Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File:                     L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier:          8OK1BOjXI3aIMJhUFEyzKGDME3CKi4ZyYWk/GcEnvzg=
Subject key identifier:   34:CF:D3:0D:59:5B:95:60:EC:FB:C9:00:08:E7:BF:B5:66:27:2C:B5
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer:       /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial:       019D99622654A912E09E574C497ACA831B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:39 +0000
Files and hashes:         1: 3RBCVkBsQ6_V7wN6k9fIFJdSpp8.roa (hash: nfpey2pShwBixsacoxSoNyyC/Cgr+HILJV9+oDPT+a0=)
                          2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: 4Uf+EMga7h9iLH8bRExOEN5kPZpQrU6Zz7ADLtHjpU0=)
                          3: Wx0tuGvy7Ik_CwijVq0hyyYCJNE.roa (hash: F7OSj77dk7wzXt/at0+fTmTHxHYJ8OWNXq9VDQhTOcs=)
                          4: xfyMUvyO8DDhcxSBKaxnnxjvYhc.roa (hash: W6rHIx7iAQO/hl2oAqLrj2UwizqFE2L+eavtuywb88I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:26:54:a9:12:e0:9e:57:4c:49:7a:ca:83:1b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
        Validity
            Not Before: Apr 17 03:00:39 2026 GMT
            Not After : Apr 18 03:00:39 2026 GMT
        Subject: CN=34cfd30d595b9560ecfbc90008e7bfb566272cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:2c:96:a4:b6:36:3a:6b:87:e0:60:00:b0:
                    8a:47:d2:86:83:c7:00:dd:30:0d:a9:d7:c4:69:65:
                    27:a8:e7:87:d9:cd:ef:59:89:39:d2:c0:80:87:48:
                    39:46:8f:1d:a7:01:9b:07:ad:33:ed:cf:1d:59:56:
                    f7:d1:94:e1:06:c1:ba:5f:b6:21:1a:8e:35:ab:e2:
                    df:ca:09:1a:11:3c:8a:85:d3:a8:e5:17:a7:45:a2:
                    a4:22:4a:ab:42:89:e7:58:52:74:85:34:d4:9f:df:
                    61:c7:a8:36:4d:57:57:39:cd:08:03:78:82:fd:5e:
                    71:10:b9:70:32:55:bd:ad:7e:92:89:18:83:ef:da:
                    70:fd:af:a6:af:ec:77:53:61:7c:c4:1e:fe:a8:a6:
                    9b:14:3a:28:d5:bb:57:21:e2:77:8d:cd:3c:2f:f5:
                    66:f3:ff:81:81:3b:16:ec:af:fd:87:e8:6a:0e:19:
                    59:2e:1c:d7:df:78:4e:b5:7c:41:70:04:6c:b7:9d:
                    f3:d0:03:d9:be:cd:cb:73:b8:9e:66:50:4a:e7:d7:
                    3e:a3:da:92:34:3c:8e:2e:ef:87:8e:2a:35:26:ff:
                    50:f8:39:c2:df:f0:c0:2f:56:ce:46:29:7e:8e:84:
                    d2:09:44:2e:f6:51:fb:32:26:83:9c:ed:16:42:c1:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CF:D3:0D:59:5B:95:60:EC:FB:C9:00:08:E7:BF:B5:66:27:2C:B5
            X509v3 Authority Key Identifier:
                keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:ba:e0:4f:78:58:0f:29:ea:df:ae:1a:0e:86:6d:c3:45:
         2a:1d:c8:f4:86:06:53:1d:a4:22:93:47:ea:7f:e4:64:52:6f:
         59:7e:5e:c5:08:4b:1b:fa:10:74:c9:e3:70:85:3f:dd:93:5c:
         7d:2a:ea:17:2a:18:f6:dd:bc:74:e6:c3:cc:9c:d5:9a:8d:98:
         21:02:52:c0:97:77:b1:3e:c2:9e:ed:26:01:f9:53:8a:8f:d3:
         4d:c2:4c:a1:2b:17:91:30:f0:a3:b1:52:85:04:24:ee:ec:f3:
         bf:81:03:dd:ce:0d:cf:af:4e:50:f6:1c:87:63:57:1a:40:c1:
         08:bd:7a:e9:23:ac:06:29:85:39:ec:05:19:13:7a:d6:fa:11:
         a7:15:18:2c:6c:f5:ca:60:9d:a0:3b:3e:e3:65:f7:aa:74:82:
         6d:f1:7d:49:1f:ab:71:c0:e8:65:47:15:f3:9d:18:78:2b:10:
         d0:37:a3:6f:c5:05:d3:9f:84:27:52:d6:8a:e9:b3:c7:7e:65:
         ab:40:e8:ac:36:0c:e1:94:c9:ee:ed:55:13:f7:c5:bd:c5:a0:
         4e:df:01:83:49:01:15:5a:00:61:0b:7d:50:a9:9a:70:76:c7:
         fa:79:e5:95:e0:b2:42:20:5f:a5:ea:d3:84:b8:03:95:e4:a5:
         c1:21:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:49 2026 by rpki-client