Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          /ck2iXfieQourYB7ASOoN6uw54pIqunTuXhSfwa99cQ=
Subject key identifier:   56:F5:36:31:A6:C9:C4:6D:08:B9:25:93:D9:A6:0C:C4:B3:8C:DC:95
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       019D9886CF27215BE4F0536C6341F257C165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 23:01:04 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:04 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:04 +0000
Files and hashes:         1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
                          2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
                          3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
                          4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
                          5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: Dkn7s7IB5DzrGzSQ/lkcsq2CGQ/n5wc9SnyP1nITVHo=)
                          7: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:cf:27:21:5b:e4:f0:53:6c:63:41:f2:57:c1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Apr 16 23:01:04 2026 GMT
            Not After : Apr 17 23:01:04 2026 GMT
        Subject: CN=56f53631a6c9c46d08b92593d9a60cc4b38cdc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:6d:77:04:50:4b:03:6b:03:0b:d0:9e:b8:
                    68:29:f4:c5:8b:9d:ee:9e:09:ed:97:a7:38:4f:6a:
                    36:bb:b2:34:78:cd:f7:d8:a6:db:88:4a:1f:2f:e4:
                    03:b6:ad:06:28:c3:d6:26:26:d0:8f:85:7e:8d:0d:
                    92:30:1b:e5:03:ff:6b:e8:68:b1:26:0e:01:63:ab:
                    0e:f6:3a:4a:ad:c7:03:05:61:ab:af:4c:a1:2b:30:
                    df:d8:bd:38:ad:eb:9f:1e:9a:62:fb:e4:90:0a:db:
                    40:d1:1a:e9:34:30:84:aa:f6:f2:e4:e8:18:b6:95:
                    32:11:27:e0:17:f7:57:9b:a9:88:91:6c:ae:dc:dd:
                    66:af:93:14:c7:95:df:95:28:a0:34:12:8b:be:21:
                    62:ca:e7:56:27:73:78:8a:2c:fc:ea:bb:18:d3:4c:
                    b2:d3:d2:50:e9:9d:02:4c:8c:07:98:1e:d6:f3:92:
                    2f:0f:64:8f:99:1a:6e:f8:db:2a:8f:ff:30:c7:eb:
                    db:5b:6f:56:b2:3f:ca:2b:f1:33:ff:47:65:bd:da:
                    59:79:11:10:31:79:e7:e5:6b:cd:48:70:4d:e9:67:
                    9a:f5:7d:e0:a7:21:db:3d:a9:b1:86:6d:ad:0c:1f:
                    89:1f:d9:37:20:6d:b2:1c:70:52:56:79:ce:3c:41:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F5:36:31:A6:C9:C4:6D:08:B9:25:93:D9:A6:0C:C4:B3:8C:DC:95
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:4d:f3:18:55:a7:ba:cb:65:07:e2:d1:00:bc:d3:ac:34:
         88:4c:97:4a:ab:21:da:be:4b:18:59:0c:1b:d9:46:df:ed:f2:
         ce:db:9c:15:c9:cf:b4:83:82:4d:82:9e:ee:2d:af:ec:bf:0c:
         27:e3:c9:18:75:be:0e:73:60:17:c8:13:91:85:06:e7:69:75:
         4b:38:99:3c:b8:76:3c:69:5d:a6:3a:04:ff:46:f0:30:b1:3d:
         6c:4c:f0:d6:23:25:e4:21:1c:48:24:e4:6a:e7:ef:db:61:6b:
         04:d4:b1:e4:6b:78:c9:b7:29:73:7f:a3:4b:2f:6b:c9:e5:11:
         5c:ea:c8:0c:3f:29:e0:3a:da:80:b6:96:51:4a:bd:dc:85:0a:
         28:81:d6:7c:d5:0c:c7:50:08:27:96:33:52:02:59:3f:9b:41:
         e5:c6:a1:6d:da:1b:af:8b:3b:4c:1c:c7:4b:99:e8:b5:49:90:
         72:b1:97:d2:1d:54:9c:7c:48:a2:6f:79:c6:4c:c0:01:17:3b:
         06:be:4b:ad:ec:4a:00:47:4e:2d:26:f6:56:1f:fc:4c:5a:54:
         27:52:80:06:cb:bf:2d:6e:25:e3:3c:92:31:48:88:3d:2e:f9:
         8c:e1:3f:c2:15:fc:1d:d0:99:6e:41:8e:62:76:87:08:ce:10:
         c3:92:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:32 2026 by rpki-client