Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File:                     lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier:          Ug7Kp/1PSdL7hQEcMq2QZXFPP0h6H258r84awZhA9JA=
Subject key identifier:   AE:5B:F8:3E:7E:69:33:55:6F:3D:51:07:FD:5C:52:22:A1:BC:28:19
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer:       /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial:       019D9C63A3461C903A7232258C27A4C7DAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number:          0F50
Signing time:             Fri 17 Apr 2026 17:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 17:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 17:01:08 +0000
Files and hashes:         1: USwT2SeaguMlyEEPFKrGUCTjicc.roa (hash: fLXx8GADpNCNj3rL26EzgEHCDr9VafNfGAWI6je4Vrw=)
                          2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: N4z6aSDjWc/4e0ZSq9X4jMeLmEL6T0nccVgp9u3eJRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:a3:46:1c:90:3a:72:32:25:8c:27:a4:c7:da:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
        Validity
            Not Before: Apr 17 17:01:08 2026 GMT
            Not After : Apr 18 17:01:08 2026 GMT
        Subject: CN=ae5bf83e7e6933556f3d5107fd5c5222a1bc2819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:b1:c1:40:cf:80:7b:7b:b1:b6:c4:33:f0:
                    63:30:24:64:73:e5:db:b5:93:5a:dd:09:7f:b6:79:
                    1c:62:a5:fa:62:99:af:b5:ae:aa:d7:b6:02:93:92:
                    61:07:d3:77:0f:2b:6c:3f:b1:c0:6f:66:b7:75:25:
                    80:f7:59:0b:e2:cc:ae:70:73:87:2c:bd:db:08:b0:
                    a5:91:f5:2f:0f:4b:9a:2e:90:26:51:e6:a0:6a:10:
                    03:a2:b6:86:a5:2e:00:13:21:a2:ad:14:04:74:2c:
                    89:76:0f:29:7f:0c:18:33:99:9d:c9:b5:0f:ac:94:
                    a9:73:69:b4:f3:76:07:29:68:f6:a2:ea:4f:33:69:
                    45:b3:d7:09:df:ca:ae:29:34:56:a7:e5:61:f2:50:
                    24:a9:df:a3:4f:0c:ee:4d:08:68:cb:3c:4f:2b:cd:
                    cd:61:43:a8:4b:d2:09:24:ff:25:83:0b:bd:98:3c:
                    c4:ff:ee:46:fc:02:7d:e2:e7:81:0a:f4:a2:39:65:
                    be:97:07:9f:7c:a6:df:fd:d8:2e:4e:03:ec:4b:7a:
                    06:68:57:09:6c:fe:fa:59:56:79:35:5c:a5:f4:ce:
                    06:b0:82:53:a0:57:65:02:32:d0:2e:fc:24:7c:09:
                    05:4c:2b:8b:dd:a8:18:07:f4:51:ea:e3:19:d5:fb:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5B:F8:3E:7E:69:33:55:6F:3D:51:07:FD:5C:52:22:A1:BC:28:19
            X509v3 Authority Key Identifier:
                keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:ca:7a:6a:80:a6:a3:7f:36:91:4c:76:7e:c3:09:a4:8a:
         9c:67:b5:d9:40:7f:3f:f1:c1:0e:db:dc:e1:d9:43:75:09:b3:
         c8:53:4c:c4:a6:5e:18:7d:d8:fb:1e:99:c6:a7:f0:6a:ea:73:
         80:fd:9e:09:fe:d9:42:02:98:b9:cc:fa:7f:93:81:e1:ce:49:
         07:22:3b:24:df:dd:9a:ae:38:c6:e6:d0:7d:ef:47:85:69:0a:
         d9:a4:c4:d8:d2:cb:d4:0b:50:4b:1b:95:44:a6:ea:b2:85:28:
         f4:12:31:e6:8e:68:cb:f0:d2:10:4f:6a:d6:74:5b:17:c3:da:
         e5:5e:b4:ba:a5:f9:44:ef:dd:ee:3f:20:5d:52:a1:90:21:e6:
         e4:2a:9d:0f:c3:ba:a7:b1:a4:5a:f3:3c:27:5a:f6:a9:62:54:
         8e:0d:a1:7a:b0:29:67:83:75:1b:1d:04:90:a3:4e:e2:8f:5d:
         3c:04:63:bc:11:77:8f:d7:5f:be:3e:81:fb:41:73:0f:1f:c4:
         e0:a5:97:69:46:ba:aa:b1:ec:2b:69:cf:8f:27:fd:ed:64:9e:
         ea:ec:61:c1:f3:62:88:22:3b:c0:24:26:f3:b9:00:de:c5:d4:
         83:70:00:4f:54:e7:db:24:7e:96:7d:f7:72:47:b7:78:1d:2f:
         7d:20:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:59 2026 by rpki-client