Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File:                     LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier:          s+hre9ImXMDGb7I9rKKj7CEw5oUwFc0zon6aqXJDNoY=
Subject key identifier:   DA:DB:70:1B:C2:89:CC:BC:96:9A:DC:7B:A6:26:E8:AA:A0:10:48:2E
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer:       /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial:       019E1EA30C19767D78AE2794EC234630F5A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number:          1900
Signing time:             Wed 13 May 2026 00:01:02 +0000
Manifest this update:     Wed 13 May 2026 00:01:02 +0000
Manifest next update:     Thu 14 May 2026 00:01:02 +0000
Files and hashes:         1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
                          2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: 3vZprpgsREocwHRmQbP740E4z4VJmxK758XaBtowaWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:0c:19:76:7d:78:ae:27:94:ec:23:46:30:f5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
        Validity
            Not Before: May 13 00:01:02 2026 GMT
            Not After : May 14 00:01:02 2026 GMT
        Subject: CN=dadb701bc289ccbc969adc7ba626e8aaa010482e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:9f:f5:76:ca:15:ef:46:4c:fd:ac:ac:23:
                    3f:c2:27:78:c7:e0:18:fd:a0:cf:ba:31:c0:73:38:
                    b9:c6:41:b3:85:ff:38:12:f7:d6:89:e8:87:10:06:
                    c0:7b:a8:7d:1b:b8:5f:13:7b:5c:7a:cf:25:37:fd:
                    68:b0:01:ab:0a:74:ee:9b:0b:1a:02:a2:fe:6c:f6:
                    06:50:48:ec:ec:38:f5:10:c5:ac:a1:70:3e:44:dd:
                    9d:5f:35:18:cf:80:f5:cc:39:b2:87:bd:21:8a:c5:
                    91:5c:1b:30:d9:d4:bf:27:f7:fd:9f:c4:5e:cc:ac:
                    6e:0b:4f:fb:3f:fb:b7:31:e5:ad:2b:6a:e2:31:71:
                    4a:5d:fe:90:33:98:39:8b:3a:60:08:68:f3:a0:dd:
                    9d:4e:6c:9a:57:24:c5:cb:e4:4a:5d:98:00:2e:a5:
                    a1:4c:58:ed:60:70:32:1a:69:09:87:e9:98:ca:a5:
                    45:03:bd:45:64:b0:29:39:3b:4c:37:4f:47:bf:97:
                    4b:73:de:2a:9f:6d:30:f5:72:52:9f:6c:4d:2e:8c:
                    e5:ff:fa:e4:35:4f:9a:d9:5c:ff:0d:46:c4:e2:bd:
                    d5:49:85:71:ab:0e:69:7d:d6:00:0c:3e:25:78:15:
                    44:4a:db:c6:1a:b3:2f:ab:5a:b0:ad:3c:57:70:a8:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DB:70:1B:C2:89:CC:BC:96:9A:DC:7B:A6:26:E8:AA:A0:10:48:2E
            X509v3 Authority Key Identifier:
                keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:cb:fa:e4:38:d7:6c:57:a5:e3:9d:4c:61:de:1c:b3:87:
         35:df:71:21:a6:12:ba:c5:82:a5:23:14:9a:aa:b6:ad:ca:68:
         e6:80:66:25:47:8f:a1:28:b9:0d:4b:fb:d8:2b:54:50:49:69:
         6a:da:8f:dd:64:17:e2:63:5b:b0:e5:fe:ae:1f:1b:d5:45:cd:
         0b:d2:ad:e2:0e:ab:7a:27:dd:90:a3:92:74:1d:ad:3e:11:ee:
         74:ab:6f:a8:74:5d:5c:ae:31:fe:66:d7:e8:cd:af:2d:98:66:
         ed:de:4d:97:c0:e3:6f:78:d5:71:36:01:b1:4a:88:10:ac:cd:
         c3:8a:2e:d1:61:db:d2:55:4a:dd:f5:96:1a:6a:9f:f6:93:96:
         6c:8e:60:4d:3f:6d:87:82:63:62:23:e2:81:fb:1f:fd:98:73:
         68:2e:1a:e5:81:6c:c1:82:7f:17:55:ca:df:4d:45:4d:9c:6b:
         13:cc:db:d2:46:6f:d6:1c:1a:05:41:a8:79:a6:7f:c5:59:7a:
         b9:ed:07:e3:28:40:7c:98:a1:b2:34:de:aa:56:84:ff:d4:73:
         ff:63:14:bf:5e:0d:34:95:61:56:bf:be:11:df:74:d5:ac:fc:
         d4:07:cb:a4:f0:ee:1b:f6:2e:c8:44:6a:93:ba:62:96:b8:1e:
         cd:00:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:26 2026 by rpki-client