Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File:                     lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier:          0S2XrMpnmrEKXwW3bGV9hr2plYI998AsEoHX5dTh6Qw=
Subject key identifier:   10:B0:E5:FD:E9:54:DD:91:86:6E:67:AE:28:D8:E0:15:AE:34:61:63
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer:       /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial:       019DA30AEC6003E9433483EFC9F8E472AC0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number:          1881
Signing time:             Sun 19 Apr 2026 00:01:35 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:35 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:35 +0000
Files and hashes:         1: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: Hue3VGPBaSNdW5tsPiUATU+sz1sD3bawdUwS5VXMypE=)
                          2: zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa (hash: hHpsqIho1J3apISkIRQoEpNvpz7x6zawHtlFWWSFpsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:ec:60:03:e9:43:34:83:ef:c9:f8:e4:72:ac:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
        Validity
            Not Before: Apr 19 00:01:35 2026 GMT
            Not After : Apr 20 00:01:35 2026 GMT
        Subject: CN=10b0e5fde954dd91866e67ae28d8e015ae346163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:b3:d1:80:82:5d:bf:57:54:b3:92:7f:3e:
                    c8:1e:ad:ef:16:b5:04:a8:78:77:c9:4c:d4:22:00:
                    43:ec:1f:51:03:d7:7a:ca:c7:d0:70:d1:7d:65:f6:
                    ee:61:0c:47:ab:0a:da:07:cb:99:de:66:d4:d6:1d:
                    5d:d6:d5:18:98:d5:0f:e7:51:f5:5a:d1:e0:17:f6:
                    34:bc:04:03:ed:e7:b4:e9:08:7b:a2:ba:0b:23:1a:
                    9d:a5:16:ef:ab:f7:49:2a:44:c1:4e:d1:a0:d2:84:
                    05:f5:6c:57:61:ea:2d:c8:69:0c:fb:d2:75:b5:88:
                    d3:ea:21:ac:3d:7d:4c:9c:f3:6f:c2:ab:e8:a6:57:
                    b5:d0:42:b8:ab:d7:40:3a:49:97:07:52:c0:82:76:
                    91:bb:00:48:ff:88:5c:f2:a1:51:1a:87:91:9d:21:
                    15:3e:1d:72:0b:2b:43:2d:ed:9c:f7:d1:d7:a7:4e:
                    e1:ad:42:73:91:e4:5d:15:83:e6:8a:c9:b6:bf:7c:
                    43:43:6c:07:32:61:48:dd:81:88:21:30:e8:45:93:
                    d1:ae:69:85:5f:4e:de:f5:a4:4a:eb:ee:9c:8d:cc:
                    0d:67:75:cf:51:b0:d2:fd:23:2a:31:e5:0b:7b:a1:
                    9a:ec:c3:b7:f2:f2:55:ce:b3:fb:9a:ba:70:40:83:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:E5:FD:E9:54:DD:91:86:6E:67:AE:28:D8:E0:15:AE:34:61:63
            X509v3 Authority Key Identifier:
                keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:2c:09:d3:3e:93:3c:23:be:fd:32:c9:ce:03:ab:82:b4:9a:
         8b:c4:d0:bf:a4:e6:b8:42:e4:d8:cd:47:74:46:60:14:83:5e:
         52:06:02:9b:3f:59:67:32:33:9c:a9:c5:80:b0:bc:80:d7:1a:
         d7:7a:72:e7:fb:e0:73:2e:60:e9:56:af:3f:4a:e7:bd:f4:31:
         1b:d9:66:f2:51:cd:09:e3:84:bd:e4:c5:bd:02:c8:11:ff:76:
         70:e4:c8:62:1e:25:44:15:5e:c8:e0:84:ad:9e:c6:63:77:84:
         cb:88:e9:62:05:30:06:10:e7:41:58:96:be:84:84:52:02:51:
         22:3d:e3:fa:57:18:b0:e7:d6:92:bb:ef:6e:5f:a1:89:f9:66:
         93:91:7e:f4:b3:32:ec:8f:7f:4b:df:f0:56:9a:0b:fd:ac:29:
         33:0a:51:70:be:66:5e:be:84:95:1c:04:30:57:5b:90:47:d7:
         0b:92:a3:0b:ff:7b:dc:da:02:8a:9b:11:f3:c1:69:1b:9f:45:
         bb:54:ee:c5:19:3d:6d:c7:78:58:d7:45:67:81:69:c7:80:eb:
         f8:a0:ee:62:de:d5:80:2d:64:d5:5b:3f:e3:10:aa:4b:86:90:
         92:27:b4:5a:60:da:33:c3:0f:d4:1e:55:63:1c:20:80:a5:19:
         7c:19:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:16 2026 by rpki-client