Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File:                     LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier:          IMmTBTttup0xm6BCYXimHAd8eqHEU66wRiDq0TgE9qo=
Subject key identifier:   13:67:65:89:06:E6:0C:69:6C:0E:DD:A5:2F:79:A6:6E:E5:4A:CF:88
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer:       /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial:       019D99629144F25F1DCFF19B85B463395C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 03:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:06 +0000
Files and hashes:         1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
                          2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: r55Qu9uy2XGnS7tO/0KRY6s9PdhEJfzeJYN3An1jKdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:91:44:f2:5f:1d:cf:f1:9b:85:b4:63:39:5c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
        Validity
            Not Before: Apr 17 03:01:06 2026 GMT
            Not After : Apr 18 03:01:06 2026 GMT
        Subject: CN=1367658906e60c696c0edda52f79a66ee54acf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:b1:7d:8e:4e:49:35:48:30:4f:14:54:a8:
                    11:27:be:4e:9a:8a:98:b7:02:ae:d4:92:e4:f9:ba:
                    9a:78:92:b4:58:56:d6:ed:f5:5e:f3:bf:6f:5a:18:
                    9d:0a:2e:19:39:3d:cf:ee:b5:12:1b:5e:54:7b:12:
                    84:6b:0b:9e:66:52:09:3e:5c:71:d5:52:02:77:5f:
                    bd:26:20:c2:59:35:bf:8c:74:96:e2:ca:71:01:91:
                    47:40:42:9e:01:a5:b6:88:84:e9:48:58:19:b2:6a:
                    72:c7:a7:92:2d:7c:03:95:56:89:e1:2d:e0:da:a6:
                    2d:41:de:f8:b9:b3:30:a2:57:9c:3e:cb:8c:64:b5:
                    78:38:51:58:64:c0:41:89:a5:99:6b:fe:ab:c7:d2:
                    84:e0:19:da:5d:c9:f6:00:41:ac:34:d0:bf:66:6c:
                    5d:11:9e:b8:6a:2a:29:8c:9c:b9:af:75:de:4d:05:
                    75:e0:35:3b:07:c7:8a:6e:92:2d:c9:43:ab:db:38:
                    16:bd:67:21:b7:bc:65:0a:3c:3a:af:0f:b1:57:bd:
                    30:d5:f0:98:56:69:78:be:cb:c2:f3:4d:e8:80:69:
                    7e:1a:ea:53:61:48:5e:1f:40:83:ed:c4:35:9c:e6:
                    9d:7f:e1:cc:94:63:9f:c8:82:57:b4:03:6c:b6:05:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:67:65:89:06:E6:0C:69:6C:0E:DD:A5:2F:79:A6:6E:E5:4A:CF:88
            X509v3 Authority Key Identifier:
                keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:96:27:41:c3:4f:68:c2:a0:67:56:00:e8:05:81:6c:d2:
         d7:64:35:e9:f2:26:a7:3a:fb:94:f5:3e:e5:39:9d:49:a2:17:
         f0:d9:09:33:b3:51:4f:08:5d:7e:56:b6:66:44:0b:9b:b5:97:
         45:c1:f0:c2:11:df:e3:ba:cc:64:ef:09:35:d7:21:dc:9c:bc:
         14:1f:3d:79:b4:f9:42:1c:a0:e2:e4:cb:31:d7:81:6d:31:cc:
         a9:df:57:35:51:37:8c:f7:76:ab:de:c3:20:ae:60:4b:67:6c:
         7a:a8:af:76:4a:57:17:65:c7:9a:a0:23:37:46:ff:d2:f9:c1:
         2c:f3:ee:67:30:bb:1d:74:25:79:34:16:93:5c:bb:e8:4d:52:
         a5:e8:b0:1e:8d:4d:3e:41:c1:0a:22:cd:48:f3:e5:6a:55:15:
         19:b8:dc:4d:fb:e4:70:a4:9f:24:7f:d6:42:e4:f9:0e:cf:6c:
         41:59:01:cc:c2:4d:87:2f:dd:5d:80:68:6c:d2:c0:c1:45:b6:
         5f:26:df:61:b0:65:fa:ba:58:98:11:0f:64:ff:23:56:25:21:
         77:38:7c:9d:b7:63:bf:ba:31:f2:08:2f:79:22:4a:b2:97:6c:
         d6:98:5e:b2:a9:bf:79:63:13:5d:86:03:c5:5f:34:16:d8:33:
         c5:d7:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:15 2026 by rpki-client