Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          kPPgg0C+Uy4g1m2jaIz9mIdmRU1ZLLdgJDlqrlPv++Q=
Subject key identifier:   DB:3A:29:71:AF:5C:FF:B5:8B:18:8E:16:5C:07:CC:B6:F2:60:A1:1E
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019CA9EACE1E93D7EC8A72CBFE769DA8872D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          1878
Signing time:             Sun 01 Mar 2026 15:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:03 +0000
Files and hashes:         1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
                          3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
                          4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
                          7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
                          8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
                          9: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
                          10: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          11: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          12: cFB_Qjuns6l6KcuIKXsZqJK6Vg4.roa (hash: V4Rw2W70jgdIniROkJ3lKSSQgcdifJcau/v/LfXynbA=)
                          13: esKqO8BYhBEBTmMBHqFeLfnifk0.roa (hash: vP9Ymiwt9PD54e5jiYQZJmQ5Ilcp3al9yl8UXkwBN+8=)
                          14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: 6NqOUKmUk6pFcrixPtJpqxcboLniFWZNI48dbgzMQY0=)
                          16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
                          18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
                          19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
                          20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:ce:1e:93:d7:ec:8a:72:cb:fe:76:9d:a8:87:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Mar  1 15:01:03 2026 GMT
            Not After : Mar  2 15:01:03 2026 GMT
        Subject: CN=db3a2971af5cffb58b188e165c07ccb6f260a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:60:3d:c8:e0:30:81:5d:41:bd:d6:7c:6e:
                    90:cb:22:9e:27:b0:ee:17:b9:72:ea:3d:59:39:71:
                    2e:2c:ad:0c:b6:72:25:f7:d8:32:88:14:8b:41:a8:
                    87:a7:22:83:ff:70:e1:e3:37:d6:bf:5a:b3:77:e1:
                    6a:7e:3e:84:8c:1a:f3:b1:f9:f0:3f:27:e9:fa:b9:
                    1a:05:12:04:0c:59:3f:a7:de:ce:b8:00:6f:5b:9c:
                    74:cb:09:ff:ec:66:9e:c2:78:db:75:10:ba:d0:12:
                    45:87:58:1b:da:5d:cf:89:88:78:85:29:43:08:7c:
                    a8:1b:5f:49:f9:28:0f:59:15:2d:81:d8:a0:45:d2:
                    88:ea:4a:fa:55:41:3f:27:d4:cd:00:49:64:d6:2f:
                    88:dc:60:d3:80:c6:77:a3:0d:49:2f:c3:be:62:bf:
                    e4:91:36:ae:f1:49:58:8d:5b:6f:67:bd:de:b5:31:
                    cd:83:b6:a4:8e:9a:2a:9c:cb:ee:57:1c:b8:a4:e0:
                    92:60:93:05:fc:da:54:89:aa:58:99:e7:e5:e3:48:
                    d0:c5:01:97:81:d8:e4:8a:d3:ce:d2:8d:fc:87:5d:
                    10:8e:2c:e5:d1:65:db:f1:c5:7b:e7:7f:d3:59:56:
                    5f:85:ab:82:1f:0e:d2:d9:61:31:56:ed:3e:42:56:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:29:71:AF:5C:FF:B5:8B:18:8E:16:5C:07:CC:B6:F2:60:A1:1E
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:43:32:c0:1d:8e:b2:d0:a1:52:21:9a:c6:61:d2:b1:b3:
         ae:0b:fe:ab:ac:ce:ff:77:dd:53:a3:08:79:8d:21:7b:69:9f:
         64:05:e1:fd:e5:c5:23:56:3c:9d:61:d3:32:49:35:bd:d2:60:
         f9:84:45:68:e2:84:28:67:7a:e9:88:fa:0c:42:66:42:27:4a:
         b5:e3:de:07:87:0a:24:5c:93:e9:1d:4d:e6:67:b1:e8:85:b5:
         3b:b6:31:f8:a8:58:bc:f6:f1:00:4c:2e:2d:8d:a2:2c:e3:aa:
         85:73:c3:2c:a9:1f:71:0a:7b:c6:02:82:ba:b4:97:02:0e:90:
         d0:fb:ee:94:85:26:32:de:a2:e0:92:20:67:fa:6c:26:8f:81:
         a3:a5:f4:ab:4e:8c:fd:cf:10:41:07:02:77:35:be:76:74:50:
         24:ee:b1:99:17:4b:5a:f2:78:e1:37:b7:f7:d3:c5:7c:47:4f:
         a7:9f:b1:7c:71:c1:cb:3d:14:23:a8:64:77:93:b9:67:98:56:
         1f:96:c9:b6:fc:c6:ff:79:f0:d3:be:ee:d7:0a:93:9b:4c:8c:
         2a:46:a5:25:20:d4:7f:bd:5d:31:1e:5c:52:84:27:99:d9:cf:
         59:cc:ca:1d:3c:30:2f:a0:fb:31:fb:c2:1f:1a:4f:7e:f9:d2:
         9e:c3:b3:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6s4ek9fsinLL/nadqIctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwMzAxMTUwMTAzWhcNMjYwMzAyMTUwMTAzWjAzMTEwLwYDVQQD
EyhkYjNhMjk3MWFmNWNmZmI1OGIxODhlMTY1YzA3Y2NiNmYyNjBhMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWNgPcjgMIFdQb3WfG6QyyKeJ7Du
F7ly6j1ZOXEuLK0MtnIl99gyiBSLQaiHpyKD/3Dh4zfWv1qzd+Fqfj6EjBrzsfnw
Pyfp+rkaBRIEDFk/p97OuABvW5x0ywn/7GaewnjbdRC60BJFh1gb2l3PiYh4hSlD
CHyoG19J+SgPWRUtgdigRdKI6kr6VUE/J9TNAElk1i+I3GDTgMZ3ow1JL8O+Yr/k
kTau8UlYjVtvZ73etTHNg7akjpoqnMvuVxy4pOCSYJMF/NpUiapYmefl40jQxQGX
gdjkitPO0o38h10Qjizl0WXb8cV753/TWVZfhauCHw7S2WExVu0+QlZeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs6KXGvXP+1ixiOFlwHzLbyYKEeMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl45DMsAd
jrLQoVIhmsZh0rGzrgv+q6zO/3fdU6MIeY0he2mfZAXh/eXFI1Y8nWHTMkk1vdJg
+YRFaOKEKGd66Yj6DEJmQidKtePeB4cKJFyT6R1N5mex6IW1O7Yx+KhYvPbxAEwu
LY2iLOOqhXPDLKkfcQp7xgKCurSXAg6Q0PvulIUmMt6i4JIgZ/psJo+Bo6X0q06M
/c8QQQcCdzW+dnRQJO6xmRdLWvJ44Te399PFfEdPp5+xfHHByz0UI6hkd5O5Z5hW
H5bJtvzG/3nw077u1wqTm0yMKkalJSDUf71dMR5cUoQnmdnPWczKHTwwL6D7MfvC
HxpPfvnSnsOz2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:51 2026 by rpki-client