Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          ONrT0+dkL75WiCZufr1IlyQJxU+R9nnmTqIRBwY/t/4=
Subject key identifier:   74:17:55:05:98:E2:AF:E2:92:DD:71:93:63:93:0F:D7:0D:93:7A:30
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       019CAC4694B11FEEB96AEB065E412984E661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          0AD2
Signing time:             Mon 02 Mar 2026 02:00:32 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:32 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:32 +0000
Files and hashes:         1: 5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa (hash: pv7D776mN6xHh+aJuajkc1W+nQHEB1SubW6msOXjn6k=)
                          2: 5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa (hash: y83T+J2MWgz8Ab4dhxXSEXxv3P/YMscFEjT4/HScAVk=)
                          3: ACyMokyAcIhgnojfOOZk2Fp2M_g.roa (hash: RWgqlqxsw+gEGVmD//0j4E4TFF91yMaTTc+WhaSYKqM=)
                          4: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: +AeofK++Fe04Do0nedduTD6/9/ueeDsAjsupq9oly5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:94:b1:1f:ee:b9:6a:eb:06:5e:41:29:84:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Mar  2 02:00:32 2026 GMT
            Not After : Mar  3 02:00:32 2026 GMT
        Subject: CN=7417550598e2afe292dd719363930fd70d937a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:14:fe:0c:c1:cc:3d:9d:0c:69:68:24:0d:
                    c5:be:90:a7:65:ac:20:95:c9:9d:a9:24:80:ba:c3:
                    60:05:3e:9f:1a:21:28:a3:a6:9e:42:89:35:15:b2:
                    c9:4c:a0:bc:a2:2a:14:b7:7b:59:79:9f:86:dc:b3:
                    a8:16:bc:f9:9b:a1:eb:f7:e4:74:9c:b3:70:cb:63:
                    3a:23:bb:47:83:fe:d9:51:ae:13:27:57:07:03:0d:
                    2d:4a:87:d8:7d:53:f9:84:c8:53:c1:01:f1:2f:28:
                    a3:a2:f9:c8:df:f2:e1:7b:9c:02:68:70:a4:60:c2:
                    3f:60:1f:82:83:a7:ce:c4:d6:cf:ed:69:b7:1c:ba:
                    ea:4c:9f:2a:41:bc:b0:11:50:51:a5:34:67:23:58:
                    72:e3:8c:4e:d4:fe:eb:ed:67:9c:89:75:93:68:5f:
                    a3:94:ea:7c:a5:97:22:6e:2f:b2:d6:33:48:76:ce:
                    df:a3:f4:cf:a4:9f:20:e3:7f:0a:87:54:36:2e:1f:
                    d8:86:80:4a:40:71:92:f1:ee:fe:4c:96:02:73:f6:
                    35:fe:c5:ae:3f:4b:25:6b:8d:9a:23:a8:96:79:0e:
                    39:f5:cc:82:66:86:37:0a:2c:cf:58:1e:bd:29:72:
                    20:a6:4d:52:52:79:fd:d3:ec:4c:f7:19:8e:92:0d:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:55:05:98:E2:AF:E2:92:DD:71:93:63:93:0F:D7:0D:93:7A:30
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:38:2b:4f:3a:59:52:6c:f3:72:0c:42:ab:71:c0:c0:69:84:
         01:e7:d8:57:02:28:35:e2:b4:6a:15:72:50:2d:8d:85:08:21:
         77:f2:ab:4d:a2:bb:d3:1d:1b:d4:77:41:6c:d8:9a:f7:1c:33:
         a5:f3:17:51:84:d0:8e:f5:19:7a:01:bc:d9:63:af:3d:e7:d2:
         e6:3b:16:88:f0:bb:1b:a1:c2:51:17:a7:dc:8c:4b:bc:cc:43:
         7f:48:cc:59:9f:eb:04:77:8c:53:90:11:28:ad:77:42:1f:4b:
         d9:22:e4:f3:98:04:6b:54:5c:e5:6c:b8:fe:b6:87:16:b5:53:
         96:cc:18:5a:df:a7:de:15:35:5d:b2:d9:ba:df:8c:61:d6:00:
         a8:c8:ac:ee:64:13:c1:17:4d:f3:75:29:19:7f:35:42:9f:df:
         73:b0:42:63:c6:1b:5f:ab:d2:31:36:25:de:b1:04:34:d1:ef:
         82:e1:db:c5:65:60:07:ec:3e:9e:81:0e:85:49:10:9b:9f:db:
         a9:98:3f:17:8d:85:ef:c3:2b:67:2b:b3:17:19:46:c2:e2:eb:
         2b:52:3d:ae:20:ab:9f:49:9f:cb:a8:0d:17:d2:3b:88:60:3a:
         2e:f4:e5:75:66:f0:1b:ff:3f:c8:0b:f5:41:1e:fd:90:bf:0a:
         76:04:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:57 2026 by rpki-client