Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File:                     LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier:          ZHxTA8YLKxKhdJGIqG0hjEBwg9HXY99d8BeMqrOUjxQ=
Subject key identifier:   50:D3:89:FE:5F:EE:A8:1A:AD:8A:22:44:A5:64:F0:02:50:6C:57:2E
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer:       /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial:       019D9A073BF1BC6756DF96F93AF67C6DEA1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number:          0545
Signing time:             Fri 17 Apr 2026 06:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:58 +0000
Files and hashes:         1: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: MHeLaCzkKcj0o1cuuCu0o/uyMUPGvPdffeDuqgrrIio=)
                          2: QY5IABNKSh9wzdwDFAlBjYGLgBY.roa (hash: DKFoMZra8knldwWf2JPXIqtTY/e0bpiT44EwSqV2A2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:3b:f1:bc:67:56:df:96:f9:3a:f6:7c:6d:ea:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
        Validity
            Not Before: Apr 17 06:00:58 2026 GMT
            Not After : Apr 18 06:00:58 2026 GMT
        Subject: CN=50d389fe5feea81aad8a2244a564f002506c572e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:b9:3d:8e:b8:81:58:ec:06:97:a5:e7:d8:
                    98:fe:4f:ea:8a:07:cf:c6:e0:73:9d:9c:d3:d6:c9:
                    2a:f1:3d:23:11:d8:0e:59:c4:27:c7:ac:64:39:9b:
                    39:b0:0b:26:99:c5:c2:82:84:ee:f9:34:04:7b:d2:
                    2c:d2:3f:0f:e4:a7:6d:3c:e7:5e:d4:c7:fc:ef:a5:
                    0d:f7:a7:8d:ad:4f:ed:b9:dd:4d:1d:a1:49:a2:bb:
                    dd:be:3d:77:29:7a:db:83:b2:6f:4c:c1:bd:e1:fb:
                    a9:fb:c5:b4:fc:a8:71:2e:96:59:08:28:2a:e0:06:
                    30:d2:fb:22:e5:e9:c2:bf:57:37:cc:3e:3e:92:95:
                    d4:1c:42:73:b5:33:af:e0:96:a2:24:c3:b5:18:ab:
                    64:47:dd:30:d8:52:d2:9a:28:0a:71:5f:3b:87:ef:
                    6f:4d:48:22:fd:af:c3:82:59:b4:a1:3b:06:ca:2f:
                    47:ce:c4:a3:64:40:12:23:8f:0b:3b:bb:f1:d8:7f:
                    fc:f5:2f:79:a7:bb:cf:6d:a4:2c:12:3a:01:cd:1d:
                    82:ae:f9:2d:4b:d3:0e:70:37:7a:86:f2:c0:2a:6f:
                    58:16:4f:06:07:cc:2b:2a:1b:37:a6:5b:bf:7d:69:
                    cc:9e:88:fe:ba:be:34:1d:af:d9:66:fb:fb:ae:0b:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:89:FE:5F:EE:A8:1A:AD:8A:22:44:A5:64:F0:02:50:6C:57:2E
            X509v3 Authority Key Identifier:
                keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:ee:af:6a:74:95:26:1e:75:9d:56:f1:4a:2a:a1:7f:ba:
         0c:64:12:ab:4c:65:70:0f:cf:37:97:b2:a0:61:2c:a1:1d:59:
         0e:62:5a:cc:b0:e3:a2:44:ff:2f:b5:61:01:59:2e:e6:5b:4c:
         8e:e5:94:e6:13:c3:a9:e5:e1:6f:64:ed:34:3c:54:34:2b:02:
         23:95:4c:8a:50:1c:da:6b:84:e0:fb:fe:e9:65:23:50:c7:76:
         69:54:0b:98:43:33:7d:d4:54:1d:65:6e:64:22:95:82:5f:e3:
         f5:25:bf:0a:8f:de:4d:22:0b:cc:4d:c9:ad:81:05:73:67:2c:
         b0:7b:49:be:2b:bc:81:d7:bc:65:e5:ef:9e:44:9d:1f:8a:9b:
         dd:f8:b0:5f:a7:c1:4b:c2:79:4b:8e:a6:ed:42:c6:cd:9d:87:
         ae:37:0c:fd:13:37:78:3a:99:1c:da:b5:ed:af:69:d7:dd:33:
         e0:aa:3c:37:ca:03:eb:a3:35:de:55:c0:d8:9e:e9:a5:88:c1:
         9b:86:2d:f6:8c:f3:31:71:83:78:64:e9:d4:a4:f2:e2:1d:c2:
         fd:23:c6:7a:3b:02:2a:49:2b:0a:3d:bc:15:44:fe:98:a3:8b:
         f4:1b:a4:0c:4f:6a:22:dc:7b:df:1d:b5:3d:aa:64:3b:04:09:
         b3:e6:14:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBzvxvGdW35b5OvZ8beodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMDcxOWViZDlhN2IyNTNlMTRiMjVjZGVjNGNkZDE1NGEx
MTFlMzAwHhcNMjYwNDE3MDYwMDU4WhcNMjYwNDE4MDYwMDU4WjAzMTEwLwYDVQQD
Eyg1MGQzODlmZTVmZWVhODFhYWQ4YTIyNDRhNTY0ZjAwMjUwNmM1NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08W5PY64gVjsBpel59iY/k/qigfP
xuBznZzT1skq8T0jEdgOWcQnx6xkOZs5sAsmmcXCgoTu+TQEe9Is0j8P5KdtPOde
1Mf876UN96eNrU/tud1NHaFJorvdvj13KXrbg7JvTMG94fup+8W0/KhxLpZZCCgq
4AYw0vsi5enCv1c3zD4+kpXUHEJztTOv4JaiJMO1GKtkR90w2FLSmigKcV87h+9v
TUgi/a/Dglm0oTsGyi9HzsSjZEASI48LO7vx2H/89S95p7vPbaQsEjoBzR2Crvkt
S9MOcDd6hvLAKm9YFk8GB8wrKhs3plu/fWnMnoj+ur40Ha/ZZvv7rgufZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDTif5f7qgarYoiRKVk8AJQbFcuMB8GA1UdIwQY
MBaAFC0HGevZp7JT4UslzexM3RVKER4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAt
Mzc3NDkzY2U1ODc3LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAtMzc3NDkzY2U1ODc3
LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdzur2p0
lSYedZ1W8UoqoX+6DGQSq0xlcA/PN5eyoGEsoR1ZDmJazLDjokT/L7VhAVku5ltM
juWU5hPDqeXhb2TtNDxUNCsCI5VMilAc2muE4Pv+6WUjUMd2aVQLmEMzfdRUHWVu
ZCKVgl/j9SW/Co/eTSILzE3JrYEFc2cssHtJviu8gde8ZeXvnkSdH4qb3fiwX6fB
S8J5S46m7ULGzZ2HrjcM/RM3eDqZHNq17a9p190z4Ko8N8oD66M13lXA2J7ppYjB
m4Yt9ozzMXGDeGTp1KTy4h3C/SPGejsCKkkrCj28FUT+mKOL9BukDE9qItx73x21
PapkOwQJs+YUDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:46 2026 by rpki-client