Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          Ln8O2BN37SXhlOIjejd8rsZgdiFpMHn+kt/CLYzlhYU=
Subject key identifier:   12:84:3A:E3:79:D9:99:85:A5:B7:59:F3:65:53:2C:3B:2A:85:59:9E
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       019D99628603DF747875ED7020DA4726C5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:03 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: NygRZVyzLL84m43Y+8iEp3EmHlLfAnOM/7TL49AVzkY=)
                          2: cO4n71Ca1KW9YOy3Lk5tseYgVLs.roa (hash: mIrTwfJ5XFJdShmQyd6p7zVMdef2lZJKuLHzMy3HxFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:86:03:df:74:78:75:ed:70:20:da:47:26:c5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Apr 17 03:01:03 2026 GMT
            Not After : Apr 18 03:01:03 2026 GMT
        Subject: CN=12843ae379d99985a5b759f365532c3b2a85599e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:3e:3d:41:fa:8b:4d:de:12:53:6d:21:d0:
                    a7:5c:da:a8:45:c6:86:b5:ae:9f:f8:2e:76:32:b7:
                    5a:a3:1e:0c:be:23:c2:ae:ee:6c:78:86:94:b2:ca:
                    7a:78:28:4c:9e:ab:ac:8f:db:9e:67:a5:f0:0e:4b:
                    cc:a8:70:6e:31:5d:27:6e:b4:26:fe:16:c6:5a:44:
                    0f:7d:6c:89:77:fd:07:9f:29:2e:7d:bd:ed:23:3c:
                    49:4e:47:fa:92:73:a7:1d:88:68:9a:75:fb:b4:fd:
                    60:a5:a9:4d:79:ec:04:a7:0d:7c:7f:a7:65:ea:85:
                    f2:f2:d9:8e:be:70:9f:dc:e3:b2:fe:26:54:49:33:
                    91:1d:de:ee:16:03:1b:53:c5:bf:0c:c2:46:95:d5:
                    a1:9d:51:39:7d:9b:50:0b:cd:58:97:a0:63:0a:2d:
                    0a:9a:f0:d0:28:8a:3a:80:aa:7f:fa:17:8b:a0:3b:
                    84:1d:19:4c:5a:9d:c7:ce:b5:e6:ce:f1:89:19:a7:
                    6c:cc:9a:ff:9c:43:72:6f:da:d5:e0:eb:6f:5e:25:
                    1d:c1:4d:4c:5f:1a:6e:97:ee:38:1a:54:e7:aa:fa:
                    84:58:21:5e:5d:2b:5f:66:d7:e0:57:0a:e2:e2:c2:
                    17:b6:54:1d:30:db:e3:1a:9e:74:e3:aa:2a:b4:fd:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:84:3A:E3:79:D9:99:85:A5:B7:59:F3:65:53:2C:3B:2A:85:59:9E
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:0c:f5:18:ff:9d:a5:41:01:58:bc:ee:02:0b:50:ca:93:
         ac:c7:55:6e:0a:88:d7:f2:82:8f:19:62:d8:86:d8:29:d8:d1:
         39:d5:c7:fc:4c:68:2b:72:42:0a:5f:9a:85:9e:e0:b9:e3:10:
         f9:7d:d1:5d:10:e3:f7:aa:d8:8c:ba:54:3e:74:35:14:00:40:
         1e:44:2f:63:6b:8d:1b:58:a9:15:33:35:17:56:88:16:51:ce:
         c6:1e:f7:a0:9b:a4:a7:21:98:46:41:1c:bc:17:89:2d:3e:8f:
         7b:81:9b:83:f6:55:a0:bc:ea:e0:43:9e:3b:c9:fc:aa:da:0c:
         c7:49:1d:a0:78:39:9c:e6:1c:67:8d:6e:26:fd:7a:95:be:c0:
         b2:d8:16:7b:a5:8c:65:87:32:b9:6c:6c:58:bf:ac:59:5f:1e:
         d1:36:13:7a:6b:3e:93:b8:e1:69:77:f2:0b:dd:fa:49:cc:a5:
         75:2f:fa:f7:fa:bf:da:ec:2b:c2:32:e9:25:8e:0a:ab:60:7e:
         c1:5c:37:fa:a2:ac:54:09:74:77:aa:7b:cc:ee:d6:69:f3:93:
         8b:bd:f8:30:b7:fc:4a:08:d9:d3:0b:91:c1:ae:0f:2e:45:79:
         0e:0b:75:4d:b8:60:56:81:64:89:c0:9f:45:7f:75:ab:df:97:
         6f:d8:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:24 2026 by rpki-client