Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File:                     LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier:          Of2mSV6ees0FUkmBgDJMiHo04ivdQxJN63wjknd9Yao=
Subject key identifier:   00:1D:CC:5A:4A:E3:76:83:FA:30:0E:5B:FF:E9:F0:49:08:78:9F:DF
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer:       /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial:       019D330877712FBDA76E8B3553927BB759DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number:          181E
Signing time:             Sat 28 Mar 2026 06:01:25 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:25 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:25 +0000
Files and hashes:         1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
                          2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: GcBvtdXYCUR/YDT6QCMbh2GzJXdTeqHq8FGBqFx4Wd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:77:71:2f:bd:a7:6e:8b:35:53:92:7b:b7:59:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
        Validity
            Not Before: Mar 28 06:01:25 2026 GMT
            Not After : Mar 29 06:01:25 2026 GMT
        Subject: CN=001dcc5a4ae37683fa300e5bffe9f04908789fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:88:ee:fb:08:93:46:ac:10:74:06:e4:0a:
                    42:2c:5b:45:ec:8f:af:d7:09:dc:b4:12:63:5d:de:
                    a1:fb:30:43:da:a2:7c:c6:a7:ed:a3:70:bb:e9:ea:
                    28:82:0a:07:cc:d3:4d:ed:0a:5a:8b:b8:23:f7:64:
                    32:94:09:03:c0:11:ad:ad:9d:f5:e9:a3:8c:9f:0b:
                    94:e6:01:32:03:ce:71:6c:96:01:a2:35:7b:4a:1e:
                    35:be:21:07:ff:64:05:ae:b0:e1:f1:e4:d2:e6:68:
                    e4:0f:62:f3:f8:67:b4:49:0b:f6:df:77:7d:f9:a1:
                    3d:fc:87:dd:3d:1b:1f:df:6a:cd:a3:e4:f9:46:82:
                    59:3e:fb:bf:1a:d1:06:91:0d:b0:f8:35:ae:80:27:
                    6b:b4:4a:36:b9:93:5d:f5:4b:81:ef:3d:e5:f6:43:
                    26:3e:31:8e:ea:05:d2:a9:2f:89:68:b0:6a:18:1e:
                    88:6c:49:c1:b7:64:df:5a:dc:17:9b:7d:59:42:bd:
                    73:67:b2:6f:6f:da:6f:1b:bd:2f:c4:b7:b4:47:2d:
                    a6:9f:e0:49:8e:a5:ba:14:b6:58:fc:38:d7:e3:48:
                    eb:a5:a7:1f:7f:e7:2c:6b:24:8d:ba:98:cd:2f:eb:
                    2c:39:bc:e5:13:d2:6f:f2:5a:74:80:a8:8e:66:72:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1D:CC:5A:4A:E3:76:83:FA:30:0E:5B:FF:E9:F0:49:08:78:9F:DF
            X509v3 Authority Key Identifier:
                keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:7e:d9:07:da:99:e4:31:f0:4e:15:a1:4e:77:72:d8:88:
         c3:db:61:82:a3:28:b9:61:99:3c:78:3f:40:f3:f4:9b:a1:2c:
         ab:51:31:02:0a:38:9b:5b:79:6f:01:41:28:f5:79:8a:ae:59:
         e5:aa:a7:35:9d:30:4f:d2:8f:c9:d1:8d:eb:ed:af:c8:23:ca:
         e0:53:4a:dc:5a:18:41:77:85:e5:10:f2:b5:15:36:c4:2b:1a:
         8c:be:a4:1b:46:95:f6:36:4c:36:41:d7:2e:a0:7f:6c:d0:c9:
         49:62:b6:44:53:0e:58:c1:5a:96:b8:c0:78:df:44:11:ee:eb:
         27:48:4c:26:40:0d:cd:35:89:d6:e1:01:1a:c7:77:af:26:87:
         7b:13:c3:da:47:b1:13:47:2d:45:63:05:ca:68:71:41:af:5f:
         00:d2:1d:83:c4:4f:38:5d:8e:43:0a:e6:70:71:e9:ba:46:39:
         96:66:09:1c:f2:a4:24:55:d6:22:e4:54:19:35:c2:d3:c4:9d:
         45:e3:c6:a4:00:b2:bf:2d:04:48:59:4a:bb:2b:dc:83:35:5f:
         b6:50:a2:ee:b3:9d:73:65:de:d3:d2:47:12:5a:ca:8d:b2:14:
         f4:53:5f:29:18:3f:4b:d4:8b:8d:c9:3a:56:46:f1:01:79:aa:
         81:6e:55:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCHdxL72nbos1U5J7t1naMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4
ZTNlYjkwHhcNMjYwMzI4MDYwMTI1WhcNMjYwMzI5MDYwMTI1WjAzMTEwLwYDVQQD
EygwMDFkY2M1YTRhZTM3NjgzZmEzMDBlNWJmZmU5ZjA0OTA4Nzg5ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO+I7vsIk0asEHQG5ApCLFtF7I+v
1wnctBJjXd6h+zBD2qJ8xqfto3C76eooggoHzNNN7Qpai7gj92QylAkDwBGtrZ31
6aOMnwuU5gEyA85xbJYBojV7Sh41viEH/2QFrrDh8eTS5mjkD2Lz+Ge0SQv233d9
+aE9/IfdPRsf32rNo+T5RoJZPvu/GtEGkQ2w+DWugCdrtEo2uZNd9UuB7z3l9kMm
PjGO6gXSqS+JaLBqGB6IbEnBt2TfWtwXm31ZQr1zZ7Jvb9pvG70vxLe0Ry2mn+BJ
jqW6FLZY/DjX40jrpacff+csaySNupjNL+ssObzlE9Jv8lp0gKiOZnIEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAdzFpK43aD+jAOW//p8EkIeJ/fMB8GA1UdIwQY
MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt
MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm
LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD5+2Qfa
meQx8E4VoU53ctiIw9thgqMouWGZPHg/QPP0m6Esq1ExAgo4m1t5bwFBKPV5iq5Z
5aqnNZ0wT9KPydGN6+2vyCPK4FNK3FoYQXeF5RDytRU2xCsajL6kG0aV9jZMNkHX
LqB/bNDJSWK2RFMOWMFalrjAeN9EEe7rJ0hMJkANzTWJ1uEBGsd3ryaHexPD2kex
E0ctRWMFymhxQa9fANIdg8RPOF2OQwrmcHHpukY5lmYJHPKkJFXWIuRUGTXC08Sd
RePGpACyvy0ESFlKuyvcgzVftlCi7rOdc2Xe09JHElrKjbIU9FNfKRg/S9SLjck6
VkbxAXmqgW5VKQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:02 2026 by rpki-client