Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File:                     Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier:          FFrcUb2ctuhcg600bpX6VMlpU8ToeCExmpRKFYQmzvE=
Subject key identifier:   7E:25:63:3D:97:F0:93:EC:74:81:F3:35:75:E2:BF:89:8A:71:AF:B7
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer:       /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial:       019DA641C85568F460492F830C522D204680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number:          029B
Signing time:             Sun 19 Apr 2026 15:00:22 +0000
Manifest this update:     Sun 19 Apr 2026 15:00:22 +0000
Manifest next update:     Mon 20 Apr 2026 15:00:22 +0000
Files and hashes:         1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
                          2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
                          3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: a35W/0DVygKxl2VfjFvH8SDDSVbEqBmnZaR0Rn/n0tc=)
                          4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 12:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:41:c8:55:68:f4:60:49:2f:83:0c:52:2d:20:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
        Validity
            Not Before: Apr 19 15:00:22 2026 GMT
            Not After : Apr 20 15:00:22 2026 GMT
        Subject: CN=7e25633d97f093ec7481f33575e2bf898a71afb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:ef:f4:3f:11:dd:f0:57:30:59:dc:e9:52:
                    15:43:82:0e:86:e1:d9:3a:25:dd:81:56:9b:d6:ec:
                    a1:4c:60:ac:9a:99:65:13:5f:e6:93:6c:ba:f3:70:
                    31:c0:a7:4a:e3:d8:87:0e:ee:63:75:a0:ff:a7:5b:
                    96:5e:48:1e:f1:83:56:70:9e:51:b7:ed:14:0f:c7:
                    39:61:32:52:6a:9a:9d:4d:81:10:f5:7c:c3:6f:30:
                    1c:ea:34:e7:aa:ea:5a:d9:60:33:3c:de:cd:82:89:
                    db:eb:68:20:0e:42:15:8d:29:28:17:b0:fb:47:5c:
                    ec:f6:4e:a6:e0:bb:34:53:75:0a:a0:fd:5d:04:62:
                    9b:54:9f:54:e6:02:99:d7:ce:fc:eb:1a:22:c9:a9:
                    02:33:6b:47:05:81:5b:c7:ec:a1:14:53:5a:34:ee:
                    48:10:6f:4f:46:e6:83:d9:4f:62:d3:1c:fc:56:86:
                    88:69:96:2f:ba:14:63:36:d9:f2:fe:07:4b:8e:a8:
                    d2:d0:52:9d:f5:68:38:64:af:ab:79:03:5e:93:bb:
                    a2:d0:e7:08:aa:28:27:e7:df:22:fd:d6:74:a5:e5:
                    7a:00:b4:18:df:5d:85:d8:56:45:4a:9a:ce:54:5b:
                    b7:a6:4e:6e:3e:38:67:34:ab:f0:2d:9f:a6:cb:b2:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:63:3D:97:F0:93:EC:74:81:F3:35:75:E2:BF:89:8A:71:AF:B7
            X509v3 Authority Key Identifier:
                keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a3:47:df:fc:13:cd:55:52:77:1f:14:56:55:27:d3:64:65:
         d1:53:ec:01:83:59:d0:d7:d9:dd:16:0a:1d:a4:2c:23:4b:dc:
         d6:0f:ba:ef:47:65:2d:8f:d2:a3:eb:04:93:33:53:80:b3:a4:
         63:90:92:9e:98:5f:b8:f1:23:b4:a2:98:9d:30:09:3f:83:6f:
         1a:3a:dc:b6:69:63:8f:33:1f:34:74:c4:4b:04:46:b5:6d:fa:
         18:46:23:44:d1:e7:a9:fa:dc:46:f0:0f:e0:41:72:7e:91:b9:
         ee:b7:db:b2:67:28:ba:86:8d:49:01:39:d7:53:33:dc:3f:2b:
         03:c3:10:6d:a0:4a:0a:06:01:39:e8:af:d3:ac:b3:84:5d:90:
         f5:ca:4c:8b:fa:6b:e1:74:ae:55:a2:f6:16:1d:79:cc:8b:f5:
         15:4e:11:a3:84:8c:23:18:ad:92:c9:f4:8a:3a:53:6f:56:e4:
         b4:51:77:28:79:73:71:ba:09:f6:8a:84:42:ce:eb:67:72:e2:
         45:0e:2c:b8:02:20:05:e6:de:79:62:70:f1:f0:92:c4:d1:76:
         fc:67:d9:3a:b9:5a:2c:a2:2e:68:22:b3:b9:a5:6a:4c:73:c7:
         79:96:0b:c0:a8:97:2d:4f:21:7d:a3:c5:e9:b4:13:23:2e:f9:
         a7:d1:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:17:10 2026 by rpki-client