Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File:                     LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier:          kRb2/sv54KOiNZE/Qr62KtdeEm21yZ0PtEmKBsLQ1Iw=
Subject key identifier:   FF:46:3C:7F:5D:2A:D1:A0:C0:38:1C:7E:12:80:CF:38:EC:16:F3:B3
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer:       /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial:       019D9BF546985BBC95E97EB9350A5B88BDE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 15:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:35 +0000
Files and hashes:         1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: B4yUVSUwvfGUS8OuijPLQw4XjcIA6fNTKdJc3uPCOPI=)
                          2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
                          3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
                          4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:46:98:5b:bc:95:e9:7e:b9:35:0a:5b:88:bd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
        Validity
            Not Before: Apr 17 15:00:35 2026 GMT
            Not After : Apr 18 15:00:35 2026 GMT
        Subject: CN=ff463c7f5d2ad1a0c0381c7e1280cf38ec16f3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:82:78:5a:34:54:70:a8:92:9f:81:cf:24:
                    c7:97:ea:76:3c:10:6c:0e:33:2e:16:c9:ab:6c:f8:
                    aa:b5:e7:29:31:0d:5f:f9:64:e7:b3:e1:6c:a8:8d:
                    ce:45:94:83:00:58:5d:10:a7:02:a2:0b:26:24:ea:
                    c1:c1:bd:50:47:4e:44:97:60:ea:7c:fd:eb:e4:80:
                    4f:48:35:50:46:1d:36:52:94:e9:b7:66:40:9c:cb:
                    eb:f4:1d:d4:af:7b:c4:1b:96:c9:ce:ef:93:4e:59:
                    d4:f3:cb:8e:7b:d2:40:7b:77:01:9b:cc:ee:aa:c0:
                    a8:db:60:92:d7:22:42:97:5a:69:dc:76:33:00:b6:
                    12:37:12:a2:3a:79:a9:23:52:2d:79:1a:5f:6a:6c:
                    00:00:38:7a:9b:de:70:d0:e3:5d:99:15:7f:ea:43:
                    ce:38:fe:bb:6b:2e:0e:ba:36:5e:1b:b5:0f:93:55:
                    11:02:1b:c5:5f:7f:80:67:d3:6c:c0:a6:13:fb:74:
                    7c:5c:1d:9d:14:ae:9a:7a:9e:21:38:09:0c:27:49:
                    af:61:e5:37:a1:79:fa:8a:dc:89:1c:dc:20:7e:4f:
                    ed:65:3d:ac:f4:63:7a:6f:e3:ad:9b:78:e2:f5:48:
                    87:01:e6:af:cb:c7:ef:83:f8:02:27:38:fd:67:4a:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:3C:7F:5D:2A:D1:A0:C0:38:1C:7E:12:80:CF:38:EC:16:F3:B3
            X509v3 Authority Key Identifier:
                keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:96:4d:90:5f:b8:d3:92:e7:55:5c:dc:1a:14:e2:47:0e:
         bf:6d:a6:72:f7:46:e5:b9:79:4a:cf:8c:e2:f1:4d:b7:24:c4:
         ee:95:b4:f3:26:23:28:9b:cd:a6:30:fc:85:9b:f2:9e:7d:ca:
         fd:08:ac:13:5a:20:69:c6:da:d2:f0:e4:12:d5:07:99:e4:9a:
         b6:98:ae:41:fd:2a:be:60:86:03:7b:93:3c:31:93:d4:3a:f6:
         d9:37:a1:7e:45:a9:70:f1:d1:0c:a0:69:79:bc:87:5b:cb:7c:
         9d:f0:32:37:03:eb:8b:ab:f4:f6:97:c0:71:0e:5e:38:14:c2:
         d8:6e:08:08:30:a0:76:38:70:c1:43:79:16:c4:a0:24:ec:40:
         40:42:45:04:b6:ca:9b:df:05:60:34:a3:af:8a:b2:cf:bf:3a:
         c5:34:2e:5c:c1:12:45:e4:00:dc:c7:12:4b:d2:74:f9:66:ba:
         77:9d:14:c5:47:25:ca:2d:31:06:58:15:83:54:55:3b:84:06:
         cc:31:cc:10:32:97:aa:81:b2:a7:1d:3b:1f:c4:d0:06:30:9a:
         76:25:e8:16:75:71:05:77:01:a4:33:e5:3b:30:fe:4e:66:f9:
         f8:95:61:4b:aa:1f:b9:8c:d4:97:ea:14:b2:20:8f:e4:39:a3:
         16:36:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:48 2026 by rpki-client