Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File:                     v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier:          B2j658u2kRGf+fIz04F1/zXwU0es05z+AB9tAwkDpWY=
Subject key identifier:   0A:40:8A:50:F7:D9:ED:FD:91:08:49:D4:F6:73:41:69:2F:37:9C:9F
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer:       /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial:       019D2B85A4498AAE9A788E7DC3434B033A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number:          181A
Signing time:             Thu 26 Mar 2026 19:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 19:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 19:01:11 +0000
Files and hashes:         1: HkESZav4s-gaBhayorEKTs_dvWY.roa (hash: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns=)
                          2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: 76cfFHprd+67NJoNjimHufiygx0lfnxXIQ4gzi7RL5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:a4:49:8a:ae:9a:78:8e:7d:c3:43:4b:03:3a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
        Validity
            Not Before: Mar 26 19:01:11 2026 GMT
            Not After : Mar 27 19:01:11 2026 GMT
        Subject: CN=0a408a50f7d9edfd910849d4f67341692f379c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:14:b5:6d:66:94:04:5d:53:16:de:95:e2:
                    3d:f1:8d:61:60:31:66:bd:7e:c6:4b:f2:fb:a1:95:
                    cf:02:dc:8f:6d:3b:03:4c:22:2a:3a:f0:fc:9c:e1:
                    b1:a7:7e:a2:96:b7:ad:72:52:11:dc:d5:88:ac:22:
                    46:50:3c:95:9f:49:e7:f4:ec:f0:99:2f:a0:1c:17:
                    fd:d6:75:b2:3d:39:aa:1c:6b:47:43:07:49:69:4a:
                    fa:eb:c4:26:50:ce:2b:30:df:6c:38:45:96:93:83:
                    89:ac:9f:0d:8e:5d:a6:f9:7c:f4:c6:08:d9:c2:e2:
                    f2:10:08:b3:c6:c6:09:d7:db:a1:d8:9f:a8:de:34:
                    e2:91:71:d0:47:a8:d2:28:b5:ea:1d:3e:e6:da:64:
                    5a:76:d4:c0:07:55:2b:a0:dd:d4:8e:39:05:5a:bf:
                    d5:42:64:67:39:fc:11:fd:9a:6f:0f:a6:56:fb:f3:
                    5e:3e:76:92:02:03:98:69:56:a6:5c:7e:44:91:5c:
                    ed:3a:d8:39:25:31:fe:9c:4d:fd:53:a3:f7:bc:a1:
                    0a:b4:0d:5e:ae:cf:7a:5a:ca:f0:87:68:94:e7:66:
                    45:98:a2:bc:ba:3e:da:ed:94:63:1c:10:f3:b8:f7:
                    4b:ed:1e:88:5f:e4:28:c5:6f:d8:75:21:4d:c2:e8:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:8A:50:F7:D9:ED:FD:91:08:49:D4:F6:73:41:69:2F:37:9C:9F
            X509v3 Authority Key Identifier:
                keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:c7:14:39:b6:17:2a:12:7c:9d:a2:d6:2c:c5:d7:d9:2a:
         f5:45:a4:46:5c:58:5e:bd:bc:05:ef:11:ca:9d:f4:2a:2a:8c:
         61:ca:73:be:31:71:37:14:fc:1a:45:3e:5f:37:52:2a:87:bb:
         13:14:cc:5d:f3:70:93:8d:1e:bd:0b:35:fb:6e:29:45:78:09:
         c5:91:d7:dc:31:9a:ad:ac:b4:94:3b:bb:cc:cd:41:b8:c9:89:
         9e:ff:4a:88:59:7e:77:f2:2d:d0:9e:18:af:b2:89:d3:53:53:
         c7:87:7b:ad:e5:e2:1c:7f:fe:72:c8:4e:d9:f0:0c:b7:0c:ba:
         3b:54:95:0b:d5:bd:a4:0c:34:df:58:7e:5c:79:9c:01:57:cb:
         94:8b:3b:b8:af:b5:1a:b4:b9:ce:88:43:c7:90:00:77:73:97:
         73:e3:29:eb:14:06:06:b0:48:c5:3a:52:e7:c4:35:0d:89:cd:
         c1:f2:c3:a4:08:64:7c:76:22:35:07:c0:db:83:d8:c1:a2:83:
         ab:a1:a0:52:d1:e2:35:48:b4:d7:fa:ee:89:24:a5:59:ee:14:
         da:8a:8f:14:2f:8f:db:b8:ea:d6:41:4e:38:ce:fd:0f:54:42:
         c3:82:ab:f8:7c:53:65:74:ab:9e:3d:e3:4b:82:31:31:91:0b:
         a9:fe:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:25:22 2026 by rpki-client