Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File:                     Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier:          A/TG/dqsma61EbAlv/hUcZTl2dqr76dRRM4YLCMACEY=
Subject key identifier:   58:35:A7:FD:BD:91:44:7E:AE:E6:DE:8C:DF:44:EB:C5:D5:B6:1B:77
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer:       /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial:       019D992B8CACEA770757A51334543AAA29DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 02:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:01 +0000
Files and hashes:         1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: 6RO0Xigw9RihJRwDCYxafX4RBKpMUexFZFPhUhikyrE=)
                          2: UxsjjV_Gt9-OxRcgz90c19qriuk.roa (hash: 3EeDtpjQ6swXAQQE3Mf+vnblA6AQ2AaH7/97p2AeAtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8c:ac:ea:77:07:57:a5:13:34:54:3a:aa:29:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
        Validity
            Not Before: Apr 17 02:01:01 2026 GMT
            Not After : Apr 18 02:01:01 2026 GMT
        Subject: CN=5835a7fdbd91447eaee6de8cdf44ebc5d5b61b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:36:80:6e:fb:3f:98:90:1e:06:c0:3b:1c:
                    07:aa:ef:7e:e4:5f:1b:cd:9b:a4:a4:ce:a1:ff:ec:
                    bf:4f:87:51:5b:66:75:a5:c3:4e:22:e5:e8:28:42:
                    65:84:e1:0d:23:f5:10:c6:08:1f:f0:f6:4b:45:aa:
                    8c:24:77:be:44:1b:7d:11:01:32:69:69:84:58:68:
                    2f:d8:c3:7b:7f:35:f8:c0:16:6c:49:3a:2f:dd:31:
                    c5:36:ce:8b:b2:e4:b3:a2:55:ae:4a:7b:4e:f1:f2:
                    3f:f1:0c:9a:9f:b0:51:f8:87:fe:9d:83:fa:b4:b4:
                    80:a2:f1:f7:ea:8b:73:a1:2a:97:48:51:5f:76:c6:
                    1f:8f:0d:cb:10:31:75:99:9b:18:63:48:ee:2d:1e:
                    8c:ec:9c:ec:1a:9f:e4:05:d1:e0:e0:42:be:51:8a:
                    9d:a3:d8:eb:fc:53:e3:90:48:a2:d0:83:ee:50:63:
                    54:71:52:1a:46:5b:6a:71:4e:2b:cb:37:8a:bb:4f:
                    9e:c3:5a:8f:a1:e4:e9:dd:1e:45:75:09:a9:5e:c5:
                    50:6c:5c:74:bf:15:bd:37:e6:9a:2a:71:02:bd:3c:
                    01:aa:fa:79:6d:1e:bb:ac:83:9a:41:55:ed:a8:d8:
                    2d:42:90:d0:aa:de:0c:c2:1e:c6:04:7d:43:11:0e:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:A7:FD:BD:91:44:7E:AE:E6:DE:8C:DF:44:EB:C5:D5:B6:1B:77
            X509v3 Authority Key Identifier:
                keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:db:4a:a7:e8:11:38:5c:f5:ff:c5:8e:06:9c:ee:95:24:43:
         fa:71:34:84:7d:74:e6:24:b1:f3:dc:ea:d9:a0:36:93:cc:06:
         d0:77:c1:58:c4:ed:e4:26:00:b4:85:70:dd:f6:a1:05:9f:85:
         f6:97:4a:4e:a0:80:d1:b4:d9:5d:f9:41:d2:d1:2e:15:10:c7:
         3d:f8:fd:91:e1:ce:a4:98:f5:3e:26:85:14:20:a0:f6:00:5e:
         99:0c:48:48:1c:6b:59:5e:62:69:03:3f:d6:ca:b2:45:c4:01:
         13:0a:68:73:c9:1f:bf:8a:95:b6:7f:c6:84:b0:85:46:85:50:
         36:78:50:3e:4f:7d:1b:cf:f3:ed:12:cb:18:80:f6:67:79:8b:
         e5:5f:df:34:48:a3:b7:5d:b4:6a:b4:fd:86:9f:1c:f5:6d:56:
         45:a0:e9:b8:23:e5:e0:b7:49:62:cf:21:1a:1f:cc:0d:aa:ea:
         cb:5e:b9:ab:e4:96:06:73:d5:9a:48:57:c7:93:99:52:6c:a2:
         80:6c:7a:db:ae:61:11:57:9c:45:5b:3d:0d:39:01:c3:6a:4d:
         dd:6b:e0:84:1c:59:22:61:9d:30:a4:b8:fe:1f:2d:cb:cb:eb:
         8e:21:19:e7:b0:51:35:1e:ec:88:af:6d:c8:3f:95:07:58:4e:
         a8:b1:70:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK4ys6ncHV6UTNFQ6qindMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZGZmYjUyMWVjNzM5ZWYxODI2NWM4Y2ZlN2ZkZjI5NWQ4
N2RjZjIwHhcNMjYwNDE3MDIwMTAxWhcNMjYwNDE4MDIwMTAxWjAzMTEwLwYDVQQD
Eyg1ODM1YTdmZGJkOTE0NDdlYWVlNmRlOGNkZjQ0ZWJjNWQ1YjYxYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J02gG77P5iQHgbAOxwHqu9+5F8b
zZukpM6h/+y/T4dRW2Z1pcNOIuXoKEJlhOENI/UQxggf8PZLRaqMJHe+RBt9EQEy
aWmEWGgv2MN7fzX4wBZsSTov3THFNs6LsuSzolWuSntO8fI/8Qyan7BR+If+nYP6
tLSAovH36otzoSqXSFFfdsYfjw3LEDF1mZsYY0juLR6M7JzsGp/kBdHg4EK+UYqd
o9jr/FPjkEii0IPuUGNUcVIaRltqcU4ryzeKu0+ew1qPoeTp3R5FdQmpXsVQbFx0
vxW9N+aaKnECvTwBqvp5bR67rIOaQVXtqNgtQpDQqt4Mwh7GBH1DEQ5KYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg1p/29kUR+rubejN9E68XVtht3MB8GA1UdIwQY
MBaAFC7f+1IexznvGCZcjP5/3yldh9zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjEwZWYtZDI0MC00ZDY4LTgwYzEt
NDE4OTNjNGRhMDYxLzEvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjEwZWYtZDI0MC00ZDY4LTgwYzEtNDE4OTNjNGRhMDYx
LzEvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNtKp+gR
OFz1/8WOBpzulSRD+nE0hH105iSx89zq2aA2k8wG0HfBWMTt5CYAtIVw3fahBZ+F
9pdKTqCA0bTZXflB0tEuFRDHPfj9keHOpJj1PiaFFCCg9gBemQxISBxrWV5iaQM/
1sqyRcQBEwpoc8kfv4qVtn/GhLCFRoVQNnhQPk99G8/z7RLLGID2Z3mL5V/fNEij
t120arT9hp8c9W1WRaDpuCPl4LdJYs8hGh/MDarqy165q+SWBnPVmkhXx5OZUmyi
gGx6265hEVecRVs9DTkBw2pN3WvghBxZImGdMKS4/h8ty8vrjiEZ57BRNR7siK9t
yD+VB1hOqLFwhA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:05 2026 by rpki-client