Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File:                     LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier:          EkQqUD8BsCEYto4n3g5yEhI1jhCUsjsu9OZZJ0rKBFg=
Subject key identifier:   B3:49:00:FC:27:95:B0:F9:D5:2C:EA:C8:53:2D:23:A9:C6:84:D6:85
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer:       /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial:       019CAB348CFB8FED5A9D9B341621CB1F3CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 21:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:13 +0000
Files and hashes:         1: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: CsAGLBLyJM+EJiIjmC27khWZv1PlDtePpDldiivS2sc=)
                          2: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (hash: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:8c:fb:8f:ed:5a:9d:9b:34:16:21:cb:1f:3c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
        Validity
            Not Before: Mar  1 21:01:13 2026 GMT
            Not After : Mar  2 21:01:13 2026 GMT
        Subject: CN=b34900fc2795b0f9d52ceac8532d23a9c684d685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:63:75:1e:23:4f:cc:b9:ef:a0:e9:64:20:
                    ee:c3:80:fc:f4:16:67:c4:ae:f5:04:29:ab:ef:e5:
                    34:3a:93:34:30:4f:bd:f6:57:41:a3:38:8a:53:60:
                    a2:c4:16:85:66:47:fe:12:ea:63:7e:69:22:22:92:
                    fc:2c:e7:0f:b8:a1:7b:df:b7:20:a2:8d:3a:dc:54:
                    6f:a6:02:a1:34:f0:0f:6b:d5:f5:f1:ad:01:3a:a0:
                    00:ae:c3:0e:4f:12:aa:6f:b6:ca:30:f1:03:e1:60:
                    66:72:35:8c:a1:0a:e0:83:5a:6c:78:55:e4:88:16:
                    ac:8a:f3:05:69:43:49:c8:ce:2d:45:a0:20:5f:26:
                    be:0c:50:3b:f1:6d:d1:ce:8d:ea:97:cd:7a:e4:41:
                    4c:42:fd:1c:2f:eb:f5:f6:13:a4:76:03:0b:48:21:
                    78:34:57:d6:a9:a8:2a:49:49:72:4b:69:c3:90:82:
                    d1:a0:04:6e:30:84:d7:d9:2f:13:be:f6:de:a8:76:
                    24:9b:c0:c1:ef:81:e5:26:69:d2:2f:b8:e0:a9:2f:
                    e8:fd:21:47:cc:74:57:d9:f4:67:9c:18:4e:d2:f8:
                    17:e7:09:f1:fe:da:f6:d5:04:63:92:27:fc:19:44:
                    d2:b1:9b:3e:bb:76:29:19:4d:66:d5:98:3c:ba:08:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:49:00:FC:27:95:B0:F9:D5:2C:EA:C8:53:2D:23:A9:C6:84:D6:85
            X509v3 Authority Key Identifier:
                keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7d:ca:6e:e0:e3:2d:a2:49:aa:c7:97:cf:85:99:10:f4:ec:
         84:21:c0:da:8c:f4:6a:81:b5:9d:ac:b4:8e:82:f1:ad:19:a4:
         c5:77:44:ae:90:f7:30:01:59:9a:3a:e1:b4:38:38:1b:03:26:
         35:74:b2:2e:49:03:63:aa:dc:ce:c2:33:f0:fd:ec:38:3f:45:
         68:05:44:34:6f:8f:99:c5:4c:9b:94:63:98:f2:82:4b:3c:b7:
         34:3f:10:6a:f5:cc:3d:cf:bb:9c:25:b5:e5:8d:b9:6d:d8:92:
         12:34:0b:7d:5f:d5:7d:f8:b1:3d:54:93:89:0c:ba:22:78:e3:
         5a:82:14:7d:a7:d4:d2:f6:1e:c2:0b:40:3c:95:71:d7:0e:fa:
         76:5f:2c:97:4c:9a:9c:2a:6e:73:09:14:84:14:a6:a8:9f:97:
         1b:da:d5:e2:35:c1:df:9f:ce:13:7e:b0:e8:86:8d:1a:e4:d6:
         ad:36:fd:73:f1:ea:d8:d2:48:f7:7e:3c:77:a8:90:cc:40:6b:
         85:3a:73:c1:75:1d:bd:f3:cf:3f:0e:ba:b3:99:1e:48:4c:23:
         b4:e7:ad:a4:65:4c:1a:ef:d6:1b:3e:fe:3b:41:2f:56:86:da:
         7e:25:70:62:f2:df:11:e8:dd:ec:be:c5:6d:bd:54:32:f6:72:
         68:df:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:34 2026 by rpki-client