Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File:                     LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier:          PnU0W1jnuZ0nq3JKMMsWXVjxZMj4aga1Qxqnxs5WklU=
Subject key identifier:   FC:1D:CD:A1:B5:14:23:07:73:D9:93:F2:4A:C1:4D:2A:57:32:9D:F8
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer:       /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial:       019D9AE26397406C40BA762931F4347B6D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number:          1350
Signing time:             Fri 17 Apr 2026 10:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:20 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:20 +0000
Files and hashes:         1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: 8TZ6kQ7rxTn3C/Xlws5h05O5Ojxlyc6MDhyeDVHH+ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:63:97:40:6c:40:ba:76:29:31:f4:34:7b:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
        Validity
            Not Before: Apr 17 10:00:20 2026 GMT
            Not After : Apr 18 10:00:20 2026 GMT
        Subject: CN=fc1dcda1b514230773d993f24ac14d2a57329df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:58:c6:6e:6f:3f:6a:db:61:38:2d:50:39:
                    ed:34:96:76:77:ac:f8:e5:f0:43:53:08:0f:c2:4d:
                    8c:58:24:10:67:e3:80:94:8d:c9:1f:ff:94:84:3b:
                    ca:58:12:96:9a:5e:05:34:48:2b:1d:74:0a:6b:96:
                    56:ef:34:0b:6d:6a:9d:dc:0d:ee:45:78:9d:d1:3e:
                    8b:8f:e3:70:2f:e2:f7:6a:29:42:76:87:35:df:73:
                    52:e9:b0:4f:b5:d5:64:f9:b7:e8:9a:f1:36:db:85:
                    8a:74:86:96:fd:78:a1:a6:0c:79:88:24:e1:14:62:
                    49:ed:59:f1:87:2b:bd:17:89:07:98:c6:fd:d4:bf:
                    9a:cf:f9:80:0b:1f:0c:6d:fd:9f:43:4b:18:38:47:
                    50:3d:c0:8c:5a:db:52:25:85:40:00:9e:c5:0c:58:
                    fb:cc:5f:e4:8d:c9:95:d0:b4:05:78:ec:e4:b0:dd:
                    6d:d5:5b:66:76:03:a9:8f:08:86:a2:21:1c:3b:a5:
                    6b:1d:a3:c3:da:4b:fc:4b:3f:a2:2c:c9:27:e4:ba:
                    28:0d:7c:e4:8f:28:c2:27:e5:e1:d4:cf:05:dc:e1:
                    de:d4:a7:71:3b:2d:94:88:4f:29:c3:24:67:96:f0:
                    6b:d5:96:78:c8:d7:57:0c:9a:b6:09:03:ab:3f:f5:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1D:CD:A1:B5:14:23:07:73:D9:93:F2:4A:C1:4D:2A:57:32:9D:F8
            X509v3 Authority Key Identifier:
                keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:41:00:30:2f:99:80:f9:d5:30:9c:36:a2:39:78:97:1a:aa:
         bb:09:74:ea:e2:75:e1:6a:c9:32:cb:c7:13:85:34:bb:51:79:
         d4:b0:b1:ff:58:05:c8:e1:3d:ba:dd:c0:9a:6a:d1:e9:ac:f7:
         3a:54:68:cb:7d:83:dd:bf:38:b7:66:38:4d:4b:40:5d:c4:c3:
         c7:85:62:16:85:98:72:76:0b:ed:30:53:15:21:86:1a:17:3e:
         09:0e:cf:25:f8:37:d0:b6:6e:76:f7:2c:b8:59:22:dd:c6:34:
         50:8e:d4:e1:1f:23:0d:4f:c4:16:89:a1:65:48:0a:b3:ae:15:
         d4:1e:1e:d5:8d:c0:b6:9c:d7:36:43:9c:29:22:cf:60:32:d7:
         29:83:30:26:da:14:6a:b6:09:2e:de:14:89:22:b2:33:34:b2:
         12:47:6d:0b:84:12:14:b8:a2:f8:66:c5:cf:b6:50:6c:c7:82:
         64:14:49:a8:ee:fc:88:09:0d:1c:17:e1:45:37:7b:27:e3:34:
         0e:af:2c:e4:31:68:96:40:d3:40:47:03:65:1e:e5:1a:83:9b:
         ec:1f:94:27:7f:9b:36:72:e2:88:61:03:b5:ae:40:01:14:8e:
         ea:33:46:a1:0b:ab:33:ec:96:6b:a4:6c:6c:c0:6d:e4:2c:f2:
         0c:24:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:57 2026 by rpki-client