Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File:                     LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier:          d2+KUUWcnfDfKTA/QZOMVuuHSR+j00yViqvJDOsIEXY=
Subject key identifier:   5D:D8:E2:F1:0F:DA:93:5E:58:26:7B:77:29:DE:3E:F3:B8:D2:54:12
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer:       /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial:       019E1FB58EE13239380467773B55C14E32C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number:          08ED
Signing time:             Wed 13 May 2026 05:00:52 +0000
Manifest this update:     Wed 13 May 2026 05:00:52 +0000
Manifest next update:     Thu 14 May 2026 05:00:52 +0000
Files and hashes:         1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: HY50qo5CcKEs1io0ywd0bxSSQYJJ3AMtDpHQcRebkPQ=)
                          2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:8e:e1:32:39:38:04:67:77:3b:55:c1:4e:32:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
        Validity
            Not Before: May 13 05:00:52 2026 GMT
            Not After : May 14 05:00:52 2026 GMT
        Subject: CN=5dd8e2f10fda935e58267b7729de3ef3b8d25412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:c7:07:4d:68:49:9c:cb:2d:10:70:2b:14:
                    a4:51:35:b3:01:b8:76:0b:d5:0a:58:39:3f:f1:83:
                    78:4a:74:26:1d:ea:7e:83:8e:82:eb:04:49:bd:d3:
                    08:6b:c9:16:ea:3e:b2:de:9f:0e:e5:bf:9f:96:eb:
                    45:42:c9:29:f4:54:34:77:1b:0d:79:bf:3f:27:5e:
                    ae:54:a4:3c:ff:68:2b:4f:c0:32:c1:ff:35:0b:a2:
                    f9:6e:59:d1:24:46:a9:2c:cc:07:ff:ae:48:59:ff:
                    ef:42:7c:80:6a:30:93:c2:0d:93:02:ab:da:95:5f:
                    73:dc:5d:fc:20:8d:7f:55:24:f1:b4:94:2c:54:8e:
                    53:18:f3:0a:2b:84:3a:7d:92:6f:3a:89:4a:72:8c:
                    a8:6a:75:64:0d:86:fb:8b:1c:24:e2:82:f4:c3:b3:
                    9f:15:01:12:14:ff:97:9c:65:52:74:ec:92:e6:dd:
                    bc:04:47:74:d3:eb:0e:af:c3:04:32:02:d1:2e:d9:
                    c0:e6:9c:b1:68:f5:cf:12:f3:e8:a2:bf:35:9a:76:
                    7a:8d:67:63:a3:03:a7:2c:09:69:c9:3d:ed:6a:46:
                    86:74:55:2a:6e:02:59:13:10:a7:cd:a9:77:36:bd:
                    df:3e:52:d1:f8:3a:a7:7f:06:d8:ce:fd:18:32:72:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:E2:F1:0F:DA:93:5E:58:26:7B:77:29:DE:3E:F3:B8:D2:54:12
            X509v3 Authority Key Identifier:
                keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:80:55:5b:e6:dc:15:3b:d1:a3:a4:9f:fc:21:37:1d:59:
         40:ad:aa:e1:c7:ed:69:ee:70:53:c0:5d:3f:31:26:2a:5a:06:
         a6:13:1a:60:55:5c:a8:28:cd:ff:0b:95:d4:39:71:3f:3a:29:
         9c:18:7e:c8:7e:70:1c:21:01:7e:06:5d:2a:a8:03:05:98:23:
         5b:f5:e1:cb:62:a9:a3:2b:0e:fc:d4:5c:47:dc:b8:7d:98:7a:
         b5:fa:99:ae:2c:c6:eb:57:f5:30:a4:d5:c6:8f:d9:7e:ca:ab:
         e4:88:70:99:47:46:df:04:79:3f:ea:ba:3f:3c:51:eb:b6:e1:
         4a:93:c5:55:1a:95:25:20:b8:f3:bb:5d:fc:ab:c8:e7:34:20:
         3b:73:d2:af:6b:80:92:e0:25:5d:f6:d5:19:cd:51:ca:e6:97:
         ff:46:01:21:f8:73:4b:70:9b:e6:7c:9e:78:ab:fe:91:d8:74:
         b2:cc:cf:27:f9:20:38:c5:ff:2f:bf:1a:e7:41:ea:9f:68:d2:
         56:87:ab:2a:48:94:27:df:00:84:c4:b9:1f:b9:f6:26:fe:e4:
         c0:93:be:90:6b:24:1f:aa:82:68:d1:90:cb:0b:81:9b:c3:f8:
         ba:e2:fc:c4:6a:02:a5:4b:4f:ec:9c:10:ae:07:e8:95:e2:8d:
         10:78:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:38 2026 by rpki-client