Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File:                     _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier:          J/LHfXEDYg1HZWg/5kNBb1uXSxBqwx5JBZvTuOCE0mQ=
Subject key identifier:   8F:2A:25:E8:4B:E8:40:45:DB:86:99:55:97:8B:5D:FD:F0:3A:03:F8
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer:       /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial:       019D99620925074BC30433416E042C8C5C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 03:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:32 +0000
Files and hashes:         1: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: 6mW9aC5Vduk1jOevZPd+nl8pb/UHtsbEfRem0Cvn3Lc=)
                          2: uFl_ZizKGWHrxXUyCquBDXz3y3k.roa (hash: /TpoOOO6sEekhbdoi+eDFkK9983+dY21TSBKPL3C0K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:09:25:07:4b:c3:04:33:41:6e:04:2c:8c:5c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
        Validity
            Not Before: Apr 17 03:00:32 2026 GMT
            Not After : Apr 18 03:00:32 2026 GMT
        Subject: CN=8f2a25e84be84045db869955978b5dfdf03a03f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:85:fc:90:7a:c2:96:c6:95:3f:91:61:b4:
                    62:64:b6:17:ef:cc:4f:08:b7:25:19:ce:2b:91:28:
                    62:de:93:2d:50:bb:86:99:1a:94:62:16:f8:2a:2c:
                    18:27:51:bc:21:c2:9e:29:17:44:97:f1:50:c7:2a:
                    6b:e7:31:78:97:a4:25:8a:eb:7c:88:76:2e:83:e9:
                    0a:3e:2b:96:50:6b:02:cc:8e:01:61:5e:a6:f0:ad:
                    d2:59:ba:f9:de:cd:5e:a9:43:c3:e7:7b:a4:9b:3b:
                    b3:1d:99:c4:33:93:e7:e3:0d:fa:4a:60:b2:7d:17:
                    46:a4:d3:fa:f6:d9:f6:08:7d:3c:51:fc:2c:44:06:
                    da:94:57:89:65:87:b6:f3:72:c1:2d:17:5d:f7:c8:
                    cf:1d:98:d8:fb:86:c2:7b:42:f0:a0:aa:a9:fd:5c:
                    3b:9a:21:26:76:a6:6e:90:ef:be:f9:79:b9:80:97:
                    be:77:95:a2:c4:fa:04:8d:79:37:8a:e6:b5:7c:d7:
                    d0:95:3f:24:02:d8:c2:d6:e7:9b:20:5d:5d:24:7c:
                    d7:86:29:d8:76:33:bc:15:ff:d5:51:63:f0:69:ae:
                    43:b8:46:a9:bd:44:d4:2b:e3:42:61:df:a8:c9:ae:
                    92:94:83:84:12:ba:a9:c7:4d:61:7c:8b:6e:fb:2f:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2A:25:E8:4B:E8:40:45:DB:86:99:55:97:8B:5D:FD:F0:3A:03:F8
            X509v3 Authority Key Identifier:
                keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:e5:ae:5a:86:72:75:d8:a3:f7:f7:a7:93:b3:8f:36:c6:
         cd:f6:78:1b:62:a4:0a:33:c5:a1:94:cc:de:cc:8e:80:39:34:
         cb:db:38:91:aa:38:b6:c8:68:ae:eb:28:8d:e9:ab:87:3b:76:
         45:2e:63:8c:c9:e1:e4:7e:41:24:50:51:23:df:7a:8c:8c:b3:
         7f:0a:02:e1:a5:0f:d1:19:f9:cf:12:96:c5:60:8b:67:8e:b0:
         d1:d3:3a:47:46:40:9c:72:09:15:c0:ce:67:cc:cd:6b:00:c3:
         f6:dd:4c:43:a7:13:6b:dc:9f:93:dd:cf:69:fe:40:37:dc:3d:
         70:34:0c:71:79:37:fb:61:9a:09:63:c1:ea:07:f3:31:92:88:
         79:54:ba:05:17:16:f6:ec:b6:b6:86:51:32:63:3c:f6:af:2d:
         1d:d1:aa:88:51:e4:28:a6:bd:2b:2b:b4:fa:b7:23:08:c4:92:
         0e:4e:ad:cf:5e:46:44:91:58:3b:10:b0:da:99:98:e7:f2:bf:
         62:f4:34:9e:d6:9e:7b:dd:17:70:66:5f:69:d5:e9:33:ba:fa:
         de:de:78:5f:47:de:3c:d2:8a:fa:6e:22:ef:07:7b:21:45:a3:
         4b:c9:8b:07:e3:7d:75:2d:f7:fb:84:c8:ad:db:41:8d:1d:f1:
         00:fc:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:18 2026 by rpki-client