Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File:                     lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier:          orPbhqhGsNsNx+C98XT0/7Qzuxk5buyxPaA01ttomKY=
Subject key identifier:   72:A9:85:F1:A5:F5:31:1A:41:78:24:BB:ED:D6:18:32:65:57:64:CC
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer:       /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial:       019D9AAC114F4BB2259BC2FD4E505A360D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number:          1863
Signing time:             Fri 17 Apr 2026 09:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:01 +0000
Files and hashes:         1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: g+no8CRnRn3dYf104LUiuUpwHNZA4oYDN0ey4KkWw/c=)
                          2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:11:4f:4b:b2:25:9b:c2:fd:4e:50:5a:36:0d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
        Validity
            Not Before: Apr 17 09:01:01 2026 GMT
            Not After : Apr 18 09:01:01 2026 GMT
        Subject: CN=72a985f1a5f5311a417824bbedd61832655764cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:5d:c7:c8:12:c2:9d:cc:30:09:68:91:29:
                    d8:90:04:65:ba:7f:ad:52:f7:8e:75:4f:25:00:a2:
                    91:c2:00:79:8a:4f:ec:12:7c:a3:01:20:ba:9e:4a:
                    f3:54:26:06:0f:a8:0c:f1:28:be:84:db:9a:41:5c:
                    17:87:f4:9b:b9:c3:bd:76:6f:fb:a6:aa:85:53:9a:
                    8c:f3:b0:33:fe:36:15:40:a2:7f:bd:7d:0a:84:5a:
                    a5:10:f1:3f:f1:73:d1:e0:95:0d:bd:68:ae:70:37:
                    1e:6d:84:d5:0c:ea:4b:de:77:c6:91:14:f4:09:9a:
                    99:c7:76:12:36:5b:62:2a:99:3d:c1:d6:0c:8f:af:
                    8e:36:80:ac:10:1f:73:e9:e8:c5:3a:fb:6c:f0:2f:
                    b6:e3:15:77:0d:65:29:fd:4e:8b:00:49:6f:81:cb:
                    91:e6:0e:d4:f0:8e:de:ae:22:1a:18:af:c8:d5:47:
                    cb:05:39:9b:e8:30:99:08:50:d9:1f:7f:d4:45:05:
                    be:4f:28:e0:82:a5:99:3c:76:01:30:08:9d:76:18:
                    d5:30:3c:6c:2a:f1:db:ec:6b:ad:12:35:07:e7:6d:
                    30:2d:a4:da:53:39:c1:a0:ef:d5:7d:2f:05:f8:73:
                    44:a9:81:0f:4f:86:78:25:ce:5d:54:9a:4f:27:46:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:85:F1:A5:F5:31:1A:41:78:24:BB:ED:D6:18:32:65:57:64:CC
            X509v3 Authority Key Identifier:
                keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:f2:fe:26:c2:de:a7:6a:5f:d7:b3:cf:9c:59:76:58:40:
         12:0f:f4:b0:11:c1:34:80:ad:35:fb:b8:43:cf:a4:77:88:c8:
         36:2b:18:c5:be:ba:94:d3:48:c0:2b:45:d0:9f:83:6f:5d:ee:
         94:4b:c3:b5:a9:75:5c:80:1e:03:f0:fe:cd:e6:bf:12:e2:25:
         cd:ce:c6:ae:75:90:60:4c:b1:69:70:bd:99:e6:89:7f:af:3a:
         3c:16:8f:67:7c:32:15:e1:a2:80:ab:bb:b9:61:b3:90:9e:de:
         95:91:cb:a5:68:c9:99:ae:19:c9:78:42:cc:59:7d:c3:da:5c:
         38:8f:35:54:46:af:23:93:e9:e0:b7:ca:20:b7:94:2a:79:36:
         57:40:3c:18:42:3c:68:52:bf:01:0a:0b:66:54:e0:5f:b9:91:
         8f:ed:93:d0:0f:78:d6:f9:81:ea:32:ed:19:d2:5c:1c:cb:ac:
         67:e5:38:32:dc:b9:18:b0:08:cf:f6:91:e0:ce:1c:af:af:31:
         71:e4:0a:24:87:5e:b4:43:63:d9:a3:fa:4d:f3:02:7e:f3:ea:
         eb:d0:f3:e8:1a:a3:42:4f:cd:57:52:07:20:45:29:4b:88:6f:
         97:75:8c:77:8e:f7:fe:ce:75:f1:ae:86:db:7b:0b:d8:41:d2:
         17:cd:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:41 2026 by rpki-client