Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          QRxBP+s4MdWVyHe+zDBF5R99ZNbMuSEh/ymLrpZKJCI=
Subject key identifier:   41:C7:27:BD:E6:20:24:54:85:12:47:C5:8E:01:86:5C:A7:91:00:E0
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       019EC0DAD9AB32DC1AD7C8E02A4391FB7207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          1524
Signing time:             Sat 13 Jun 2026 12:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:28 +0000
Files and hashes:         1: FoFknui6N7AV-MVsL0GcCguJMuY.roa (hash: zSrSbQATu/hSvIQfL/GtZLhgnMs95GytYnvic5x5vKc=)
                          2: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: EQ9ZhD2E0DJIYwFJxEP2BOMsoYozsWa8DPbh0cru1wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:d9:ab:32:dc:1a:d7:c8:e0:2a:43:91:fb:72:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Jun 13 12:00:28 2026 GMT
            Not After : Jun 14 12:00:28 2026 GMT
        Subject: CN=41c727bde6202454851247c58e01865ca79100e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:3a:3c:b7:cb:72:ef:92:a6:80:7c:8f:10:
                    19:16:16:48:7d:08:32:bf:42:5e:79:95:07:bd:76:
                    1b:63:54:ae:af:61:93:73:a1:6a:28:d9:5f:9a:62:
                    01:72:cb:fe:a8:54:ba:e3:b5:9e:49:f4:52:57:fe:
                    9a:af:c7:6c:34:fb:70:57:00:a2:76:08:3b:da:ed:
                    0a:c8:7b:40:d7:7f:e5:da:ef:9b:eb:3b:2e:5e:85:
                    19:a2:e1:ea:db:34:72:98:87:2d:31:e0:74:13:dd:
                    e2:a3:cf:94:f7:d7:dc:32:53:b9:48:08:db:ad:3b:
                    ee:ae:a1:32:1a:b8:7b:be:4b:b4:9f:83:09:e1:e2:
                    ef:13:d8:28:3e:58:fc:1b:aa:1e:db:05:6a:16:8b:
                    dd:51:30:30:f8:8e:e3:24:ae:50:13:ea:fa:ce:60:
                    e8:2c:d9:96:3f:ef:2d:10:5b:4c:bf:9b:81:86:1f:
                    1a:18:4f:1a:79:11:36:6e:f3:49:8c:a0:dd:58:25:
                    6b:01:a4:9b:53:fe:ca:21:34:78:84:af:b0:2e:b5:
                    30:36:6f:cc:dc:55:4d:bd:28:b4:8e:a7:3b:0e:11:
                    5f:f1:5b:12:76:5e:91:5d:92:59:98:0d:79:24:dc:
                    59:71:17:d0:bb:4a:eb:2c:62:62:48:51:4f:8a:f6:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C7:27:BD:E6:20:24:54:85:12:47:C5:8E:01:86:5C:A7:91:00:E0
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:84:e3:19:bd:44:6b:54:67:e6:26:a0:48:49:9b:bc:0f:eb:
         cd:71:75:c3:3c:d8:16:f3:0d:9a:c3:24:39:6b:8d:c8:6f:46:
         40:1f:69:ee:c3:8e:94:a0:4c:f3:bb:76:8c:ce:5e:32:a5:d5:
         70:b6:33:d4:fa:f7:41:ac:a2:95:ef:20:78:e0:84:53:3d:fb:
         b4:ac:aa:6b:d7:59:b2:61:58:14:3d:03:f6:c7:59:e8:56:f4:
         1c:4e:3f:3a:e9:f0:f6:c7:f6:0c:b1:fd:5f:d2:0f:51:20:35:
         b5:cc:29:8a:24:99:ac:b6:0b:05:f1:c2:c4:62:9f:f6:38:5e:
         60:18:32:a1:67:29:57:a0:3d:ac:d3:29:95:3d:2d:75:62:0e:
         3c:c8:a9:e2:27:52:1f:44:eb:b2:50:40:d3:5d:60:89:41:56:
         b1:33:09:67:cc:e7:e2:62:c3:6c:44:ad:7b:26:4d:ce:80:ce:
         bc:34:6a:c7:8f:4c:3c:01:f4:09:f4:69:5a:9b:ed:05:1f:37:
         3a:92:b8:84:85:8d:9a:ab:eb:60:c6:00:ac:b3:5a:41:93:4c:
         5e:8b:39:3c:bb:08:c4:56:9d:ed:0a:55:fd:67:da:e6:5e:43:
         b7:7c:84:f2:7d:2e:c6:f1:3a:be:2a:05:a7:67:dd:d4:01:a4:
         1a:ab:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:55 2026 by rpki-client