Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File:                     LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier:          lFBjDlE+EY3xzF96QMZUd55nDo6sqg7/ZGa5zBv5GZs=
Subject key identifier:   77:CD:21:67:E5:66:D4:43:F1:C5:8C:9D:99:99:C8:45:AF:41:0C:D0
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer:       /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial:       019D9D3EE61B75D33027B4274D12DF509B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number:          03BF
Signing time:             Fri 17 Apr 2026 21:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:38 +0000
Files and hashes:         1: 8nh2nz59r4IDN5IE02ZK_JnePnU.roa (hash: EoqGd1iJrSXTEZ94UblIUe3hHKZv1dQEjjg+tiyKHkY=)
                          2: CrT-FIs9ETIARmODyPGo6Texbms.roa (hash: VHPhzwyP7ZJaAZF/RLchX9QehGLwEz/Nhb9bbKVLnBE=)
                          3: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: i586nHIgVtqGCbqUHl15EUBTemgKzEnp5bIs99cb28c=)
                          4: M1lzEwcwplQSzJYIKHVS3CPULtM.roa (hash: CbzM5ppQIFt899x5QRVS7mcpi5adykj4B/FuVFp7z1c=)
                          5: PGCypFT7PpbRYHnbnL53seEehQY.roa (hash: uikj8M8pga201KYBaCnBW484YRpO24WaVAwTT3xgXLA=)
                          6: gpcRZMvvAarNXGnEQk69CRu1kTw.roa (hash: vDgS5AGwOlvvwcg7ps4GbXeY48BReojyPRTXSF9XHHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3e:e6:1b:75:d3:30:27:b4:27:4d:12:df:50:9b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
        Validity
            Not Before: Apr 17 21:00:38 2026 GMT
            Not After : Apr 18 21:00:38 2026 GMT
        Subject: CN=77cd2167e566d443f1c58c9d9999c845af410cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:8d:38:81:21:94:bc:5c:63:bc:31:be:5a:
                    e7:3b:53:fc:34:e0:7f:14:4f:e3:af:36:d6:d3:e4:
                    19:8e:3f:f5:8c:9e:65:13:9e:9a:5a:d7:03:59:0d:
                    4e:1c:04:ef:5b:87:e0:59:08:fb:0f:28:4b:73:e6:
                    75:d3:13:68:3a:0a:e5:90:e6:79:4b:86:89:4b:e1:
                    7b:48:d9:6f:f1:d0:68:0f:f9:a8:c8:11:19:f3:5a:
                    f4:b0:56:8c:bb:c4:5b:96:76:3a:a6:d1:55:25:02:
                    23:a2:aa:49:bd:fd:ef:f1:06:05:99:c5:21:a5:6d:
                    23:d6:d3:9e:61:79:d2:ad:41:b8:a6:94:5b:52:bc:
                    bd:1f:e7:e7:6b:04:5f:a3:bd:b6:3a:17:55:d6:62:
                    1d:8e:4a:b2:32:98:e2:58:5c:a8:76:a4:35:53:f9:
                    e1:24:dd:6f:1a:d4:7d:be:52:d1:fb:91:47:3d:7e:
                    67:ef:d8:9e:71:e7:d2:f9:6c:05:9e:15:79:d6:ba:
                    79:8a:b2:d5:96:24:e9:fb:de:3b:1b:5c:e3:29:aa:
                    e4:e8:09:87:0c:21:29:0a:15:fa:bc:81:6a:b5:23:
                    7c:45:5a:57:ae:f4:22:5a:4d:3a:06:72:fc:81:ff:
                    0d:35:21:f5:66:f6:b2:7c:25:ef:5a:d2:cf:0c:9a:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:21:67:E5:66:D4:43:F1:C5:8C:9D:99:99:C8:45:AF:41:0C:D0
            X509v3 Authority Key Identifier:
                keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:69:4d:a1:a1:ea:ad:30:51:55:4c:e7:d9:45:7c:55:26:
         1a:cf:bd:71:fa:05:a3:57:d6:6c:ba:6e:71:14:a1:27:8d:6b:
         93:df:e4:43:cf:30:d1:b3:84:ab:e3:6b:f8:67:dd:14:46:c9:
         16:14:0d:13:ee:ab:82:9d:1c:fc:c9:12:64:81:c3:09:0a:56:
         f1:07:78:1b:e1:40:33:12:21:78:14:52:6e:82:f2:3f:fb:57:
         5d:70:43:2b:b8:51:5d:50:dc:0e:13:8b:98:9d:19:f0:e1:13:
         7b:b8:e3:9b:ab:01:3b:6a:20:2f:5c:be:a7:48:36:d7:dc:3f:
         ca:97:4c:3f:c3:5f:af:ca:9d:de:91:81:89:f7:2d:b8:6f:c7:
         ef:27:b3:d9:88:3e:10:24:1c:16:38:93:1b:a0:ce:33:f1:3b:
         57:e5:f6:1e:32:9f:b1:16:37:ec:80:28:75:75:90:22:8f:b5:
         24:88:76:63:1d:02:7f:c8:13:dc:2a:c6:7f:ed:ef:12:27:29:
         22:57:f6:50:64:c8:1c:e8:69:8b:cd:fa:aa:00:d9:89:5e:cb:
         e1:d7:f4:75:ab:b5:e9:6b:63:80:71:b9:92:a5:c2:a4:45:d5:
         ff:00:a7:22:26:6e:ca:ea:c7:d1:f3:69:f5:a0:3d:db:54:20:
         55:8c:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:45 2026 by rpki-client