Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          V30jwTy9Acwu7scPT+4AZuhh93faWBfIlbjSwCmX5+0=
Subject key identifier:   ED:36:FF:7F:CA:3F:A6:D5:93:C1:F4:C6:94:37:63:85:7C:A9:6D:38
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019DA48ACB99275311E9F63FCE39D2976E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0B3F
Signing time:             Sun 19 Apr 2026 07:00:52 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:52 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:52 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: sEuvTANHp493Oik5c3tbLxwy4z44gJzwFw4/xXdXnsw=)
                          2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:cb:99:27:53:11:e9:f6:3f:ce:39:d2:97:6e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Apr 19 07:00:52 2026 GMT
            Not After : Apr 20 07:00:52 2026 GMT
        Subject: CN=ed36ff7fca3fa6d593c1f4c6943763857ca96d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:ca:44:75:db:ed:61:26:27:ea:3c:42:19:
                    bd:3c:16:af:08:46:31:89:7d:9c:ee:eb:c2:c6:1e:
                    49:53:ea:7f:52:70:57:74:32:06:a1:9f:4b:5e:1d:
                    2d:ef:9f:3a:c7:33:9e:49:a2:99:16:e6:77:2d:b8:
                    c9:df:47:fe:fe:2c:09:8c:62:86:b1:d6:53:22:6f:
                    b4:cf:bb:9d:48:5d:00:b1:57:44:69:55:ab:79:97:
                    42:a3:05:2b:08:11:42:a0:59:02:1a:20:82:9d:81:
                    c7:40:56:09:05:ea:e9:b2:c2:a9:35:0f:75:64:db:
                    e5:97:40:a5:52:8f:19:32:a7:51:8e:a4:f3:bc:3f:
                    dc:ff:6c:2b:b6:7f:bb:8b:37:6c:71:91:69:89:1e:
                    78:04:ce:de:06:8f:54:92:38:cb:a7:92:16:ad:f3:
                    c1:48:92:1d:d5:18:20:1c:e5:c5:66:b0:e2:e1:3c:
                    a6:cf:45:c1:03:6f:fe:fc:ca:d1:aa:a4:7f:3c:6b:
                    b6:9c:6c:31:98:8d:fb:53:ec:48:e4:c6:6b:96:21:
                    ec:ff:89:7c:d8:dd:20:8b:e5:3e:10:d9:c6:99:ef:
                    a9:75:2c:dc:a2:23:5c:2d:90:7c:a8:99:d4:80:97:
                    f4:6a:c5:a3:c8:f5:3e:a1:d9:c1:aa:dd:db:c3:8b:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:FF:7F:CA:3F:A6:D5:93:C1:F4:C6:94:37:63:85:7C:A9:6D:38
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:2b:69:09:cf:78:5a:fc:82:d4:80:67:56:db:b5:63:92:
         9b:ac:eb:8e:3c:f3:ed:16:7e:7e:27:ea:70:8b:82:65:56:75:
         06:60:b9:cb:a9:0e:aa:48:50:87:1f:24:a7:da:b7:ea:5a:37:
         8e:04:6c:6e:93:bd:19:9b:2e:88:f2:cd:96:75:73:9c:2a:8a:
         61:c7:b7:5a:d0:59:1f:a9:c7:ea:da:89:f7:3e:08:6e:a1:33:
         51:b6:56:9d:54:e6:a9:d8:0f:ee:73:ac:33:86:71:22:39:91:
         19:e3:23:6a:8e:95:fd:97:a1:7e:64:62:1a:91:65:9d:89:81:
         47:a5:32:6d:24:a7:98:8d:44:1e:5d:42:df:d8:3e:77:f7:78:
         c8:c1:2e:28:9a:84:4a:28:dd:be:34:11:4c:1f:e0:f2:3a:68:
         ed:dd:03:8d:18:4d:b9:8e:4a:f4:a9:15:ea:07:40:e6:e6:21:
         78:2c:51:1c:3b:b3:8b:d7:54:97:4e:dd:a2:a0:7f:4d:56:2e:
         d8:d4:df:3d:44:87:ab:e4:d1:0c:bb:85:a6:fc:cf:ab:88:b4:
         ca:63:d7:2d:1c:ed:55:38:26:1d:90:fd:88:16:61:7e:44:6b:
         da:9f:15:98:cb:95:37:6f:ec:45:ff:6c:9b:5c:3e:d4:44:89:
         6e:c8:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:57 2026 by rpki-client