Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File:                     LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier:          3hvhQWHMtqWrBox8FLC1OMQZaexC7x2TKA6lUwBJRq4=
Subject key identifier:   82:EF:27:91:E1:F5:BA:09:37:D2:01:BC:34:B8:7F:D5:29:6B:84:4F
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer:       /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial:       019D9A3F1A175ACA2FBF0EFF28A92E738E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 07:01:59 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:59 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:59 +0000
Files and hashes:         1: 34wMdXaJWXbm1abhGPa8jrp6PhI.roa (hash: S1oGzVckDcSBz0QSTCJM8A+w1TpNDNfG3AFSsSOoiFk=)
                          2: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: ahe+FY3ZaTWA1LJ58nuXTI/v88PR+b9g16rtOgpEJpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:1a:17:5a:ca:2f:bf:0e:ff:28:a9:2e:73:8e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
        Validity
            Not Before: Apr 17 07:01:59 2026 GMT
            Not After : Apr 18 07:01:59 2026 GMT
        Subject: CN=82ef2791e1f5ba0937d201bc34b87fd5296b844f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:93:e7:70:82:b1:f7:f7:c8:62:9b:65:d5:
                    15:ac:d3:6e:75:a2:f4:3b:18:6f:3a:ba:88:6d:e1:
                    86:f0:01:43:66:62:0c:ca:c9:2a:d0:c0:32:a9:a0:
                    90:a0:2e:10:60:7c:c9:04:62:3e:9b:d8:48:65:d7:
                    c3:ff:c3:3f:45:1f:3e:32:78:4e:d5:ff:d3:6c:92:
                    af:2e:bf:9e:e4:8e:38:46:ac:f8:2f:0d:96:cc:09:
                    7c:f5:34:49:27:17:1e:80:97:b0:fb:0b:55:63:a8:
                    9a:c0:d3:a2:92:87:c1:00:93:2f:02:e1:23:9a:2f:
                    02:48:75:dc:c4:43:e5:af:d9:58:3a:6d:d9:35:a1:
                    5f:c3:37:7b:50:33:2f:61:e4:f1:9c:63:ca:fa:66:
                    20:0b:fe:ec:cd:e0:49:c8:07:d1:b4:f3:d6:3a:9c:
                    23:53:5e:79:f4:42:a5:5b:48:1d:91:28:b2:50:0d:
                    d5:6b:42:69:fa:71:48:fb:8d:73:d2:52:81:da:28:
                    50:e1:6d:43:76:86:70:8b:a0:2b:17:7e:f8:67:7e:
                    bc:f7:a1:4e:ff:c9:58:bf:bc:67:71:46:39:3d:05:
                    58:2a:45:f5:5a:bf:50:3f:94:3c:0d:43:6b:7a:1d:
                    da:e1:57:af:6a:93:52:ac:e3:71:3e:a6:e9:53:91:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:27:91:E1:F5:BA:09:37:D2:01:BC:34:B8:7F:D5:29:6B:84:4F
            X509v3 Authority Key Identifier:
                keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8c:55:14:3f:56:73:43:9b:c9:91:36:2d:75:aa:6e:00:9a:
         85:4b:a9:22:67:fa:07:6b:93:54:6a:8b:2d:9e:a1:7a:cd:2c:
         28:4d:22:99:e5:26:b2:b8:7f:89:3c:fe:24:62:c5:72:12:dd:
         f5:98:82:85:6c:62:bf:48:8d:d0:0a:6a:01:cb:22:8a:5b:73:
         c9:22:19:b2:f2:33:12:43:00:ee:ff:0d:84:d5:e2:52:d2:fe:
         b8:95:06:a0:4c:e3:28:31:d6:5c:62:48:a6:18:60:10:d3:58:
         ec:53:46:cf:50:7c:35:52:04:ee:b0:93:b6:39:8d:e6:02:37:
         42:d3:a6:6a:ce:69:0b:e8:1f:dc:39:0e:8d:ac:1d:59:bf:44:
         53:5e:cd:e7:52:20:4c:7d:8e:41:fe:1c:a7:fe:29:63:81:4b:
         bd:1b:ba:59:27:aa:81:c2:ac:a7:da:64:71:6c:6d:e2:72:e2:
         77:03:56:30:53:68:c1:71:7f:2b:2a:43:52:6a:45:16:26:cc:
         d4:7c:5f:a8:e1:a2:b6:47:30:29:9b:25:5b:31:49:c1:9b:93:
         e7:2f:42:da:c1:f7:48:1a:1f:bf:2e:c2:53:98:9b:fe:82:a2:
         e8:4e:6f:b5:00:7b:9c:20:ff:1b:eb:0f:8c:33:14:a4:e6:ee:
         39:74:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:50 2026 by rpki-client