Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
File:                     rlLbggkLND-J98Y3z0GpS8_UNGo.mft (raw, json)
Hash identifier:          IbbSmpb361yeCs7RbVWx9sSPWc0uibD73Ps1PtLvSuY=
Subject key identifier:   52:B3:21:D3:4A:67:B1:C7:D3:1C:F3:7E:C0:D9:D0:35:0A:8E:58:40
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       019D9B19FB9B1106C2A97263BF1549EB6D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
Manifest number:          01F1
Signing time:             Fri 17 Apr 2026 11:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 11:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 11:01:04 +0000
Files and hashes:         1: 5X7YRTYutQRnZKSXOYRzfFKU__g.roa (hash: SZ3JcTfmeT/78/b8EzDuDunNtUACrBhXm0w/aIDmEqM=)
                          2: Da4zofv_3zQcJHV3L83VNbH7UEY.roa (hash: p+hoOJTvA0x6ON4Ggw3OE0Gfu4aJUBLpv1YI+CkSFhc=)
                          3: _Fyf7zFGzeDW7zsznMYR472wYMY.asa (hash: O8OCjw/AFz0U+dbA2ny1AUn9RnUyhuTFkhwfS9CKoG4=)
                          4: co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa (hash: kD/drcWwBr6x5xqwMF16Xc4LXWddRLyNIKIsPwoN+78=)
                          5: rlLbggkLND-J98Y3z0GpS8_UNGo.crl (hash: +ewEo60BfPKMLXqa9ztCqx1pYA9FOvSBjs59jguHUL0=)
                          6: sN3nanuzELsiTRZZnMMhpzRL9CQ.roa (hash: iIsUfUIoF5P1otrI7EzZzKCaeejtCwHBloYzwegYqT4=)
                          7: z4NQNKVm6yPErYn2MF0joNOAjb8.roa (hash: uYdkE7Gen/nXRx3uYSu0lTx+P8/il8mwRP5bhcvXxeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:fb:9b:11:06:c2:a9:72:63:bf:15:49:eb:6d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: Apr 17 11:01:04 2026 GMT
            Not After : Apr 18 11:01:04 2026 GMT
        Subject: CN=52b321d34a67b1c7d31cf37ec0d9d0350a8e5840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:27:ab:bc:94:3f:c8:00:b9:cd:88:31:17:
                    8a:35:8a:72:20:ed:37:ed:98:c3:e9:25:0b:de:d1:
                    da:a0:40:15:38:8c:aa:47:16:a4:74:01:09:7e:a1:
                    a4:5e:6b:c3:d2:f4:04:aa:2e:88:7c:14:e0:38:5e:
                    3f:37:52:9e:16:2d:70:56:ec:28:25:0a:45:72:d0:
                    05:5d:6f:93:c0:e2:14:a2:80:98:b8:a5:a0:5a:61:
                    bf:ba:58:dc:a7:6d:3c:50:a2:4e:57:60:0f:c3:f5:
                    96:85:7e:e3:db:ce:cd:5a:3f:91:9b:ff:1f:55:3c:
                    91:9c:12:22:fd:d7:b8:90:f4:9e:8c:60:0d:6d:5f:
                    45:20:23:ee:2f:19:47:7b:20:bf:56:f9:28:16:eb:
                    71:cc:aa:90:24:3a:f8:06:76:4f:47:d5:61:a0:76:
                    3c:d8:32:d9:5f:69:90:3c:aa:44:e8:27:53:bf:0e:
                    97:27:1b:29:2d:88:e0:8e:34:c5:62:62:e7:91:2c:
                    85:62:e3:54:bc:f0:bf:79:ac:79:71:dc:c8:9c:b5:
                    5a:ca:13:09:08:6b:a6:37:f0:39:7e:e3:34:d8:71:
                    a5:71:42:9e:13:12:1d:11:51:a7:dd:24:bd:f2:2b:
                    f8:1b:22:8b:45:da:d7:1e:06:6d:d6:78:6c:26:07:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:21:D3:4A:67:B1:C7:D3:1C:F3:7E:C0:D9:D0:35:0A:8E:58:40
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:90:f3:34:d2:89:62:a7:5d:a4:22:bf:48:7c:89:88:0b:
         50:15:b0:72:61:32:86:f6:0e:dd:d4:1b:49:c1:f8:dd:d6:45:
         b5:39:4f:cc:5a:50:e3:75:9f:cb:ec:58:40:04:c5:bd:f9:f4:
         9e:76:05:2e:57:3a:12:71:59:61:54:39:3b:e6:3e:e5:0e:0b:
         6e:5a:04:5b:bd:7a:ca:c3:5f:39:de:58:b5:76:11:8c:cb:f6:
         0f:30:dd:2c:90:aa:78:4d:3d:ff:d4:e4:84:93:91:28:38:86:
         16:46:6d:04:de:f5:fe:66:10:b8:19:17:f0:ec:73:cc:10:86:
         16:68:ad:a1:c8:2d:76:bd:73:c6:65:65:47:32:5b:39:51:62:
         94:05:26:09:ac:a8:fc:9e:3d:ff:2d:7f:6c:fd:9b:f0:5c:93:
         67:15:73:8b:a3:3d:fb:5b:24:52:c0:3c:b7:84:db:50:e0:4a:
         92:00:b8:9e:e4:8a:5d:d0:ca:51:d9:d1:bb:4f:9f:68:b4:15:
         6c:82:32:40:a8:53:0b:4b:04:1d:8a:1d:69:bf:fa:b8:84:c7:
         ee:2e:89:33:69:ca:fb:44:3b:1f:d3:0c:0b:d1:22:b4:3d:43:
         a7:06:7b:a7:06:bf:72:e6:76:18:7b:f1:0f:f3:29:bc:3e:24:
         10:1d:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:46:32 2026 by rpki-client