Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          wb0z5tzoqCM4LZXYG54b1Usvk6SxcxHBZFpycogF2gw=
Subject key identifier:   15:4D:4C:54:CE:6A:96:DD:AE:4F:1D:63:15:95:D9:7E:07:69:76:FB
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       019D99D0DD8EF6FA207AD5D569ADF3D4EB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          1541
Signing time:             Fri 17 Apr 2026 05:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:35 +0000
Files and hashes:         1: EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa (hash: qlEpn4VlX/rteCsE8wb4JuutsTGuUOTJhd52p/j8504=)
                          2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: yxAx3fiGjGZ2R2X1GhaefwIgZW91nzK+EvHJ6Qk5F3k=)
                          3: vrV8KB95q2_fxuLiil-ALWVgbaA.roa (hash: v1waj9FATfrwz5lLbL9USP8KlqV0JVnfBS+y9CnLHbA=)
                          4: x0MELFSbqqJKiGquntsM_ntKjzI.roa (hash: AoRA2wOoPtKeWgJD9qk2RQiOPxBRat9/lgim3GntO3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:dd:8e:f6:fa:20:7a:d5:d5:69:ad:f3:d4:eb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Apr 17 05:01:35 2026 GMT
            Not After : Apr 18 05:01:35 2026 GMT
        Subject: CN=154d4c54ce6a96ddae4f1d631595d97e076976fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:a1:78:d4:5b:ef:de:0d:ed:b3:97:b2:97:
                    e8:44:17:b1:e4:1d:95:b0:32:e0:83:e0:01:d6:fc:
                    99:13:72:b8:ed:12:16:7c:a9:b9:17:b8:44:6e:1a:
                    40:74:d4:a8:be:fd:7a:e0:62:17:72:e8:2a:88:f5:
                    c9:62:f9:75:36:11:e2:fe:09:33:b0:aa:b0:cc:16:
                    ed:27:fe:42:de:c9:f6:f3:31:f1:24:b3:52:57:fe:
                    ec:36:ec:cc:00:d7:27:6d:c2:e5:30:52:cd:5c:fd:
                    f0:9f:bf:fc:a7:fd:92:8a:d5:ba:bf:bf:70:37:29:
                    37:a0:14:e4:f2:fa:fc:62:c5:1f:d1:6a:42:39:f5:
                    b9:0b:60:0e:4f:ee:3f:92:67:38:d9:3a:f4:bf:62:
                    2b:19:f0:57:99:57:0b:69:97:26:14:01:be:96:1a:
                    c5:f1:24:08:ec:e0:52:04:6c:7e:81:42:07:d8:e6:
                    52:2a:bc:9a:9a:b3:f5:81:5e:d8:43:f8:af:f6:26:
                    4c:3b:4b:81:5a:46:31:da:de:d1:3b:b3:1b:3f:c4:
                    14:da:a3:4d:a4:b1:1a:34:21:40:cf:80:02:47:8d:
                    f6:2d:48:e4:3e:26:0f:24:17:6a:ec:62:4f:c7:2c:
                    60:8f:3e:53:5c:79:da:3c:e2:06:4b:6c:d0:67:5f:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4D:4C:54:CE:6A:96:DD:AE:4F:1D:63:15:95:D9:7E:07:69:76:FB
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:be:09:c3:a0:57:75:9f:9e:bb:d1:a0:78:cd:d2:12:b1:
         03:7d:5d:9f:ae:36:53:ad:47:96:f2:32:98:00:ad:ac:a1:c5:
         57:77:67:0f:dc:47:d0:dd:cc:21:3d:34:28:9e:1a:ed:f9:71:
         d2:47:e1:f6:3b:e8:20:3c:57:91:4f:3f:2f:be:b2:b7:ba:05:
         92:97:83:ef:15:3f:8a:1e:16:f9:c4:0e:ee:12:5c:aa:2f:d7:
         4c:a6:33:45:65:f9:ba:55:45:4c:b2:84:be:d2:93:a1:eb:53:
         b0:90:65:41:04:c7:34:7a:9a:26:06:bf:52:21:d9:c7:4e:49:
         25:59:4d:a7:77:5f:e1:d0:8a:be:19:78:6a:18:62:40:4b:3c:
         2d:97:00:cd:13:3b:b3:ac:93:6a:cd:13:78:3f:ad:7a:02:bc:
         6a:38:71:65:6d:fb:40:30:6e:43:28:77:77:b6:86:8d:c1:49:
         58:02:68:fc:4c:0a:40:07:61:3d:57:69:73:fa:9b:3f:92:63:
         39:32:c2:7f:56:f9:75:df:25:7d:fe:90:26:9c:b8:eb:69:51:
         5d:f1:1a:d4:d0:09:ad:04:92:71:4e:30:1e:6b:fe:3a:28:e2:
         d6:26:58:f7:06:e7:20:20:5b:4e:02:0e:aa:9e:ad:bc:fe:3d:
         81:7d:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:06 2026 by rpki-client