Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File:                     lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier:          oAd7QmDk9z0CveWrGnLbxa64iUOyvw7JEbD3hKWwptA=
Subject key identifier:   9E:64:79:39:C1:69:FB:EC:94:29:D5:0B:21:B8:92:F7:AE:1F:0E:20
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer:       /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial:       019D9886C51C8180D4D9EA7E32F446FC349F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number:          04AC
Signing time:             Thu 16 Apr 2026 23:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:02 +0000
Files and hashes:         1: 1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa (hash: VqlHGjyV6XrN2/klxM4KjUioPDS5vL2CP/yVnvM9BOI=)
                          2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: nF3AQNtli3qCWhEr5/CUIqy/XC1tai8TF5CC5x5Fiy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:c5:1c:81:80:d4:d9:ea:7e:32:f4:46:fc:34:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
        Validity
            Not Before: Apr 16 23:01:02 2026 GMT
            Not After : Apr 17 23:01:02 2026 GMT
        Subject: CN=9e647939c169fbec9429d50b21b892f7ae1f0e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:3e:6c:d3:e8:00:19:f3:7b:79:8d:b2:d9:
                    b5:f7:94:03:4a:77:93:71:e5:6f:72:16:59:de:b9:
                    73:b1:7d:f1:42:1d:52:a1:66:8f:e9:7d:9a:69:6a:
                    e1:f1:58:31:a2:1d:0a:92:ec:9b:21:ed:fd:ea:49:
                    be:a7:e0:f4:c8:76:22:11:15:46:0e:1b:e4:2b:5a:
                    91:8b:d2:7a:0a:10:96:e3:2d:3d:37:4d:c1:5f:92:
                    a7:3c:77:9c:78:1d:b3:d5:07:37:03:ea:eb:66:6c:
                    7f:1d:57:23:f8:15:a6:71:2f:ce:06:f0:a3:e9:50:
                    6f:f6:67:ea:d0:91:52:00:ca:54:5d:47:2b:17:39:
                    bc:11:b6:4d:77:14:d2:bb:c8:f1:17:99:2f:ae:c5:
                    72:a2:62:ef:49:61:42:79:64:86:36:8d:4a:92:6a:
                    46:ac:93:90:f0:7f:f3:4d:56:dc:e7:ed:b3:33:04:
                    a3:a6:36:f8:8a:23:6f:4f:c4:d2:97:c2:5f:5e:9b:
                    5f:9a:b3:e5:86:ef:3c:e1:e0:93:a0:62:85:64:51:
                    ad:18:45:48:6c:01:15:df:43:6d:e0:43:fd:21:df:
                    ab:10:bb:a3:ee:e7:9e:c2:64:44:4d:cb:9d:ca:ab:
                    68:22:e0:95:5c:37:24:12:65:3a:0c:d7:7d:85:37:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:79:39:C1:69:FB:EC:94:29:D5:0B:21:B8:92:F7:AE:1F:0E:20
            X509v3 Authority Key Identifier:
                keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:ea:ee:12:42:da:5a:d7:a7:d0:f4:13:54:63:69:94:77:
         0a:86:fc:05:55:2c:a1:18:87:7e:9c:c2:8a:48:47:bb:07:92:
         f8:7f:49:77:6c:77:a7:04:be:e8:6c:20:4b:25:2d:c6:b1:73:
         c4:ee:0a:9c:1d:dd:69:ed:15:64:12:a6:75:8a:4b:77:4b:41:
         54:9e:0d:90:ef:2d:93:ec:04:d8:b2:24:f5:af:7c:61:9e:e2:
         0c:05:ce:ea:96:76:66:1e:be:fe:11:2b:1f:21:54:ae:21:5a:
         3d:07:57:42:47:49:fd:42:7c:e0:ee:50:cb:e2:4e:ac:87:0f:
         b7:10:ba:0e:7e:cd:6b:3c:e5:9f:97:3b:f9:c8:87:21:af:28:
         c6:65:0e:cf:a9:30:2a:3a:eb:7a:1c:d5:93:2f:78:c7:77:7d:
         44:45:7e:7f:04:de:27:c7:e7:0d:e1:72:17:4a:80:ae:b2:3f:
         b7:57:3d:33:ff:df:a4:d6:2a:23:f6:65:94:86:61:89:63:94:
         cd:1c:7a:25:51:1b:ef:da:36:e5:d2:b0:f7:f1:2d:26:94:d3:
         ee:94:8a:ad:ea:df:56:f8:9e:08:cd:bf:bb:1e:3d:5b:42:8c:
         2c:bc:b3:76:83:f7:9d:1b:5d:40:03:00:40:82:32:8b:79:23:
         19:06:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:29 2026 by rpki-client