Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          3vb6Frr0uwSZDctkAiSe7ypWSpCfHXeppYQRBdFNj+Y=
Subject key identifier:   77:66:30:F7:ED:4E:E5:F2:F8:83:12:B7:B7:62:DF:54:07:FB:85:D9
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       019E1F109CC7A771F21F1F730289B9EEEE31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          1221
Signing time:             Wed 13 May 2026 02:00:42 +0000
Manifest this update:     Wed 13 May 2026 02:00:42 +0000
Manifest next update:     Thu 14 May 2026 02:00:42 +0000
Files and hashes:         1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
                          2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
                          3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
                          4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: ab9MHcXHBZibcXbaByjDYvMXpm4gssGWclh4agmM6RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:9c:c7:a7:71:f2:1f:1f:73:02:89:b9:ee:ee:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: May 13 02:00:42 2026 GMT
            Not After : May 14 02:00:42 2026 GMT
        Subject: CN=776630f7ed4ee5f2f88312b7b762df5407fb85d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:78:9f:3c:a5:4c:65:87:49:62:c4:32:41:
                    88:4e:cf:bf:fe:f7:b8:73:47:82:51:01:1c:3c:cf:
                    a5:50:6e:7a:95:b1:22:e0:7d:7b:63:1f:ad:c9:59:
                    84:3e:86:67:ba:27:a0:f0:96:01:b7:97:22:63:bd:
                    74:61:08:1a:ff:d7:90:a4:ce:aa:af:ab:a4:e3:7f:
                    36:6b:be:1b:cb:b1:e2:58:3d:48:bb:e2:3f:f6:02:
                    80:1b:84:fd:91:d2:4f:8c:6c:54:d9:c9:a2:0e:34:
                    5e:67:07:88:5e:53:a9:ff:bd:e4:f9:bd:12:80:65:
                    8f:44:3b:a4:df:2f:e1:bc:68:1b:37:68:0d:4b:e0:
                    6d:73:db:3d:7c:db:f5:f5:57:f8:5e:69:82:81:00:
                    42:42:a6:af:8f:68:06:1a:f1:5b:83:61:d4:cb:37:
                    df:52:93:3b:95:d9:93:53:32:7f:10:5a:b9:37:a2:
                    5d:38:e4:4c:11:f7:a5:93:af:9f:c3:06:5b:c8:98:
                    5c:2c:6a:d0:3f:e5:ff:cb:71:98:70:dc:89:da:5d:
                    3f:12:37:78:d1:9b:29:da:3f:eb:a9:60:63:b6:99:
                    02:31:ed:5d:d9:6e:b1:1b:43:99:4a:46:2e:f3:f0:
                    37:31:af:91:e1:58:2d:e5:0a:22:b1:48:cb:42:61:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:66:30:F7:ED:4E:E5:F2:F8:83:12:B7:B7:62:DF:54:07:FB:85:D9
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c8:25:ee:31:3b:96:e1:22:fb:be:0e:a1:c0:aa:4e:44:0e:
         3e:46:51:58:4d:82:14:44:5f:48:9f:19:6d:97:f4:07:98:13:
         37:92:13:97:49:e7:e3:ab:34:42:02:cb:5c:cd:84:d4:d6:0f:
         db:1c:b8:1e:b1:1b:37:24:9d:5f:a4:6a:0e:1a:81:b7:d4:cc:
         c2:03:ba:84:b4:bd:7d:8b:5c:28:ab:da:15:a8:04:a7:b7:02:
         10:f3:21:21:8b:18:01:aa:e1:04:70:d4:e4:34:33:0a:e4:09:
         d4:09:d0:be:79:d8:c2:e1:04:84:32:82:2c:fe:09:16:89:87:
         41:a3:a3:83:70:1d:2b:05:41:ff:80:c7:3e:fa:9e:2f:ee:b1:
         e1:1a:bc:d4:91:20:5a:93:7d:98:ce:f1:19:e5:e3:f2:e9:9f:
         07:f3:21:1b:a6:25:0f:83:ab:ec:1a:e6:ad:b2:04:30:f2:47:
         7b:61:4f:85:92:28:94:fc:c6:85:2e:e4:07:af:05:66:18:a0:
         1f:65:9a:59:8e:05:a9:18:a7:93:de:f9:fa:d9:17:e4:c0:67:
         9f:02:bd:c5:67:ff:a6:45:50:bf:08:be:89:92:e8:d1:78:08:
         eb:20:a9:ca:76:4f:cb:f6:d8:71:7a:0f:ad:44:94:c4:5d:14:
         51:cb:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:39 2026 by rpki-client