Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
File:                     rlLbggkLND-J98Y3z0GpS8_UNGo.mft (raw, json)
Hash identifier:          Knn9XMLmJQs7bj6pKyGH+w3EvQZ4Rmm6qTKsvXw3xmg=
Subject key identifier:   F6:95:CE:C8:73:60:41:4D:24:B7:CE:1B:26:E1:D6:B8:57:CE:1A:99
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       019E1C7DC941769497AB3C3EC05612B446AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
Manifest number:          0234
Signing time:             Tue 12 May 2026 14:01:05 +0000
Manifest this update:     Tue 12 May 2026 14:01:05 +0000
Manifest next update:     Wed 13 May 2026 14:01:05 +0000
Files and hashes:         1: 5X7YRTYutQRnZKSXOYRzfFKU__g.roa (hash: SZ3JcTfmeT/78/b8EzDuDunNtUACrBhXm0w/aIDmEqM=)
                          2: Da4zofv_3zQcJHV3L83VNbH7UEY.roa (hash: p+hoOJTvA0x6ON4Ggw3OE0Gfu4aJUBLpv1YI+CkSFhc=)
                          3: _Fyf7zFGzeDW7zsznMYR472wYMY.asa (hash: O8OCjw/AFz0U+dbA2ny1AUn9RnUyhuTFkhwfS9CKoG4=)
                          4: co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa (hash: kD/drcWwBr6x5xqwMF16Xc4LXWddRLyNIKIsPwoN+78=)
                          5: rlLbggkLND-J98Y3z0GpS8_UNGo.crl (hash: C9h1VIsmzhj87tUSQMB3MtYIlCsvrXjEBVM3xSVud6w=)
                          6: sN3nanuzELsiTRZZnMMhpzRL9CQ.roa (hash: iIsUfUIoF5P1otrI7EzZzKCaeejtCwHBloYzwegYqT4=)
                          7: z4NQNKVm6yPErYn2MF0joNOAjb8.roa (hash: uYdkE7Gen/nXRx3uYSu0lTx+P8/il8mwRP5bhcvXxeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:c9:41:76:94:97:ab:3c:3e:c0:56:12:b4:46:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: May 12 14:01:05 2026 GMT
            Not After : May 13 14:01:05 2026 GMT
        Subject: CN=f695cec87360414d24b7ce1b26e1d6b857ce1a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:78:82:33:5a:e3:e1:39:a3:47:89:e3:98:
                    6e:87:07:65:02:8d:ef:9d:3f:21:1c:15:53:3a:ff:
                    cf:2b:f0:63:82:b3:d9:89:77:1a:e0:d8:9c:7e:78:
                    63:dc:78:8f:4a:dc:f9:d7:76:0f:3b:cc:ef:04:81:
                    bb:91:1c:43:6a:99:38:dd:0b:67:3d:29:99:66:ee:
                    90:63:c8:3d:94:99:71:e0:b9:c1:07:e4:c5:56:b2:
                    0c:78:ff:fe:d0:0f:33:a8:07:49:b4:7e:8e:0f:bb:
                    b8:e5:38:14:aa:16:02:89:be:2a:4b:86:53:04:d2:
                    82:b2:49:92:9f:b7:07:15:31:fa:b3:ef:fb:b9:c6:
                    93:c4:d0:64:29:c2:35:89:e9:20:6b:cb:3e:16:a2:
                    8f:ee:ec:11:11:ca:41:6a:be:81:71:a8:c7:a8:8f:
                    df:8f:02:9d:30:42:ab:8a:54:da:69:c6:69:e9:7a:
                    26:ca:ee:7e:be:ae:b2:33:b7:7e:4b:a5:41:f1:b2:
                    57:68:38:b4:66:70:d2:af:11:43:b5:2f:3e:42:3d:
                    e9:ba:17:11:fe:6e:a2:89:42:81:3e:4a:2b:7b:9b:
                    0f:e2:1d:5b:0e:c9:0b:d0:af:42:c7:d7:a0:46:7d:
                    2e:04:44:3f:cf:96:32:6a:ed:24:a1:9c:1f:f3:15:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:CE:C8:73:60:41:4D:24:B7:CE:1B:26:E1:D6:B8:57:CE:1A:99
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:56:75:9f:72:68:41:ba:a7:b8:1e:7d:c5:c5:e4:cf:6c:
         33:d1:2b:e9:8b:be:6b:d0:d7:e4:32:b2:55:40:67:0b:76:af:
         1c:50:51:30:78:00:1f:f0:76:c1:98:72:93:46:bd:6f:fa:83:
         69:58:f6:fc:ed:d6:8a:cf:f4:83:23:c4:5b:af:aa:9e:8c:e4:
         44:67:e3:98:26:78:f4:2d:59:a2:44:f2:fe:76:2a:53:b9:07:
         3f:9a:10:54:8e:d6:7e:fd:02:a4:79:bc:75:86:f2:5c:e7:ad:
         1a:9c:81:d8:70:8e:7d:ca:17:ce:01:73:98:65:91:66:0e:a4:
         c9:cc:1a:54:ca:aa:3d:a7:a6:9d:c1:b6:71:11:12:a6:6a:55:
         6c:cd:c8:02:48:48:72:c5:51:8a:51:75:f3:1c:2d:d3:53:69:
         be:8e:76:63:ff:9c:0c:78:bb:9c:66:75:78:17:ba:21:81:05:
         e2:89:cb:30:55:2a:74:82:b4:db:c1:ca:73:c6:97:c1:2b:55:
         5e:76:b1:11:42:76:30:05:8c:43:eb:e0:3d:a8:27:9c:50:2b:
         bc:10:7f:79:3a:ce:00:5e:36:47:8c:4f:89:96:34:31:bf:4c:
         c8:74:79:68:93:fc:c4:db:4c:cb:ec:be:6c:e3:2a:0d:d3:ae:
         6e:a5:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:34 2026 by rpki-client