Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File:                     LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier:          8m0K/5O/1+3L2LUebFwwncIYxQ5psETVSp0tijbvTzo=
Subject key identifier:   B9:EF:DE:9F:B5:17:83:81:AE:DB:37:83:8E:C8:27:0D:26:1A:30:B2
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer:       /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial:       019D9C63330C48ACE33B5AE2517F2FA15988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 17:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:39 +0000
Files and hashes:         1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: v1jzxzaw1LPU2pwNHWVvEsNTLkKnJ/KPxCbhvDffqic=)
                          2: tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa (hash: QOlqs8KXOpGS492JR6Z+1it46kTu85+FaSQ+ynVWEh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:33:0c:48:ac:e3:3b:5a:e2:51:7f:2f:a1:59:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
        Validity
            Not Before: Apr 17 17:00:39 2026 GMT
            Not After : Apr 18 17:00:39 2026 GMT
        Subject: CN=b9efde9fb5178381aedb37838ec8270d261a30b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:b0:b4:26:a8:07:54:6d:90:de:04:13:98:
                    22:29:a7:c5:5e:61:e2:91:6f:84:c9:61:b7:37:34:
                    ba:b2:d0:22:4e:bc:86:de:a4:86:3f:50:8a:2f:a9:
                    6a:d3:dd:f9:95:d2:97:1c:95:46:64:8c:cc:83:2b:
                    42:e4:c6:e5:4c:4e:11:0f:27:46:74:0a:2b:72:90:
                    e5:27:c2:91:d1:e5:02:d7:d3:d7:ca:13:0f:14:c2:
                    c2:cc:56:5d:a6:61:fa:f2:1c:2f:04:e7:8a:34:a9:
                    85:b1:19:26:15:27:47:69:e8:90:08:eb:11:7d:d0:
                    2d:b3:e6:b2:07:2b:92:ed:d3:54:a3:68:6f:d9:92:
                    83:2c:97:85:29:80:c9:f5:02:f4:cb:c2:0c:85:a7:
                    5e:6c:d0:0f:4a:b6:7a:a9:14:c0:3e:01:0f:42:bb:
                    7a:d6:2e:d1:5b:5f:3d:bf:ad:b3:32:23:59:8b:32:
                    73:5a:4a:97:0d:ba:cc:10:ea:0b:1a:f6:6d:c3:8e:
                    dd:c8:48:a9:bf:0b:c4:84:0e:54:2c:f8:27:46:98:
                    38:0a:c1:6b:e2:28:4f:03:12:49:74:ac:82:74:17:
                    b6:16:cb:08:d7:38:df:7e:93:71:c6:ab:e9:93:8c:
                    01:ed:ea:5c:01:d5:a9:bf:52:d6:39:28:75:f3:a3:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:DE:9F:B5:17:83:81:AE:DB:37:83:8E:C8:27:0D:26:1A:30:B2
            X509v3 Authority Key Identifier:
                keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:53:67:b2:66:70:0e:90:9d:a6:62:d8:52:e0:6f:84:5a:0e:
         42:84:01:d3:7e:f6:04:f2:01:f8:17:df:90:2b:a4:02:9b:1e:
         51:ea:67:ef:81:a8:e0:70:f7:19:43:78:e9:28:b4:c5:2b:f7:
         46:0f:c2:e9:25:2e:3c:0e:a5:0a:95:bb:ac:61:6c:b5:07:08:
         31:aa:33:6a:f4:e0:b0:af:c7:79:f4:70:5b:bc:c8:61:a0:6a:
         3e:2c:18:2a:66:04:8e:d7:92:a6:b5:7c:5b:dc:c8:c9:d2:24:
         50:c2:4c:da:55:f5:1c:c9:4d:e1:90:44:d7:dd:08:fb:b9:c9:
         95:03:c2:8b:ef:ec:ad:70:d2:de:f5:b9:31:bf:70:2c:77:54:
         d2:0c:c2:fd:82:e2:1a:0e:95:86:c3:c5:c5:70:6b:c9:b3:ab:
         14:f6:71:2f:89:e1:ad:91:b6:15:3e:24:38:6e:d9:15:29:49:
         af:df:db:e7:47:09:97:c2:eb:ee:7c:5b:8b:e9:e0:15:d9:0f:
         9e:ef:e8:96:5c:dc:3f:e0:ff:dd:4f:5f:1b:08:4b:51:60:d1:
         a0:77:9f:f1:f4:41:58:59:08:7b:86:0a:9a:92:a8:2f:79:70:
         5c:ba:0b:80:dc:16:5b:68:14:64:f9:4b:0b:1d:23:4b:ee:e6:
         41:b2:f8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYzMMSKzjO1riUX8voVmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3
YTg0ZGUwHhcNMjYwNDE3MTcwMDM5WhcNMjYwNDE4MTcwMDM5WjAzMTEwLwYDVQQD
EyhiOWVmZGU5ZmI1MTc4MzgxYWVkYjM3ODM4ZWM4MjcwZDI2MWEzMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPmwtCaoB1RtkN4EE5giKafFXmHi
kW+EyWG3NzS6stAiTryG3qSGP1CKL6lq0935ldKXHJVGZIzMgytC5MblTE4RDydG
dAorcpDlJ8KR0eUC19PXyhMPFMLCzFZdpmH68hwvBOeKNKmFsRkmFSdHaeiQCOsR
fdAts+ayByuS7dNUo2hv2ZKDLJeFKYDJ9QL0y8IMhadebNAPSrZ6qRTAPgEPQrt6
1i7RW189v62zMiNZizJzWkqXDbrMEOoLGvZtw47dyEipvwvEhA5ULPgnRpg4CsFr
4ihPAxJJdKyCdBe2FssI1zjffpNxxqvpk4wB7epcAdWpv1LWOSh186Nr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnv3p+1F4OBrts3g47IJw0mGjCyMB8GA1UdIwQY
MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct
Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm
LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVNnsmZw
DpCdpmLYUuBvhFoOQoQB0372BPIB+BffkCukApseUepn74Go4HD3GUN46Si0xSv3
Rg/C6SUuPA6lCpW7rGFstQcIMaozavTgsK/HefRwW7zIYaBqPiwYKmYEjteSprV8
W9zIydIkUMJM2lX1HMlN4ZBE190I+7nJlQPCi+/srXDS3vW5Mb9wLHdU0gzC/YLi
Gg6VhsPFxXBrybOrFPZxL4nhrZG2FT4kOG7ZFSlJr9/b50cJl8Lr7nxbi+ngFdkP
nu/ollzcP+D/3U9fGwhLUWDRoHef8fRBWFkIe4YKmpKoL3lwXLoLgNwWW2gUZPlL
Cx0jS+7mQbL4Fw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:05:08 2026 by rpki-client