Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File:                     lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier:          ebQsSZC6B/x1D4uLPfVwBvKhwCzMcrpUxtGum5yQhlQ=
Subject key identifier:   F8:05:A6:AA:DF:6D:3F:9D:E5:E5:FB:4C:3C:45:5F:23:E6:7F:8A:02
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer:       /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial:       019CAD5941FA33D798AB045B6BCA5DED89B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number:          1522
Signing time:             Mon 02 Mar 2026 07:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:33 +0000
Files and hashes:         1: 1-lKoU1yOKxnwsDuF3-ruK96PVNo.roa (hash: IOjO4sGW5jpY5sMRaf3CjBzP7+xSqwcjH//jisz2/A8=)
                          2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
                          3: Ht4mv8kp4i3crO6SB184ED4eteI.roa (hash: UhjKCPcDd1ersETNcFLEp5rKk3sifo5x89dtS1h38rA=)
                          4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
                          5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: h48ZXe1DNMGHzBqNjoZqzkG0nm24Xd3XAX7lf2ggOBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:41:fa:33:d7:98:ab:04:5b:6b:ca:5d:ed:89:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
        Validity
            Not Before: Mar  2 07:00:33 2026 GMT
            Not After : Mar  3 07:00:33 2026 GMT
        Subject: CN=f805a6aadf6d3f9de5e5fb4c3c455f23e67f8a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:c3:02:19:af:b6:28:ed:67:86:0f:a8:59:
                    67:59:09:41:9e:2e:e0:dd:12:48:42:db:af:dd:75:
                    f0:69:1a:16:c7:e5:5b:7e:e9:f3:ca:91:ed:41:f6:
                    ce:da:8d:50:d1:c7:16:d2:44:13:56:85:99:33:e6:
                    99:6b:68:0e:23:0d:dc:3d:c7:1c:54:c4:9c:5c:8d:
                    f0:24:f2:d8:4f:0d:66:d5:a3:ac:ce:ab:a3:82:31:
                    81:85:f7:b8:57:0f:cb:df:5f:4b:13:03:0c:10:9a:
                    c4:4e:20:e4:f4:b2:ba:f6:a1:c4:b6:e1:43:5a:9c:
                    8c:57:4f:c7:13:48:82:1c:24:a3:30:a1:c5:11:f9:
                    3e:06:e4:c1:54:69:8c:89:62:0d:0c:79:29:41:23:
                    08:0c:db:4a:a9:72:04:2a:4d:f0:42:eb:e7:0d:40:
                    26:dd:e0:cd:85:e1:b0:db:4a:aa:71:b4:a5:da:33:
                    55:43:91:22:25:35:19:22:f4:5b:6c:e7:07:e4:b9:
                    9b:53:05:4f:e7:01:01:a0:bb:0e:61:e3:47:e0:b9:
                    32:77:4a:d1:4d:c0:fa:eb:1c:80:92:90:40:b1:ba:
                    2b:06:2b:40:c9:59:dd:5b:73:2a:8b:79:81:78:f2:
                    f6:6a:35:f6:d5:89:de:bc:9c:7d:e8:d7:8a:65:30:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:A6:AA:DF:6D:3F:9D:E5:E5:FB:4C:3C:45:5F:23:E6:7F:8A:02
            X509v3 Authority Key Identifier:
                keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:95:11:e1:cb:54:d7:95:92:1c:f2:bc:e0:0c:ef:a2:c4:
         39:de:ff:ce:14:dd:74:34:b0:42:19:18:9f:f2:29:74:68:5b:
         04:b7:13:dd:46:6a:bc:eb:d8:3d:ce:1d:ae:61:05:fe:e0:c8:
         ea:5c:9a:57:f8:60:74:b1:2b:89:f6:81:0f:aa:3c:f6:97:f0:
         b7:1d:31:53:73:0c:ab:d9:54:0b:3c:6c:b6:0c:7c:ca:bd:cd:
         2b:bc:17:bb:cc:d2:fa:c4:25:35:48:71:d5:de:00:0f:35:b7:
         67:bb:86:21:f5:8d:7c:df:01:ca:5d:3b:e0:e7:5e:eb:04:4c:
         a3:11:c8:23:b8:cb:bb:43:08:26:37:1f:f7:5e:eb:46:3d:97:
         d4:9a:50:36:f7:a7:99:f0:5c:58:fb:b7:b4:62:f5:ec:40:47:
         45:40:ea:03:a1:cc:86:ea:5d:b5:f3:ef:b4:f1:82:d0:bf:c9:
         43:6f:4f:7b:c6:95:90:82:cc:43:bf:0a:12:b4:f7:8e:8b:68:
         72:bd:84:bf:4d:c2:74:a0:18:af:95:4d:54:28:26:37:aa:94:
         34:6a:08:20:c6:73:66:c8:67:ad:0c:9f:1c:22:8e:33:bf:94:
         a1:fd:67:63:96:05:14:f5:5d:85:d9:c8:63:09:8d:f7:49:f2:
         ea:44:32:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWUH6M9eYqwRba8pd7YmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2
YWRjOWYwHhcNMjYwMzAyMDcwMDMzWhcNMjYwMzAzMDcwMDMzWjAzMTEwLwYDVQQD
EyhmODA1YTZhYWRmNmQzZjlkZTVlNWZiNGMzYzQ1NWYyM2U2N2Y4YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fnDAhmvtijtZ4YPqFlnWQlBni7g
3RJIQtuv3XXwaRoWx+VbfunzypHtQfbO2o1Q0ccW0kQTVoWZM+aZa2gOIw3cPccc
VMScXI3wJPLYTw1m1aOszqujgjGBhfe4Vw/L319LEwMMEJrETiDk9LK69qHEtuFD
WpyMV0/HE0iCHCSjMKHFEfk+BuTBVGmMiWINDHkpQSMIDNtKqXIEKk3wQuvnDUAm
3eDNheGw20qqcbSl2jNVQ5EiJTUZIvRbbOcH5LmbUwVP5wEBoLsOYeNH4Lkyd0rR
TcD66xyAkpBAsborBitAyVndW3Mqi3mBePL2ajX21YnevJx96NeKZTCbrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgFpqrfbT+d5eX7TDxFXyPmf4oCMB8GA1UdIwQY
MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt
MzIwOGRlMzljMDlkLzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk
LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNSVEeHL
VNeVkhzyvOAM76LEOd7/zhTddDSwQhkYn/IpdGhbBLcT3UZqvOvYPc4drmEF/uDI
6lyaV/hgdLErifaBD6o89pfwtx0xU3MMq9lUCzxstgx8yr3NK7wXu8zS+sQlNUhx
1d4ADzW3Z7uGIfWNfN8Byl074Ode6wRMoxHII7jLu0MIJjcf917rRj2X1JpQNven
mfBcWPu3tGL17EBHRUDqA6HMhupdtfPvtPGC0L/JQ29Pe8aVkILMQ78KErT3joto
cr2Ev03CdKAYr5VNVCgmN6qUNGoIIMZzZshnrQyfHCKOM7+Uof1nY5YFFPVdhdnI
YwmN90ny6kQyEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:23 2026 by rpki-client