Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          M5LKoCcY5Gy4uax2/tPzR40LoZOg+oBc9oPpv1Nt5bY=
Subject key identifier:   BD:D1:4B:18:74:1F:BF:80:5C:F1:80:27:11:75:E1:80:77:98:D1:A5
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       019CABD8F54D75757D8190807FF259B690DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          1410
Signing time:             Mon 02 Mar 2026 00:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:48 +0000
Files and hashes:         1: FoFknui6N7AV-MVsL0GcCguJMuY.roa (hash: zSrSbQATu/hSvIQfL/GtZLhgnMs95GytYnvic5x5vKc=)
                          2: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: /DXfefFlPgiiuRt6e71m2C4tj2YDeumMJLOQx/MjM0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:f5:4d:75:75:7d:81:90:80:7f:f2:59:b6:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Mar  2 00:00:48 2026 GMT
            Not After : Mar  3 00:00:48 2026 GMT
        Subject: CN=bdd14b18741fbf805cf180271175e1807798d1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:5d:b2:79:85:5e:0c:8c:00:7c:14:83:31:
                    86:3b:ba:a1:64:18:4b:8d:33:f5:86:b3:e7:52:65:
                    29:0b:10:b7:55:6d:78:2d:ee:3d:fa:66:0e:f7:59:
                    29:47:b7:bf:e8:ef:1d:e7:f4:58:b1:d3:b5:57:cf:
                    2e:0e:b6:ed:d4:c4:8a:41:de:6d:54:fa:d6:f4:dc:
                    70:1e:0b:65:eb:00:10:3f:14:a9:81:a5:43:dd:fb:
                    68:f3:fb:50:7d:3b:3a:6b:43:16:88:d5:1d:00:56:
                    66:93:08:ea:98:ab:4c:61:a5:21:a0:b2:aa:31:ba:
                    5b:6f:c3:1b:6a:25:97:81:19:3f:40:d2:2f:c8:7e:
                    55:59:53:c1:45:b2:e7:f3:3a:08:25:0b:b6:d2:37:
                    db:a1:64:63:86:6e:27:f5:ef:49:87:20:35:6a:b7:
                    d6:3e:3a:42:5a:f5:d3:d6:67:68:6f:51:fd:ca:69:
                    a7:b0:99:7f:83:26:93:64:07:80:bb:90:db:45:aa:
                    ee:97:46:ee:cc:e3:5c:c0:37:9d:58:b0:8c:52:06:
                    d8:39:5a:8b:3a:b7:b1:71:bb:1e:b9:1d:3b:b7:da:
                    f3:51:c3:43:54:9f:52:ad:7e:f0:cb:bf:db:fe:79:
                    9e:03:72:11:ce:c7:2b:4f:e3:76:4d:83:a0:49:c9:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:4B:18:74:1F:BF:80:5C:F1:80:27:11:75:E1:80:77:98:D1:A5
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e3:d1:a5:03:0e:19:fc:e7:d7:82:df:26:9a:dc:ed:cc:04:
         c3:d2:a3:72:18:74:d2:a6:a1:b4:02:0c:81:8b:af:2c:48:6b:
         59:a2:b3:98:c6:bb:4e:cb:fd:4a:1d:e5:a2:e6:c6:49:36:d6:
         80:3f:e1:cb:b5:ef:18:40:0e:97:9d:57:18:7d:af:59:ee:6b:
         be:31:50:e3:98:52:fd:5e:85:27:f6:40:3c:c1:43:c3:f6:0e:
         16:72:3c:3c:b0:db:69:6a:9d:cb:a5:54:cf:5c:df:e1:a0:b1:
         ea:7a:a8:65:68:df:99:c7:70:c9:76:1a:0f:5a:a2:57:b4:37:
         e8:19:02:19:bc:98:42:97:80:4a:15:b7:7d:e3:85:37:86:e8:
         2d:6f:6a:f6:a5:4b:53:1b:0c:1b:96:60:33:8f:57:65:83:1f:
         1d:39:d2:bb:a4:af:70:b0:2f:ac:b4:a6:ed:1b:fe:81:cf:97:
         62:e1:e3:11:db:44:a8:10:46:f7:4a:15:09:ee:61:da:92:a8:
         43:f8:52:cf:dc:6c:19:6d:b2:4d:ab:2c:a4:d7:be:51:f6:46:
         08:d6:f3:03:ff:46:24:ec:96:8f:0d:ea:5c:7b:f8:15:54:9b:
         70:b6:03:0e:4a:9b:82:e9:5a:57:f9:7d:77:5b:f8:d5:9e:4e:
         74:3e:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:02 2026 by rpki-client