Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File:                     Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier:          rOcLrBO3+MQwcR8UC6axoLmoXF0PerWYI/fWF90UHfc=
Subject key identifier:   34:E9:11:7D:1D:10:2C:F7:71:BC:9A:D4:22:19:18:82:78:58:00:FA
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer:       /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial:       019D99625FA9A4D08770401EB5079F6711DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number:          0D15
Signing time:             Fri 17 Apr 2026 03:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:54 +0000
Files and hashes:         1: 4j2l0R0oiX3sFLga6aYE81cIPxI.roa (hash: RzXR10l18GypZ8d4diV18s33YCTUu7qf7Qk1hWsnKR4=)
                          2: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: sUTYHAUHxiBNfLjyUNlTwhemmiYC4n8Dx+ZTylcR294=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:5f:a9:a4:d0:87:70:40:1e:b5:07:9f:67:11:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
        Validity
            Not Before: Apr 17 03:00:54 2026 GMT
            Not After : Apr 18 03:00:54 2026 GMT
        Subject: CN=34e9117d1d102cf771bc9ad422191882785800fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:5d:b3:89:d5:22:02:e9:9a:3c:af:c7:3f:
                    00:82:cc:c5:c1:51:ba:fd:e5:68:76:72:67:af:eb:
                    31:95:f5:95:97:bb:da:70:98:a6:53:c8:3d:0a:75:
                    ee:4a:c3:4c:89:12:34:cc:d9:72:13:49:4b:13:da:
                    81:dd:96:6a:b7:7b:32:af:b9:95:c6:8b:19:f4:88:
                    86:8c:44:9e:ef:83:c0:0c:eb:c8:cd:46:7e:0c:e7:
                    40:85:3b:21:d3:87:54:0e:13:fb:f2:d0:de:3a:fe:
                    54:19:13:4a:a6:69:05:0d:d5:8f:cf:0c:9b:7c:c2:
                    ae:ab:c5:f6:5d:51:fb:db:46:0a:46:1c:a1:33:de:
                    cb:8d:7e:fb:07:2a:0d:ea:68:5f:c3:43:51:74:0d:
                    19:c5:08:7b:24:c8:01:e9:da:89:c7:46:28:65:2a:
                    3c:0c:d8:20:bd:0b:24:ce:d8:1c:37:c0:30:60:21:
                    68:ee:b0:47:15:c3:14:f4:87:2b:b2:b7:5c:98:83:
                    cc:50:0a:6b:1f:b4:95:6f:8e:f6:13:c3:c7:e8:9e:
                    b7:ec:72:a8:e9:4b:53:09:ad:ea:3e:a7:8b:0c:2e:
                    ee:cf:15:a5:dc:b9:73:1a:a0:20:f1:63:48:20:73:
                    b8:d2:82:17:25:24:47:11:ff:54:02:ee:c7:c1:0e:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:11:7D:1D:10:2C:F7:71:BC:9A:D4:22:19:18:82:78:58:00:FA
            X509v3 Authority Key Identifier:
                keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:71:2d:aa:5e:1b:11:be:4e:de:3e:75:10:29:6b:d9:2b:9f:
         90:14:2b:26:64:a9:30:10:4b:2a:85:70:7f:a5:08:b7:ff:54:
         19:08:7c:cc:a5:72:f8:dd:4c:ac:18:e8:e6:e9:5c:bc:2d:65:
         3b:60:b0:02:1a:e5:8a:e7:c7:41:8e:af:11:65:0d:2e:04:c8:
         df:69:1d:7e:7d:e8:e1:c1:c1:e6:1a:90:06:4e:f2:d3:89:cd:
         e2:ac:95:ab:c5:32:ea:4f:7a:35:64:11:ed:67:4f:91:5e:0e:
         a4:0e:bc:05:2e:6b:c2:44:bc:6e:88:92:17:a8:7c:69:8a:0b:
         ef:be:05:aa:12:16:91:c5:5c:ae:3f:18:b7:61:2e:8e:80:b2:
         93:dc:62:ba:6c:9c:62:1b:03:11:0f:ae:1a:2c:fa:a6:58:04:
         b0:10:a0:7e:c7:f2:ad:70:29:73:b3:c9:a7:73:cb:7f:7e:16:
         91:94:ba:d6:65:50:03:a8:71:3e:7d:db:3e:7a:15:bd:7a:be:
         e8:f2:ce:0b:a4:38:e6:aa:30:41:b6:59:04:06:7a:70:bb:90:
         06:d5:03:b8:76:c6:98:6f:f7:fa:ed:64:21:c6:5a:ba:6b:68:
         ec:a9:5a:d6:9f:a2:4b:2f:e2:0d:6c:6c:29:b4:72:79:79:bf:
         03:4c:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:21 2026 by rpki-client