Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          rfBaKVzj9+X/TyrJisSQOt+AZfvKFdLBxqDwjZaVjDQ=
Subject key identifier:   2C:3E:AF:64:35:69:11:C6:3D:2A:54:08:43:84:85:09:A1:59:1F:B5
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       019E1DFEB52A146DDC707D97C15C93ABCB13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          03AA
Signing time:             Tue 12 May 2026 21:01:32 +0000
Manifest this update:     Tue 12 May 2026 21:01:32 +0000
Manifest next update:     Wed 13 May 2026 21:01:32 +0000
Files and hashes:         1: 4KwoPjMEOKwVgqjkR1iM1Sga8ls.roa (hash: zEP8VUcw4u5qtFYg9l1WCeFUs+0BvYnLihv3gDQhsgg=)
                          2: 5quSGDFiCc7x9xQL3RZ2oDRoZEI.roa (hash: GKv86KDQ60+mPLbc7GtPs9wY5m72zA4FBxOc21v69ao=)
                          3: 6MOfJoJfjgHruP2KWqkzqptDlOw.roa (hash: 7sX90kHGNjmL95aSRKZrdKO8hW7cdwTVGZ3KRAMueWY=)
                          4: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: sT00K9RDvKL4fk/vcS6bl2lwR5NEb0huE20YYFpJcbQ=)
                          5: RdYGiesB8wE7Cc7xqOKt4JlLnok.roa (hash: W3DsiCdc3x/PMoGS82zn756ZVAXlVYusY8WrxMFT/7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b5:2a:14:6d:dc:70:7d:97:c1:5c:93:ab:cb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: May 12 21:01:32 2026 GMT
            Not After : May 13 21:01:32 2026 GMT
        Subject: CN=2c3eaf64356911c63d2a540843848509a1591fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:ca:3d:ec:96:2c:51:af:44:f6:ef:ce:40:
                    ec:ed:d0:1f:aa:a9:4b:c4:df:1d:94:50:d0:ae:4f:
                    15:7b:3c:a9:6c:4e:d9:07:03:ab:69:88:6c:9e:e7:
                    29:e6:07:a7:00:51:d0:10:b5:f3:d1:e2:f7:62:7f:
                    32:3c:de:43:62:5e:93:29:75:1b:d0:b3:34:28:74:
                    54:5f:ec:99:d6:3b:fd:2b:57:fc:ad:52:7e:bf:cf:
                    93:27:8a:a8:f9:b4:f0:88:17:5e:3c:a5:fc:36:f9:
                    aa:f7:cd:c9:8c:df:3b:3a:50:a6:a3:3a:49:4d:d3:
                    07:ee:5c:31:02:cd:f0:45:6a:07:0a:53:e3:c3:04:
                    00:f5:9e:4f:54:e3:50:fa:ca:00:80:fc:e5:73:8c:
                    66:d1:84:6e:60:8d:db:b2:1d:9a:86:77:d9:05:3f:
                    68:b0:8e:60:19:ab:fd:c2:26:44:86:e7:9d:12:45:
                    b7:ae:ca:a9:c9:13:d8:bf:41:5e:8c:32:b0:86:67:
                    4f:39:ef:b7:f3:62:87:2b:23:8d:74:69:df:81:79:
                    cd:f7:89:27:4e:6f:d2:d4:62:88:df:3b:f3:6b:6b:
                    48:46:34:2f:74:06:bf:06:51:24:b5:b7:79:07:6c:
                    3d:1e:1a:91:3f:a5:57:b6:68:7a:6f:23:5b:a0:27:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3E:AF:64:35:69:11:C6:3D:2A:54:08:43:84:85:09:A1:59:1F:B5
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:6d:70:04:17:46:dc:3a:87:0c:33:35:ac:5d:ce:71:f1:
         b9:3a:c2:9d:fc:ea:19:45:7b:14:27:5e:4b:8f:00:09:93:be:
         ec:9c:f8:c9:ac:76:46:e4:1d:dd:9b:e1:43:ec:7a:f8:15:9c:
         06:b4:82:cd:2e:54:d0:95:f5:78:38:bd:e9:c6:27:b1:f2:ff:
         39:28:c0:1b:cf:8a:4d:8a:d7:b6:02:a1:05:af:36:64:46:32:
         fd:f1:c4:eb:aa:3e:64:f6:b5:f2:5e:38:12:3f:8e:26:fa:78:
         6e:d9:48:91:4b:2e:45:23:c0:d9:8c:d9:e1:d4:13:c3:63:a8:
         54:f9:6a:71:b3:05:67:eb:1c:e3:53:ee:91:10:4f:9b:04:05:
         dd:fe:c3:59:54:72:09:c4:28:f8:6b:1f:6e:d4:6e:f7:01:5c:
         6c:b7:fa:3e:1d:d5:28:13:4c:d8:1e:e6:5d:58:72:e1:0b:73:
         18:09:69:d5:bd:15:cf:9d:16:23:f8:c5:cb:67:88:e9:17:76:
         c2:af:88:5c:df:71:dd:3b:9e:b4:60:52:04:19:46:49:c6:ec:
         a3:d5:e8:94:a8:85:b1:03:b5:57:2a:38:ca:78:1e:b4:22:52:
         8a:7b:60:8e:4b:ff:e4:cf:5d:24:2c:64:28:a5:d1:22:83:10:
         58:e0:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:34 2026 by rpki-client