Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File:                     stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier:          Mc89GnOeaX/MIHLbCobn9/E7fO9bALIfCbs4zWGrrjc=
Subject key identifier:   63:17:9F:8D:9E:10:AA:86:2D:FB:62:B3:24:8B:5A:75:5C:D0:E8:D4
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer:       /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial:       019DA3787E063A98FD10E9D7B51C045BABC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number:          0262
Signing time:             Sun 19 Apr 2026 02:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:15 +0000
Files and hashes:         1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
                          2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: cIn1WhGv2Krf0GPUtgCgXqLGMKM9BV6bHBDWNwzT+x4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:7e:06:3a:98:fd:10:e9:d7:b5:1c:04:5b:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
        Validity
            Not Before: Apr 19 02:01:15 2026 GMT
            Not After : Apr 20 02:01:15 2026 GMT
        Subject: CN=63179f8d9e10aa862dfb62b3248b5a755cd0e8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:96:1d:bc:b7:e2:be:b4:7a:98:f2:2e:0f:
                    1a:42:71:81:72:c9:07:21:08:13:b4:3f:1f:28:c0:
                    ec:d1:5b:8b:ae:a0:cd:32:4c:f2:8d:d4:37:e3:05:
                    b3:53:82:d6:04:f2:09:98:2c:06:dd:e2:c3:e5:19:
                    a6:f5:41:25:f5:d7:da:5b:56:a6:e3:2b:54:12:b1:
                    f9:d7:ab:8e:22:49:01:86:4a:6a:a8:3b:2b:0a:88:
                    a8:d2:5b:45:8e:75:28:bf:88:f0:f5:a2:51:03:16:
                    fe:29:7b:c2:c7:fe:48:6c:0a:6c:e7:14:72:fd:63:
                    8c:39:c9:fd:ed:e1:80:66:7f:59:fe:75:e0:41:6b:
                    dc:b8:ef:ae:89:27:98:dc:34:ea:62:7d:34:e1:73:
                    09:1a:58:bf:1c:c0:c7:22:00:3f:e9:e9:b9:cd:5e:
                    b9:09:01:47:54:18:b3:58:40:ca:e4:10:9e:2f:b6:
                    0e:6f:bb:1b:29:8d:62:45:bc:fc:c0:74:8f:f8:ff:
                    e1:a3:37:1b:d3:e2:83:fc:48:72:e7:ff:f4:ed:33:
                    4a:8c:be:96:bc:55:8b:4f:ba:94:56:c4:ae:cf:47:
                    e5:f5:2e:d1:b4:93:d3:07:78:1c:22:4e:c0:2c:1a:
                    6b:57:d8:51:c8:4c:f9:90:fe:ac:2d:ac:36:29:a4:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:9F:8D:9E:10:AA:86:2D:FB:62:B3:24:8B:5A:75:5C:D0:E8:D4
            X509v3 Authority Key Identifier:
                keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:1a:27:37:81:98:9b:6c:f6:c1:ca:ef:6a:af:b2:f2:57:
         7e:3b:14:26:87:92:dc:cb:3d:34:fa:5a:af:81:37:5e:d8:bd:
         1b:3c:23:91:5e:bb:91:2e:d1:41:2d:79:82:53:c3:01:29:3d:
         5c:9f:22:82:a0:39:2f:c3:d0:3b:2c:b6:e1:6c:aa:1b:69:6d:
         ab:4b:a1:df:d8:dc:f8:e3:ce:2d:8c:ae:d1:a6:ee:f2:c6:57:
         34:a4:02:5e:18:b1:3e:00:61:40:81:50:a9:c6:12:50:8e:24:
         c1:0b:de:a6:64:9c:e5:61:41:87:7a:d3:67:34:46:74:dc:0c:
         8c:bd:5d:2b:55:74:49:4b:6a:d9:2a:f2:1c:01:e1:a4:40:30:
         85:df:8d:1a:35:17:d8:bc:d9:c3:64:40:17:26:50:6f:b8:80:
         72:ef:c2:b7:a6:a9:cd:75:66:ad:04:ba:c2:a2:74:c9:a5:e9:
         92:5d:65:3a:9b:6a:73:00:85:78:2a:34:41:bf:1a:d5:58:1a:
         5c:85:4e:6f:70:07:db:10:98:f0:fa:d6:d3:d2:5e:10:0e:f4:
         09:e8:e5:a4:a9:0d:6d:60:36:65:91:35:6b:c0:46:da:5c:df:
         6d:9a:06:ee:28:c8:1b:c5:33:93:5c:33:db:19:ec:dd:2a:9d:
         b9:e1:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:08 2026 by rpki-client