00:ba:1c:ad:
         87:a6:f7:31:54:5e:ed:7e:85:7e:fa:47:1c:60:df:2b:27:90:
         ee:70:fc:20:be:db:9f:07:54:91:af:33:0f:a2:b9:e3:6a:b1:
         3a:77:4e:88:a9:9b:4a:5b:7a:e3:04:4b:18:d0:27:35:4a:69:
         ad:2e:e5:5f:46:98:a8:82:99:69:cc:53:31:4d:e8:b3:ad:fa:
         e5:d5:56:f8:de:e2:a0:0c:8a:da:cb:eb:3d:ca:6e:e5:f6:64:
         a5:e5:4b:f4:6f:ee:d4:d5:7b:2c:ef:cb:bf:87:9a:60:8e:1c:
         26:cf:87:ab:93:67:54:08:16:dc:bf:eb:06:42:e5:66:3e:2d:
         c6:f6:f1:41:9a:fa:9c:d4:2c:cb:c4:ce:3a:8c:14:69:74:aa:
         3b:4e:05:99:d8:8b:8b:6d:44:b3:d6:8c:ac:63:e8:81:90:2e:
         4f:73:13:a2:78:49:8e:60:82:59:53:43:c7:4e:d8:b8:c6:4d:
         06:a6:37:55:d4:64:08:23:af:7a:de:ab:5a:b0:61:34:88:a4:
         65:5b:2b:54:82:7c:02:3b:db:3d:4d:35:10:67:cb:55:3e:a7:
         73:be:f8:00:6a:e9:53:a4:2f:36:23:30:e7:20:2f:cb:79:b3:
         34:60:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:53 2026 by rpki-client