Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          4+GvHM/ZXNZJuQX69rtRhW5As7ZVOZHNiNVMFlkqX5w=
Subject key identifier:   03:71:5A:47:3E:81:18:14:42:C3:1D:2E:00:9E:20:BF:DE:FD:50:07
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       019D970665189D251943F850B476A8DA9C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          18C7
Signing time:             Thu 16 Apr 2026 16:01:11 +0000
Manifest this update:     Thu 16 Apr 2026 16:01:11 +0000
Manifest next update:     Fri 17 Apr 2026 16:01:11 +0000
Files and hashes:         1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: ov7hIBKdWcHECyhfm2e20I5SeOT5PeVyBc0/3HDwAe0=)
                          2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
                          3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
                          4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
                          5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
                          6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
                          7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:06:65:18:9d:25:19:43:f8:50:b4:76:a8:da:9c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Apr 16 16:01:11 2026 GMT
            Not After : Apr 17 16:01:11 2026 GMT
        Subject: CN=03715a473e81181442c31d2e009e20bfdefd5007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:97:33:75:1f:eb:a3:08:94:e9:a7:69:82:
                    ec:1b:e8:16:d0:78:5a:d8:ce:4a:0e:46:69:b3:0e:
                    10:28:cc:59:0c:cc:4b:d2:6d:0f:1d:cd:8b:21:ad:
                    76:e0:21:c4:4f:38:bf:53:c5:7b:2e:b4:da:58:62:
                    7f:0a:4f:2b:18:50:e8:1b:d4:de:e2:4e:db:82:00:
                    cc:07:5c:9a:03:a4:08:f0:41:10:1c:4b:78:c3:5f:
                    22:fb:f9:38:33:42:d4:df:d1:1a:bc:da:f8:81:b5:
                    fe:b8:9a:1c:56:5f:f4:74:fa:5c:0b:6d:94:ae:6a:
                    3e:40:5e:e7:87:be:98:a1:a4:9f:48:1d:74:c2:46:
                    64:65:72:97:6c:85:06:69:61:1c:27:7e:6e:88:a4:
                    3b:4b:94:c1:0b:05:42:d6:49:22:4b:c1:a6:20:3d:
                    9c:4d:c4:76:9b:20:8d:67:95:6a:72:f5:71:17:94:
                    36:9b:8e:11:c4:46:65:0f:a1:7a:6c:5d:65:b8:a0:
                    7d:e4:1a:5b:eb:7a:83:c5:26:a0:59:76:17:a9:42:
                    e2:24:0e:f2:ee:f3:35:ff:3d:c6:b4:f1:23:58:f9:
                    29:5e:96:28:67:82:e5:99:60:90:77:b2:0f:b6:c5:
                    2c:d7:ab:c1:fd:90:16:b0:26:b2:9b:ca:af:88:73:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:5A:47:3E:81:18:14:42:C3:1D:2E:00:9E:20:BF:DE:FD:50:07
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:9e:a0:af:4e:74:cf:fe:10:a3:dc:90:6e:39:ea:68:09:
         f6:84:5c:f9:b6:e8:b6:86:6a:20:ea:fa:b9:49:f6:44:d2:d3:
         62:c9:87:cb:39:6c:6b:f5:61:cf:ec:da:72:cd:48:9b:31:c3:
         d8:69:40:9e:3b:4c:c6:14:38:67:54:7e:ad:56:2a:e9:8c:7f:
         eb:7b:9a:6a:b0:bd:20:f3:20:94:b2:fe:db:3d:50:0c:9a:1b:
         39:37:1b:b0:ed:06:af:e1:b1:0f:73:cf:92:04:eb:80:94:61:
         5b:be:33:2c:67:a5:ad:a2:d8:db:fc:9c:37:b4:c6:e4:42:b5:
         9e:b6:5b:0e:8f:19:bc:92:86:d9:75:3f:88:36:61:ad:1e:6d:
         0d:7b:c6:16:7a:b5:4f:20:83:34:77:bf:c1:50:ef:ac:9b:24:
         01:bc:1c:3d:3f:86:f8:f3:8f:d5:bd:5b:ef:39:5d:58:61:26:
         12:90:96:bd:79:dd:d4:3d:56:9c:05:07:fb:31:37:86:3f:e6:
         df:14:2e:6d:13:6b:89:2d:1f:c6:ad:70:a1:52:88:ba:df:09:
         ec:80:2e:65:55:88:71:7a:36:74:86:1a:d0:dc:73:f5:70:87:
         19:13:1d:a8:45:63:5d:7f:d3:6a:9b:a4:79:06:b0:62:f1:cb:
         c3:0a:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:10:25 2026 by rpki-client