Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File:                     LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier:          nWVUb9toB6L8Hknx2L4HBdEQLkbCGoy2C1O3UKtQdEQ=
Subject key identifier:   D1:30:5F:16:1E:B7:14:21:44:4C:67:B4:60:F7:5B:D1:C9:50:08:BB
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer:       /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial:       019CAA590752078A8F17E996600EEFB8999E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number:          07CD
Signing time:             Sun 01 Mar 2026 17:01:27 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:27 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:27 +0000
Files and hashes:         1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: G22udY3YtovnOffCf13ftfdZ/H98hlblBSdmq9H1d7c=)
                          2: ZyCMXfbtNuXumIzCS12JtYABWa8.roa (hash: FCS7VDdR2sOQaENYtuEq5+AVcoh+zteoO7fT7vMr+Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:07:52:07:8a:8f:17:e9:96:60:0e:ef:b8:99:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
        Validity
            Not Before: Mar  1 17:01:27 2026 GMT
            Not After : Mar  2 17:01:27 2026 GMT
        Subject: CN=d1305f161eb71421444c67b460f75bd1c95008bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:d3:11:1e:84:e4:8f:13:ae:90:ff:b7:f1:
                    db:80:40:bf:f3:f8:f6:42:19:d5:dc:95:21:44:3d:
                    2e:a8:6c:31:0f:d0:07:7e:63:9c:79:b8:40:f0:b1:
                    d1:1b:c0:c4:8d:f2:4b:f5:5a:6b:25:62:69:32:67:
                    3b:dc:83:80:ab:76:1f:16:50:b9:cd:53:5d:28:61:
                    1d:cd:51:72:ac:ce:61:14:07:6e:61:5f:28:44:c0:
                    79:5d:e8:8a:9f:dc:be:f1:4f:43:3a:01:d1:e8:ac:
                    db:94:2d:90:18:ca:08:56:34:05:b2:23:7a:44:95:
                    be:60:e6:8d:25:b3:29:51:7c:a8:fb:31:73:bf:52:
                    4a:7f:1d:88:32:68:06:bd:86:bc:ae:52:cd:c8:77:
                    9c:f1:0e:53:62:9c:97:32:27:cf:85:0f:d3:8f:58:
                    66:7e:98:59:cf:fc:eb:12:8e:a6:47:8f:7f:22:da:
                    52:25:0b:5c:3f:6d:f2:2d:e1:c2:10:b2:ec:2c:c1:
                    d5:86:f3:fa:04:a1:89:6f:2c:98:64:64:28:2b:61:
                    84:3b:3c:d7:96:ec:ba:aa:db:fe:db:4e:24:3e:09:
                    9f:ef:2c:52:62:22:77:ee:dd:b5:d2:f4:e6:47:73:
                    ef:f3:be:6f:2a:61:60:52:c4:4f:d5:d7:85:8e:4e:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:30:5F:16:1E:B7:14:21:44:4C:67:B4:60:F7:5B:D1:C9:50:08:BB
            X509v3 Authority Key Identifier:
                keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ac:d4:8a:90:33:be:0d:17:7b:d5:2d:f3:5f:06:85:c2:aa:
         6d:69:7e:22:76:79:66:7a:13:b7:1f:28:18:24:b1:4d:13:c1:
         b0:9d:44:c6:62:ed:4c:64:73:e7:a1:c8:45:eb:1b:8c:2c:a2:
         83:b8:04:c4:07:a8:7c:17:c3:06:25:13:49:53:b1:1e:4d:eb:
         e5:9f:82:45:70:83:62:49:27:ae:80:65:3d:a3:21:fd:cc:87:
         ef:62:65:d3:f1:d8:1a:a1:5e:24:37:72:8a:16:49:a0:55:14:
         3e:f1:7f:f5:a5:98:89:5b:c4:b7:24:a1:f4:60:46:61:a6:8c:
         8b:6d:32:99:c4:9c:81:b8:7b:78:92:98:e8:0f:28:9e:dd:5c:
         b4:67:fc:93:37:75:de:40:b4:8e:02:87:ad:ad:69:f8:d5:09:
         83:3d:e4:50:e6:d9:d0:c2:7a:cf:bc:e2:3c:78:b0:67:04:f0:
         b5:4c:90:50:e9:37:5c:a0:5c:52:17:79:27:e2:17:0a:55:54:
         90:cf:1e:0c:6f:68:d5:ea:f0:34:28:e4:ad:01:8f:d5:56:e9:
         54:93:ca:5a:65:d9:f4:13:1c:1e:92:9c:a6:43:bb:53:1f:c3:
         2f:81:6e:72:79:e1:44:e1:60:fd:22:59:82:0e:1b:9f:c6:53:
         ae:71:cf:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWQdSB4qPF+mWYA7vuJmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWU0OTk2MjA3M2Y5ZWZiNjZhNGIzMDM1MDZkYTYzNDE1
Njc0NTAwHhcNMjYwMzAxMTcwMTI3WhcNMjYwMzAyMTcwMTI3WjAzMTEwLwYDVQQD
EyhkMTMwNWYxNjFlYjcxNDIxNDQ0YzY3YjQ2MGY3NWJkMWM5NTAwOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusLTER6E5I8TrpD/t/HbgEC/8/j2
QhnV3JUhRD0uqGwxD9AHfmOcebhA8LHRG8DEjfJL9VprJWJpMmc73IOAq3YfFlC5
zVNdKGEdzVFyrM5hFAduYV8oRMB5XeiKn9y+8U9DOgHR6KzblC2QGMoIVjQFsiN6
RJW+YOaNJbMpUXyo+zFzv1JKfx2IMmgGvYa8rlLNyHec8Q5TYpyXMifPhQ/Tj1hm
fphZz/zrEo6mR49/ItpSJQtcP23yLeHCELLsLMHVhvP6BKGJbyyYZGQoK2GEOzzX
luy6qtv+204kPgmf7yxSYiJ37t210vTmR3Pv875vKmFgUsRP1deFjk6nYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEwXxYetxQhRExntGD3W9HJUAi7MB8GA1UdIwQY
MBaAFCyeSZYgc/nvtmpLMDUG2mNBVnRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEt
MjFjZDI5MGMwM2YzLzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEtMjFjZDI5MGMwM2Yz
LzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqzUipAz
vg0Xe9Ut818GhcKqbWl+InZ5ZnoTtx8oGCSxTRPBsJ1ExmLtTGRz56HIResbjCyi
g7gExAeofBfDBiUTSVOxHk3r5Z+CRXCDYkknroBlPaMh/cyH72Jl0/HYGqFeJDdy
ihZJoFUUPvF/9aWYiVvEtySh9GBGYaaMi20ymcScgbh7eJKY6A8ont1ctGf8kzd1
3kC0jgKHra1p+NUJgz3kUObZ0MJ6z7ziPHiwZwTwtUyQUOk3XKBcUhd5J+IXClVU
kM8eDG9o1erwNCjkrQGP1VbpVJPKWmXZ9BMcHpKcpkO7Ux/DL4FucnnhROFg/SJZ
gg4bn8ZTrnHPIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:15 2026 by rpki-client