Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File:                     lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier:          GnAkSGNHnjDPZD7qThofXfDEdGNKeDfho7v4k8KudFg=
Subject key identifier:   95:DD:67:98:45:14:AE:5C:C2:1C:2B:13:EA:6A:93:06:4F:6C:9F:23
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer:       /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial:       019E1F47F0449FAF6E4927444009F0AED7FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number:          1888
Signing time:             Wed 13 May 2026 03:01:08 +0000
Manifest this update:     Wed 13 May 2026 03:01:08 +0000
Manifest next update:     Thu 14 May 2026 03:01:08 +0000
Files and hashes:         1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
                          2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: JIjbKKb2dU48esF5kAeX7/L6VY0sBVTtcoh11WtBQnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:f0:44:9f:af:6e:49:27:44:40:09:f0:ae:d7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
        Validity
            Not Before: May 13 03:01:08 2026 GMT
            Not After : May 14 03:01:08 2026 GMT
        Subject: CN=95dd67984514ae5cc21c2b13ea6a93064f6c9f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:ae:c0:46:01:d0:05:96:69:ed:07:e9:3c:
                    67:b3:70:a5:90:e6:dc:f7:6f:da:92:5e:8f:ce:cb:
                    80:47:7e:e0:83:a4:ec:43:64:8c:45:4c:27:ed:c8:
                    ab:10:05:ff:98:d5:75:d3:f0:e2:c4:df:5b:e5:f5:
                    3a:02:59:55:77:cd:a5:5d:9b:d9:71:8b:5b:8b:e9:
                    2d:11:b4:ae:11:35:4f:a8:9c:15:0a:a6:c7:1b:58:
                    f1:5b:d6:e6:e9:ef:04:0f:e6:ee:df:f6:6a:e1:c6:
                    b5:69:15:9d:38:aa:12:32:46:02:44:d2:23:f5:d3:
                    50:3c:81:74:35:41:95:3f:8f:b2:53:00:c8:45:53:
                    2f:8c:58:ce:ee:9b:a5:ba:9b:ae:be:a9:a3:d1:38:
                    e0:98:b7:a2:34:ca:34:91:9b:45:23:ec:cf:ac:af:
                    98:1d:be:c6:e6:d9:28:f5:36:02:3c:80:76:93:c6:
                    2c:d6:3d:a3:f2:94:c4:12:ae:d4:96:e8:27:cb:1e:
                    87:df:1f:e7:65:e6:fb:be:4b:e9:39:a3:cb:4b:67:
                    ce:59:21:55:45:6a:b3:0b:e7:38:9d:ed:a9:1d:86:
                    73:0e:6b:05:91:44:b0:ba:8a:ad:c2:c6:ba:33:e9:
                    7b:11:a8:8a:39:e9:af:cb:50:44:68:bd:37:15:2d:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DD:67:98:45:14:AE:5C:C2:1C:2B:13:EA:6A:93:06:4F:6C:9F:23
            X509v3 Authority Key Identifier:
                keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:4b:b9:2a:b9:0c:37:bd:08:01:fb:27:62:48:6d:95:d5:
         43:f6:b7:e8:3d:99:ab:e4:84:4b:0f:35:b0:cd:a6:56:e6:fe:
         e3:87:01:57:90:5a:bc:0c:e6:7c:76:b0:de:28:5d:37:4a:d7:
         b7:20:e3:db:a8:fd:df:5b:91:25:07:6a:66:89:76:08:c3:ea:
         5f:19:ef:0c:ad:eb:0b:91:16:16:64:7e:f7:6b:f5:af:4b:e1:
         fc:e8:b5:1d:d8:1f:58:ea:c0:13:e1:39:14:cb:5f:da:95:6b:
         b2:87:7c:0d:1e:74:50:96:64:f5:ab:d8:38:f2:3e:56:51:cf:
         d6:9f:51:52:35:4a:7a:81:4e:d5:b3:c2:54:ec:ab:ac:a9:88:
         6c:cd:4b:f0:7e:28:da:73:a8:e8:77:b8:83:f0:25:e7:fe:1b:
         7a:01:ad:13:3f:89:c8:d7:1a:d2:d4:76:a2:72:f8:41:f9:71:
         f5:02:0b:7f:bc:49:52:f4:b2:8f:a5:86:46:9d:bb:94:5f:66:
         8c:ec:5e:2b:0a:7a:f8:f0:9d:f8:a0:61:d6:ee:49:5a:1f:6b:
         ea:79:ef:e9:c7:03:ce:0b:42:71:d1:4c:44:fc:66:82:5e:a3:
         28:40:18:e5:b8:e1:d2:e0:de:7e:3f:f1:c7:38:21:99:e5:b0:
         69:44:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:56 2026 by rpki-client