Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          bETzNUDHAliJvKA2M+SgcZJBmWmbHSBruFmNI9CbnPg=
Subject key identifier:   DF:AC:00:57:CA:6E:F1:96:56:1F:2B:9C:BF:B3:DD:98:8C:44:6D:EB
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       019D9AABF0391E8F22FAA90D9FC8F6823E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 09:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:52 +0000
Files and hashes:         1: DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa (hash: CPSNBE1JDqZWrzRtLM0uStnUMuYrz40a9MwrDBSVFlM=)
                          2: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: UbE8gsbm5ickdkCIqPdGr4i2q7R/DPkzyLw8Xj8fNTE=)
                          3: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (hash: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A=)
                          4: RUhmJdqw-3Gaw_JLROAhLOvB2IM.roa (hash: XdtV4zgfYLmkDs8xTK/8Ot/KM7BnvRi+tSC9tgSlImI=)
                          5: jYiU8bv569WiEs-qGefdtilWB8Y.roa (hash: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok=)
                          6: yV2ta5YIqZOtbWWi5XnowuWeO2Y.roa (hash: FMj28W2Mwf91c8T9pAxRJIkM3TCaa6JGRs6VpNG02T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:f0:39:1e:8f:22:fa:a9:0d:9f:c8:f6:82:3e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Apr 17 09:00:52 2026 GMT
            Not After : Apr 18 09:00:52 2026 GMT
        Subject: CN=dfac0057ca6ef196561f2b9cbfb3dd988c446deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:d2:97:89:6d:4b:a7:b4:1c:dd:ea:91:3b:
                    63:d1:23:4d:af:46:4a:10:5f:ee:c9:f6:52:7e:0f:
                    5f:69:9a:3f:70:ed:9e:45:47:74:66:ba:cd:45:b5:
                    1c:83:4a:b2:94:ae:0e:ab:59:9e:71:e5:92:ef:14:
                    8f:06:de:ee:4f:b5:e9:11:83:c0:4e:bd:4b:dd:1e:
                    1e:4a:a7:3b:bb:49:2a:43:88:da:38:a6:ad:f5:05:
                    96:87:1d:9a:5b:d9:9f:e0:cf:4a:e0:41:8a:89:41:
                    14:fc:5d:2e:8e:f0:ea:e2:13:ef:48:6e:e8:83:3d:
                    ab:27:1b:42:ba:37:73:ba:d0:6f:f9:6a:62:11:bc:
                    6c:86:50:02:1e:52:74:7b:00:9b:d2:80:b4:34:02:
                    ca:9c:5c:dc:1b:38:e4:b0:04:fd:67:0d:5a:0e:99:
                    3e:9d:d8:e0:1a:22:79:f6:a2:e7:f7:ce:e2:22:51:
                    f3:01:f2:96:84:d6:f6:0b:03:15:79:20:3a:a9:45:
                    cf:20:63:d1:4c:0a:03:5c:5c:6c:84:44:d5:fa:4b:
                    0c:f1:5b:38:ba:6b:40:10:a7:2b:ad:5b:9d:13:01:
                    13:0b:d4:00:c8:86:4f:a6:3e:e2:7c:16:7c:eb:4c:
                    3b:d2:b3:8c:eb:d1:06:d4:fe:f6:97:37:00:51:36:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:00:57:CA:6E:F1:96:56:1F:2B:9C:BF:B3:DD:98:8C:44:6D:EB
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:02:68:8e:76:04:d8:76:b9:b2:8c:48:fa:97:c4:1a:66:4f:
         2d:51:85:8d:6c:b2:7f:72:4c:f7:aa:c0:5a:fd:92:97:e5:97:
         88:70:1c:36:97:7e:d2:ad:73:96:4e:95:c8:76:e2:66:14:b7:
         53:a2:9e:fa:f1:fd:72:f4:6b:28:f4:c4:10:60:63:4d:29:0a:
         aa:b3:56:02:fe:d0:e7:0f:94:0c:93:1e:3c:ff:44:ce:b9:b0:
         36:aa:94:a1:53:9c:b7:51:36:9f:de:a1:00:f0:7e:07:1d:6b:
         e6:5c:be:fa:1f:54:3f:94:9e:0e:45:d5:1b:6d:c3:a7:61:4d:
         05:20:78:bb:11:ee:c2:ff:5b:7a:83:fd:2c:c3:08:bf:af:29:
         d2:93:45:46:b1:60:f2:7a:aa:f0:6f:81:89:45:d6:c1:01:ec:
         29:e4:ed:87:10:61:d4:e2:a8:b2:3a:e6:2b:02:e1:e7:2a:58:
         1c:a2:07:8a:da:e7:29:40:e8:01:4e:30:0c:14:5c:3e:63:de:
         4b:0f:83:a2:f3:0d:6c:c4:db:b0:31:2f:f7:09:99:27:82:fd:
         12:33:67:e3:22:2e:f3:2f:3d:00:23:5b:bd:93:39:9d:c4:1c:
         9f:eb:ed:cf:96:28:51:c4:25:8b:d1:30:cd:68:42:9b:67:b3:
         ab:0f:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:11 2026 by rpki-client