Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
File:                     LC6uaapwrwN7XSx-gSO-pAwpXn4.mft (raw, json)
Hash identifier:          AfsSBc7x5Khb1CrIaYFQ8yndn5b/c2BaGZlTtuhfgAc=
Subject key identifier:   C1:0C:B5:81:D7:19:54:32:3F:06:BA:18:66:7F:5B:9D:D9:5A:50:3D
Authority key identifier: 2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E
Certificate issuer:       /CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e
Certificate serial:       019D98F477FB691C38BD60226B8A8AF7BEC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
Manifest number:          0D0E
Signing time:             Fri 17 Apr 2026 01:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:51 +0000
Files and hashes:         1: LC6uaapwrwN7XSx-gSO-pAwpXn4.crl (hash: vMW+wEJvy6aFTKwy+5fQdM0lT0UlrTns3sQyXHXlPEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:77:fb:69:1c:38:bd:60:22:6b:8a:8a:f7:be:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e
        Validity
            Not Before: Apr 17 01:00:51 2026 GMT
            Not After : Apr 18 01:00:51 2026 GMT
        Subject: CN=c10cb581d71954323f06ba18667f5b9dd95a503d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:48:ea:f3:5c:1d:49:8b:76:41:71:7f:36:
                    8f:90:fc:4b:a8:a4:48:1e:d8:4b:94:fe:b0:c9:25:
                    b2:3d:3c:90:8a:1c:eb:e1:65:c9:d9:aa:3c:5b:10:
                    3b:67:81:10:70:d0:db:b3:23:e1:aa:2c:f9:54:b9:
                    0e:04:7f:f6:23:64:c3:ed:56:fd:ac:5c:0a:aa:0d:
                    c3:6c:81:f8:18:13:47:11:93:e8:bd:99:99:44:56:
                    07:ca:02:ee:2c:46:ff:dd:22:71:04:7e:77:48:fe:
                    bc:a7:0b:83:75:37:06:bf:a9:70:23:13:8f:05:94:
                    31:95:6d:be:24:fa:48:23:ed:4b:80:e0:a6:46:08:
                    8d:00:55:7f:79:77:63:ae:95:f1:99:77:d7:c3:96:
                    82:82:60:37:56:8d:3a:3f:c1:d4:c2:5f:66:3f:1e:
                    03:ac:4d:70:62:de:e1:6f:23:13:e9:f5:f3:77:c6:
                    10:a6:d1:4e:56:ad:3a:32:b6:23:29:11:bf:94:bc:
                    71:55:4a:a7:d5:70:30:a4:0a:64:e9:a5:43:59:2d:
                    16:d1:07:cf:7c:02:33:ff:cf:16:29:a3:7c:12:76:
                    49:a4:88:95:18:29:6a:69:cc:eb:5a:c9:c1:14:cf:
                    8d:28:63:97:70:c8:c1:04:e3:37:9a:3c:99:03:bd:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0C:B5:81:D7:19:54:32:3F:06:BA:18:66:7F:5B:9D:D9:5A:50:3D
            X509v3 Authority Key Identifier:
                keyid:2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:de:60:69:47:50:13:3e:4c:3e:eb:96:37:28:01:66:b3:1f:
         d3:55:c2:ca:de:6a:07:1a:4a:0a:08:59:db:34:61:49:75:85:
         b0:e5:c2:e4:b1:52:26:38:71:c4:00:20:89:0b:1c:e8:38:c8:
         e6:cc:f0:5f:24:4d:23:e7:4a:b5:10:20:cf:c6:48:bc:2f:96:
         22:e4:2f:6a:1a:1e:64:d8:6f:8b:7a:71:4d:1e:bb:05:45:14:
         0a:bb:ae:f8:ff:1f:22:82:f7:c0:e1:9c:3c:c1:b5:f5:0b:c3:
         63:ed:f0:ef:59:36:75:06:66:37:6e:a1:aa:a0:42:e7:79:a8:
         61:b7:bb:c4:3c:3a:8e:a8:8c:7a:ff:62:9f:4b:ab:19:8c:7d:
         5c:cd:88:05:28:5f:53:77:76:80:d7:21:55:a9:80:71:1b:49:
         90:e7:63:a2:ac:3d:4a:2c:1c:59:71:8d:b5:e6:76:8d:71:b9:
         3d:4e:65:73:a0:7f:f9:6b:77:26:ae:79:f0:16:90:aa:48:8e:
         aa:31:b1:37:d6:c6:ab:ad:09:3f:9a:d3:de:2e:51:7d:c7:91:
         64:0c:dc:b7:82:92:99:85:42:91:67:b2:1b:8d:91:45:ee:e2:
         9f:ff:f3:01:14:36:2a:79:dc:19:00:84:28:a1:44:ca:47:f5:
         f0:d9:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:54 2026 by rpki-client