Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File:                     LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier:          vNVdJizwgKkMM1qlh9zbKgAFuPM9uvfeSjRAy9Cpans=
Subject key identifier:   93:5E:C5:A0:D9:DB:EB:A0:19:CE:E7:4A:F5:A9:78:A4:C4:99:E0:DE
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer:       /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial:       019D25F159A0C8B40786FCED4B545D5B7CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number:          080D
Signing time:             Wed 25 Mar 2026 17:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:07 +0000
Files and hashes:         1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: qNsjX/0QdQDqesw+bgAepZLNxQUyWxs/ByP3J5yvRiM=)
                          2: ZyCMXfbtNuXumIzCS12JtYABWa8.roa (hash: FCS7VDdR2sOQaENYtuEq5+AVcoh+zteoO7fT7vMr+Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:59:a0:c8:b4:07:86:fc:ed:4b:54:5d:5b:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
        Validity
            Not Before: Mar 25 17:01:07 2026 GMT
            Not After : Mar 26 17:01:07 2026 GMT
        Subject: CN=935ec5a0d9dbeba019cee74af5a978a4c499e0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:45:ff:f4:f6:9a:28:20:71:6b:03:30:ca:
                    ce:9e:12:8e:9b:f6:da:28:bb:88:f1:53:89:17:1b:
                    b9:90:83:79:4c:b3:1a:07:08:a1:c1:0e:3e:28:b0:
                    82:80:3f:c5:9d:77:e7:45:7b:86:d0:d7:07:e6:77:
                    bd:f4:73:ca:c6:f7:70:61:dc:d5:52:7d:c3:62:30:
                    b0:6a:1b:5e:0a:d3:69:91:4f:27:39:53:c9:5e:5f:
                    66:1c:6c:e7:f9:e5:0f:1e:22:a4:b2:89:ed:0b:1a:
                    20:5d:4a:2f:21:ba:96:1a:87:4a:00:b0:18:5d:bb:
                    b3:ca:fb:e8:fa:53:5b:ec:a3:9d:b4:e5:ad:72:58:
                    a8:c3:d5:0e:6d:97:fd:aa:46:f3:80:50:15:18:b3:
                    7b:87:8f:81:53:ae:92:8b:65:24:e0:de:3f:02:61:
                    2e:62:1e:57:8b:13:2f:5d:70:6b:0b:2a:74:a8:cc:
                    da:82:f0:1f:f6:3d:0c:44:64:6b:90:e3:94:74:48:
                    7a:94:3b:15:bb:93:bf:48:c4:c1:6b:42:5d:a7:44:
                    8e:75:4d:b9:53:f3:e8:57:cb:b8:e4:49:86:c2:cc:
                    b9:59:b1:14:63:e3:a7:8b:4b:56:59:81:60:9a:a4:
                    10:22:73:36:a5:b3:d8:53:01:5c:52:4e:a9:4e:43:
                    d6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:C5:A0:D9:DB:EB:A0:19:CE:E7:4A:F5:A9:78:A4:C4:99:E0:DE
            X509v3 Authority Key Identifier:
                keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:c6:9c:a1:a5:d2:9a:27:60:70:6f:74:55:b0:23:34:5a:
         ca:0c:33:8b:d4:46:ab:09:4b:a4:a5:05:60:60:f1:9a:9e:60:
         2f:ba:56:1a:3d:61:04:e0:70:c0:bb:da:2e:96:f7:47:c7:34:
         c4:38:40:5c:05:86:76:f3:4a:8a:db:9c:6e:1f:95:3a:87:03:
         3a:9f:31:d0:e2:a6:b7:45:7c:54:05:a5:c0:30:a4:45:20:8c:
         22:ba:2a:c2:d5:50:1b:9d:c0:1d:6a:ef:61:91:34:ad:d4:f7:
         5d:6b:86:8b:d2:95:12:71:9b:c8:fe:69:81:01:aa:c7:69:73:
         69:1d:97:06:c7:c6:67:43:19:52:96:c2:b8:d4:78:1a:f4:73:
         ab:7c:ff:6b:2c:c3:4a:ac:a9:55:cc:c4:8f:ee:a8:d1:21:33:
         35:e1:6d:6c:48:cf:d3:b0:c6:95:be:0c:e8:48:26:15:9e:56:
         18:69:9b:24:3a:a1:17:02:ba:26:c6:83:4d:18:42:a6:7e:f7:
         e3:d8:47:be:14:3a:e1:2f:66:a4:64:b4:6f:0b:5b:3a:df:28:
         44:0e:45:cd:a1:6f:f9:3d:f4:7e:df:f2:fc:44:ae:43:1a:42:
         20:91:73:31:ce:05:9a:a5:22:24:bd:31:9c:66:b5:30:6f:63:
         0d:73:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:53 2026 by rpki-client