Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File:                     3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier:          cT1YgmZMq5YZLvyPd2fnP/OQCSV4MshUOik4Hrm48og=
Subject key identifier:   12:0E:AB:AD:CC:47:8A:28:CC:82:0A:BB:3E:4A:0A:3E:3B:DD:D9:B5
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       019D99D0DD680D35C2BBEAC91FD5C7B3A062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number:          18D6
Signing time:             Fri 17 Apr 2026 05:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:35 +0000
Files and hashes:         1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
                          2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: 6kNsN8kP4MXur5V/UZcKm/feuqmWVog7SXqHV+5hJPI=)
                          3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
                          4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
                          5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:dd:68:0d:35:c2:bb:ea:c9:1f:d5:c7:b3:a0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: Apr 17 05:01:35 2026 GMT
            Not After : Apr 18 05:01:35 2026 GMT
        Subject: CN=120eabadcc478a28cc820abb3e4a0a3e3bddd9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:7e:9e:e3:56:19:94:8b:ce:b3:69:69:39:
                    2e:d1:0e:63:62:6b:4c:06:da:6d:95:90:09:77:bb:
                    1d:5e:d7:4b:9d:a5:fb:ea:98:b3:94:78:92:b2:72:
                    79:50:c3:dd:b9:3e:93:23:9f:3d:31:97:61:9d:1f:
                    e4:4c:09:a5:08:a5:70:0e:3d:64:b9:58:85:be:f8:
                    d5:28:d8:ff:5f:10:2e:d8:52:7e:8a:23:23:ab:6c:
                    fa:8c:55:fa:42:04:6b:dd:a2:55:8a:b5:12:72:ba:
                    e2:26:d6:a4:ed:46:60:92:a8:b8:d2:13:36:60:96:
                    c3:e0:2e:07:e7:88:16:89:ff:fd:47:25:1c:a6:55:
                    1d:b4:e9:c4:ea:cb:3c:0f:21:35:db:c3:62:54:9a:
                    45:00:50:3c:9b:54:70:a0:db:b6:3c:d4:17:31:19:
                    15:3a:b0:e7:da:2e:e3:36:c7:7a:39:17:bb:82:04:
                    1a:5e:cf:55:77:58:0f:b6:83:83:25:5e:f0:df:ca:
                    78:09:4c:1d:c2:81:07:3d:ba:58:3b:65:a1:a3:92:
                    9a:9e:63:ba:18:ee:26:49:f1:68:f3:0a:ea:7f:bb:
                    e2:aa:46:03:03:78:28:13:c7:ec:dc:12:d5:9f:28:
                    92:cf:98:e3:99:86:ed:f1:2e:8b:fa:a5:ca:ee:4b:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0E:AB:AD:CC:47:8A:28:CC:82:0A:BB:3E:4A:0A:3E:3B:DD:D9:B5
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7a:0f:10:a3:11:79:64:fe:fa:61:13:4a:1c:00:91:ac:99:
         78:b7:94:ff:cb:61:d8:f5:96:5c:6b:e1:6f:91:82:39:a3:35:
         a4:97:31:47:71:3d:c2:ad:40:4d:01:81:e9:2e:d8:cf:15:1b:
         72:2f:60:19:a5:a2:91:be:e6:e1:4b:c5:5b:61:2c:68:f2:f1:
         05:e7:dd:28:2b:d7:be:f5:18:4e:6a:09:06:20:5f:60:81:43:
         06:9c:26:9f:67:0f:27:ed:54:0c:27:df:11:0c:46:12:2b:ec:
         a0:80:c0:75:1b:29:6d:c3:5d:08:b9:75:d6:d0:fe:5f:ae:16:
         bc:e2:f1:1e:10:ee:5d:3e:69:40:56:22:66:51:e2:14:ae:1a:
         c4:7d:c2:82:c9:1e:d6:ec:c3:a8:81:90:1b:c8:67:90:7d:90:
         95:e7:8a:66:13:3b:9b:d2:3e:d2:2f:15:c7:ea:34:19:66:4a:
         ea:01:e1:b1:05:18:86:e1:c7:49:12:05:48:d4:3b:1a:93:94:
         42:fe:46:37:3a:13:3c:78:b5:7e:38:1f:e8:01:98:76:29:36:
         cf:5b:7a:3c:df:56:6c:8d:11:25:2e:43:39:d0:40:82:19:f6:
         24:62:37:07:05:e4:4c:bc:90:2c:75:98:53:bd:63:75:d3:a4:
         21:f2:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:48 2026 by rpki-client