Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File:                     LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier:          OTol/ZxXvffb3g8c0vDuSTP8Z5fD/vXKhtR8uPOQljA=
Subject key identifier:   5B:91:A2:58:BB:EA:53:65:05:E0:02:60:61:08:C3:0D:83:98:94:97
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer:       /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial:       019DA29C7691126A60BE5E56C140D99ED26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number:          0631
Signing time:             Sat 18 Apr 2026 22:00:55 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:55 +0000
Manifest next update:     Sun 19 Apr 2026 22:00:55 +0000
Files and hashes:         1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: FcRgFxSEHjMgwv0kOU/D/1MyRwHgfixK3PGOU8emmbM=)
                          2: g_5AMoFOj5a0mYwjqCP6X5Eogc0.roa (hash: wHZf0niCFW9Zgd1CxrKbTTjY8FLkaeRzaQjI2AnGqqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:76:91:12:6a:60:be:5e:56:c1:40:d9:9e:d2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
        Validity
            Not Before: Apr 18 22:00:55 2026 GMT
            Not After : Apr 19 22:00:55 2026 GMT
        Subject: CN=5b91a258bbea536505e002606108c30d83989497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:4c:00:3e:0a:05:a5:a1:5f:91:3f:72:1b:
                    66:e9:b8:8f:17:5a:01:83:15:d6:3b:e0:1a:63:ce:
                    81:3c:97:46:44:13:da:2f:ff:5f:63:4b:7d:79:15:
                    02:0e:28:fc:c2:01:1c:dd:16:f7:d6:d0:36:fb:78:
                    82:eb:85:91:db:cc:c4:55:0b:5c:42:56:77:00:cd:
                    16:22:00:a9:4c:ef:c6:a4:5d:f1:53:fa:42:15:2c:
                    81:aa:e6:55:3e:d2:28:40:ba:a6:ef:7c:b0:bf:6a:
                    14:4d:54:7e:ed:a7:aa:2f:14:5d:7c:a2:cc:6e:ce:
                    d8:9d:74:33:a7:f7:4c:0e:2c:38:2f:58:36:a9:41:
                    dd:93:a8:9b:f7:ad:6f:cd:a1:d8:d9:be:17:64:5c:
                    07:52:fa:50:ac:b4:92:60:f5:1b:e1:79:d0:82:0f:
                    f6:e1:05:b3:01:d7:19:4b:93:98:1b:ca:30:69:44:
                    9e:55:39:cc:e6:5e:ff:1e:05:b5:80:21:e5:fd:5b:
                    f6:06:bb:34:2c:f6:9f:69:44:53:d7:cb:ef:b2:f1:
                    18:bd:40:26:75:69:5a:d5:cb:52:f4:9c:30:38:dc:
                    ce:6e:0c:9b:2c:66:54:9e:9e:e5:8a:bf:0d:40:b5:
                    38:d7:41:99:76:ec:69:be:08:60:ac:64:a9:ee:ee:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:A2:58:BB:EA:53:65:05:E0:02:60:61:08:C3:0D:83:98:94:97
            X509v3 Authority Key Identifier:
                keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:ab:d8:66:73:84:a4:ad:be:ef:fd:ce:f6:72:e3:79:24:
         7c:9a:0b:f1:7c:bb:ad:d3:a7:cb:b0:97:75:53:7f:47:39:bb:
         82:0f:08:15:ca:15:57:7e:30:86:a2:7b:bf:2e:5e:e4:66:e0:
         23:5a:8f:bc:00:fe:fc:cc:14:47:be:e1:bc:91:df:8f:63:af:
         ee:5b:c0:42:2a:a6:99:de:12:88:d7:ed:68:b9:02:41:5a:dd:
         c4:84:93:50:3a:0f:3f:a5:00:28:2c:e0:0c:59:5b:ca:64:78:
         d1:28:07:37:5c:f8:1a:43:19:f4:25:0e:9f:a5:34:56:9d:a5:
         8e:92:72:8a:03:fa:8b:81:79:bd:a1:3a:e6:a3:a7:07:1a:98:
         fc:b7:e9:50:a1:a1:20:27:5a:4d:be:36:b5:7d:9c:95:ad:a8:
         9f:70:ee:ca:75:0f:ab:55:be:17:e9:fc:be:ce:d1:bf:d2:43:
         89:0a:30:91:93:78:8b:38:be:ef:ef:85:58:b7:9f:6c:63:70:
         10:1f:8b:17:dc:f1:ea:e8:cd:1b:a5:79:e6:52:6f:2c:f3:ed:
         0a:9b:eb:f0:ca:da:fc:1c:61:4b:90:2c:c6:ae:4e:3f:12:77:
         28:7e:ef:bf:90:8b:8a:85:80:d5:25:b9:77:fe:f2:fc:31:58:
         69:a1:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:12 2026 by rpki-client