Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File:                     LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier:          RSvNtsW+GRNICcjSo/xofdRMCnP8k1pkYysfPQOqwdQ=
Subject key identifier:   5D:82:A0:1E:02:6B:39:EC:86:D9:43:DD:F8:E7:27:54:01:B3:A6:23
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer:       /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial:       019EBEED0A729C222FEEA986A3C314A970A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number:          1321
Signing time:             Sat 13 Jun 2026 03:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:06 +0000
Files and hashes:         1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: CA9rNT9RF4BPpAMZXwZtEoqPK4OWllxQs6JdKe2PqRc=)
                          2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=)
                          3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=)
                          4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:0a:72:9c:22:2f:ee:a9:86:a3:c3:14:a9:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
        Validity
            Not Before: Jun 13 03:01:06 2026 GMT
            Not After : Jun 14 03:01:06 2026 GMT
        Subject: CN=5d82a01e026b39ec86d943ddf8e7275401b3a623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:d5:6b:7f:01:44:0c:62:a1:51:3b:9b:3c:
                    c2:bc:f5:c5:c4:4c:95:55:3d:7f:4a:a7:9c:3a:1b:
                    24:9f:b4:d6:ff:a1:d8:34:f6:f8:1a:8e:36:85:c1:
                    4e:1c:65:77:40:ba:f5:53:1d:c7:8b:e4:10:d0:ac:
                    1c:76:27:ed:1b:3d:f4:eb:4e:b2:b3:77:69:af:82:
                    19:5a:42:f3:20:c4:27:0e:b4:7d:59:00:29:68:49:
                    88:6a:24:87:6d:bb:25:56:07:44:53:87:21:6c:e8:
                    d7:9b:49:60:ba:92:1d:59:1a:21:12:f4:23:40:b6:
                    f2:93:ff:ae:30:8e:ca:3d:8e:4f:2e:bd:96:64:13:
                    56:af:01:68:08:9d:04:1a:b4:24:9e:25:3d:ad:06:
                    ce:d2:e9:31:68:87:f7:bb:7d:1a:40:b3:36:de:69:
                    73:47:8c:ce:e6:43:02:25:bd:25:13:98:30:14:f9:
                    50:a6:e9:a7:7d:77:68:2d:e0:31:db:04:d6:3f:91:
                    69:a7:21:63:bb:8f:e8:41:97:8b:d1:d4:fd:38:eb:
                    33:75:f3:f8:65:aa:18:71:75:72:73:f2:b6:30:14:
                    31:78:2f:ab:ee:ab:2a:bf:38:3d:09:9d:59:24:58:
                    e5:20:f8:2b:00:37:2e:b3:0e:29:d3:27:b1:85:02:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:A0:1E:02:6B:39:EC:86:D9:43:DD:F8:E7:27:54:01:B3:A6:23
            X509v3 Authority Key Identifier:
                keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:42:72:a3:d1:bc:40:06:e2:e8:18:fc:c4:c6:91:fd:30:
         69:af:ae:51:b9:6e:31:fe:fc:5b:96:d4:39:1a:5d:53:08:08:
         58:96:0d:e1:8f:6f:90:9d:56:d4:03:bc:98:e6:8c:4b:08:15:
         df:eb:03:fd:ce:83:7c:3b:66:7a:9d:67:d8:c8:c5:21:f7:62:
         52:c3:d9:5c:c6:b4:45:87:7d:bb:47:06:83:4f:e2:2c:31:15:
         52:f1:2a:3e:65:c6:cc:95:e7:6c:15:7d:e1:9b:a8:d9:78:73:
         f7:6a:10:46:bd:8e:02:6c:0b:b3:b4:23:dd:d5:22:67:30:24:
         cc:72:aa:e7:38:e3:77:fe:4f:77:92:f4:b8:49:55:f8:0e:e6:
         31:6d:5e:40:f0:7a:c6:c7:27:e4:e7:d1:24:f2:01:8d:c3:9d:
         28:e0:54:3b:68:ee:bd:c7:24:77:12:fe:13:9f:c4:59:0d:3a:
         0e:09:a4:80:3d:48:8e:e0:d6:b1:13:b2:09:4a:8a:f3:d4:69:
         e5:cf:89:2e:5d:b5:68:c6:0c:34:a8:b2:fe:7c:df:9e:55:dc:
         11:06:a4:e2:7b:e9:89:2c:fd:c8:53:0f:30:88:fc:1a:c5:27:
         02:b2:12:ed:3e:d4:61:11:0c:68:ba:4e:3f:94:90:58:67:47:
         e1:e7:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:43 2026 by rpki-client