Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File:                     lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier:          f6IDb5HLNmxMuzPCrJYBsUzwGusp22ruZaXMXgJGcIw=
Subject key identifier:   B5:33:33:BE:DF:82:72:0E:3E:BA:5A:11:16:FE:62:7D:ED:62:8E:2B
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer:       /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial:       019DA41CC0B3E7C932B44CCB1AE2BFF2977D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number:          18D2
Signing time:             Sun 19 Apr 2026 05:00:40 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:40 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:40 +0000
Files and hashes:         1: 3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa (hash: yo8hQ3SuLYgiKWGisWTt5R1HgigntwJ6UO6bodCaAnE=)
                          2: 868VkIZTeEk8g8K-nc-GYk4GNqA.roa (hash: mAkolD9i09Q2h4MCniDyPs0rmf1iQU6A0FPOG2LgFwE=)
                          3: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: /b2jU+v7FOviRMf7BRY8+ItW16dcOZumPjez4IGYD7s=)
                          4: q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa (hash: eotOUqJ53rWQxs9/sn9KK6XM4STngZxv7oKNTVxb9eI=)
                          5: xY0yzyzGKETMGEPdBnrDX84itWs.roa (hash: avsQpG9VhWpkE114IUXSkSxZIAsU+MHzryCiy/ZPdtw=)
                          6: yQDR4RXyJipBGIGaXf0hpmvg9MI.roa (hash: Gz9z3oldgWaZnVSRtfCqMKiqcH9Ia6S6jLOD4nomWR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:c0:b3:e7:c9:32:b4:4c:cb:1a:e2:bf:f2:97:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
        Validity
            Not Before: Apr 19 05:00:40 2026 GMT
            Not After : Apr 20 05:00:40 2026 GMT
        Subject: CN=b53333bedf82720e3eba5a1116fe627ded628e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:74:71:cd:f8:5e:91:78:46:46:05:21:7b:
                    49:33:9c:68:d9:e9:80:14:e6:e1:07:22:00:5a:f0:
                    8b:be:1e:ea:3e:af:36:80:3a:5a:fd:d7:c0:a9:18:
                    b0:e6:45:88:c5:3e:8c:33:ec:27:12:f7:af:b1:91:
                    b7:e6:59:9e:82:05:ec:70:ac:98:98:f9:f9:a8:f2:
                    dd:78:1a:ea:f7:d7:07:30:0b:33:57:3b:26:f6:f6:
                    be:29:6c:30:3b:11:bf:02:5e:b2:5a:50:d5:a9:1b:
                    f4:09:20:bb:69:4f:cd:39:6a:1c:72:b6:99:bf:e5:
                    19:df:b6:3d:75:95:87:fe:8a:85:e8:76:58:b3:b9:
                    59:44:af:e1:f4:d8:ea:6e:a4:fd:ae:88:4b:66:c6:
                    06:6b:ef:e9:23:86:13:85:87:8d:b2:06:e7:ea:d9:
                    41:cc:d7:14:81:ac:1f:12:aa:6e:d3:b9:78:dd:2d:
                    8e:e6:4d:a4:92:e8:67:18:e0:20:47:9f:17:3c:54:
                    28:c8:cf:a5:cd:ed:09:f8:36:6b:cd:9d:16:60:4c:
                    bb:40:76:38:17:53:07:c3:9a:b8:f7:fc:76:f2:3d:
                    12:bc:e0:f1:25:d5:41:00:62:0a:e7:5c:7d:b8:4f:
                    b0:5d:e1:fc:8e:1d:bf:ca:76:cb:bc:03:e0:ec:d8:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:33:BE:DF:82:72:0E:3E:BA:5A:11:16:FE:62:7D:ED:62:8E:2B
            X509v3 Authority Key Identifier:
                keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:67:b1:ab:8b:a9:f1:58:ba:04:67:23:c9:b1:20:83:b4:
         7d:9f:c9:ad:7a:a8:2c:b0:9c:9c:3d:f8:98:29:a3:e9:af:a2:
         53:e1:03:67:8c:82:e2:8a:a6:5a:8a:1c:b2:f8:82:c6:9f:ba:
         d0:fa:4d:0f:da:db:32:ce:40:92:08:bc:78:14:d4:51:30:5b:
         67:c3:88:a5:0a:2b:0c:73:74:57:d1:fb:e2:23:67:93:29:4d:
         28:dd:4e:d5:51:f6:99:39:09:fe:f1:d9:a6:7d:84:f5:16:ac:
         48:29:d5:e0:ad:eb:6c:43:c6:bb:48:c2:e7:bf:27:48:f9:ce:
         78:c7:ce:0e:55:fc:c0:ba:43:8e:6c:57:ef:16:c7:21:ba:9b:
         01:35:fb:46:1e:64:b6:08:38:06:8e:15:cd:d7:e1:06:70:67:
         36:e7:62:8d:b8:b2:77:06:e7:fb:b8:a8:76:d4:4d:ca:32:8b:
         9d:f8:9a:b3:a7:2a:ff:6f:ba:f5:30:39:67:07:0a:d3:b6:25:
         c8:fd:2a:7b:2b:c0:bd:db:ad:cb:93:b2:09:52:11:29:bf:65:
         84:55:a7:c1:1a:7e:ba:c1:49:5f:76:0a:4b:24:39:38:76:c7:
         15:c5:65:2e:c9:b2:d7:af:24:75:dd:e4:14:2d:bf:48:97:2e:
         41:32:bc:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHMCz58kytEzLGuK/8pd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjYwNDE5MDUwMDQwWhcNMjYwNDIwMDUwMDQwWjAzMTEwLwYDVQQD
EyhiNTMzMzNiZWRmODI3MjBlM2ViYTVhMTExNmZlNjI3ZGVkNjI4ZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V10cc34XpF4RkYFIXtJM5xo2emA
FObhByIAWvCLvh7qPq82gDpa/dfAqRiw5kWIxT6MM+wnEvevsZG35lmeggXscKyY
mPn5qPLdeBrq99cHMAszVzsm9va+KWwwOxG/Al6yWlDVqRv0CSC7aU/NOWoccraZ
v+UZ37Y9dZWH/oqF6HZYs7lZRK/h9NjqbqT9rohLZsYGa+/pI4YThYeNsgbn6tlB
zNcUgawfEqpu07l43S2O5k2kkuhnGOAgR58XPFQoyM+lze0J+DZrzZ0WYEy7QHY4
F1MHw5q49/x28j0SvODxJdVBAGIK51x9uE+wXeH8jh2/ynbLvAPg7NhdFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUzM77fgnIOPrpaERb+Yn3tYo4rMB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9pnsauL
qfFYugRnI8mxIIO0fZ/JrXqoLLCcnD34mCmj6a+iU+EDZ4yC4oqmWoocsviCxp+6
0PpND9rbMs5Akgi8eBTUUTBbZ8OIpQorDHN0V9H74iNnkylNKN1O1VH2mTkJ/vHZ
pn2E9RasSCnV4K3rbEPGu0jC578nSPnOeMfODlX8wLpDjmxX7xbHIbqbATX7Rh5k
tgg4Bo4VzdfhBnBnNudijbiydwbn+7iodtRNyjKLnfias6cq/2+69TA5ZwcK07Yl
yP0qeyvAvduty5OyCVIRKb9lhFWnwRp+usFJX3YKSyQ5OHbHFcVlLsmy168kdd3k
FC2/SJcuQTK8SA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:56 2026 by rpki-client