Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File:                     LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier:          BoghhN474xx+e+UcXrG3S+sUXb8cVorLCXn7aC3c220=
Subject key identifier:   31:4C:0A:29:F5:B9:68:9A:15:F5:83:24:1A:31:23:33:F6:AF:28:7A
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer:       /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial:       019CAAC6860C2CC1200A2AFE2511BCB381D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 19:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:02 +0000
Files and hashes:         1: 34wMdXaJWXbm1abhGPa8jrp6PhI.roa (hash: S1oGzVckDcSBz0QSTCJM8A+w1TpNDNfG3AFSsSOoiFk=)
                          2: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: yYYeDKi2JjZ9d2eAJKixyi+AZ09Ge4nbTOt/MFL8/RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:86:0c:2c:c1:20:0a:2a:fe:25:11:bc:b3:81:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
        Validity
            Not Before: Mar  1 19:01:02 2026 GMT
            Not After : Mar  2 19:01:02 2026 GMT
        Subject: CN=314c0a29f5b9689a15f583241a312333f6af287a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:33:ae:78:a7:20:c5:84:f6:52:d5:fb:e5:
                    48:4c:0f:34:01:e7:1d:a3:49:98:35:b9:35:42:56:
                    3b:88:59:1b:cc:04:65:43:33:fb:cf:35:95:58:11:
                    72:00:71:fb:f0:7c:ca:d4:df:b7:eb:01:a5:64:ad:
                    48:28:d7:6f:dd:65:64:d6:9c:68:d6:21:cf:c8:d5:
                    da:3a:c4:44:45:89:d0:0e:1d:2b:dd:1b:ab:ce:19:
                    f8:e8:3d:86:85:72:71:9a:06:e8:03:00:65:13:4c:
                    0c:d5:80:80:1d:b7:e6:e5:d2:e8:3f:c2:61:46:ef:
                    b1:bb:c4:02:12:84:80:e8:14:8e:8d:2d:ef:08:b9:
                    74:42:d3:bf:06:a5:33:7d:35:49:cd:11:60:f5:b3:
                    1c:e8:8f:68:18:a5:4c:4c:b5:5a:7b:84:25:d5:0a:
                    86:56:ac:15:7d:a5:e3:bd:9f:dc:d0:ef:ec:01:3b:
                    d3:80:86:6f:c6:a4:4a:13:b3:23:11:f9:25:a6:89:
                    74:44:40:4a:56:49:83:a5:50:f3:a8:0d:28:4c:3c:
                    ca:a6:07:4f:0f:06:bc:76:12:44:71:c2:47:5e:aa:
                    76:d6:58:ee:7d:e1:b0:d3:df:b2:90:cc:7e:23:1c:
                    a0:8a:83:89:74:f6:c6:f2:db:b0:b3:7c:2d:2a:5e:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4C:0A:29:F5:B9:68:9A:15:F5:83:24:1A:31:23:33:F6:AF:28:7A
            X509v3 Authority Key Identifier:
                keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:63:58:3b:a4:ea:5c:ce:cb:4c:7e:7d:62:20:54:18:95:
         58:38:a4:37:24:16:01:25:00:48:88:3f:42:c5:1e:39:2e:4a:
         36:1b:10:1d:f0:c7:c7:d2:b4:56:a9:68:52:c2:aa:d9:3a:ee:
         95:fd:39:ee:81:c7:43:bc:0e:d6:9c:2c:36:62:1d:7d:d1:f8:
         5d:66:af:6e:fa:2b:09:d7:91:0f:9c:39:ac:77:04:3c:f2:76:
         32:db:1e:73:aa:4f:c9:f8:7f:89:89:65:4f:b2:dc:db:49:ee:
         89:5b:a2:e0:40:e1:99:c9:e9:db:4e:39:8b:99:09:30:34:07:
         0d:f8:38:ef:c9:ae:28:49:b9:23:f6:84:d0:bd:d2:ce:0b:9e:
         a9:ec:f9:39:59:d3:ce:87:06:54:bb:10:2f:d2:ae:46:7c:ad:
         b7:09:02:55:61:10:d2:97:13:32:60:52:9a:75:0b:27:b0:eb:
         8f:f5:db:a7:73:cc:80:4d:57:c9:b5:e7:20:66:0f:25:a9:8a:
         25:21:be:80:4b:13:ed:b8:bd:49:63:5f:5d:f4:49:90:d6:19:
         6c:c4:cf:cb:19:36:fe:5b:da:62:ca:26:78:e8:88:38:5f:24:
         e3:e7:3c:31:09:62:4b:f2:e5:d8:df:7a:dc:28:32:b8:9c:da:
         23:a8:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:27 2026 by rpki-client