Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          4bmdUsHqZm4CgZp4K0ywfBLFTAPgtyw+8BLTvM1X/AM=
Subject key identifier:   F4:73:A5:F2:65:8B:E6:9F:06:92:60:54:56:20:B3:75:C8:91:C0:44
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       019D9BBE683A972E87B120C43BFB7F21D2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          1542
Signing time:             Fri 17 Apr 2026 14:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:40 +0000
Files and hashes:         1: EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa (hash: qlEpn4VlX/rteCsE8wb4JuutsTGuUOTJhd52p/j8504=)
                          2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: nTl00XK2u4/BcGVJgS08bjksYio/mP5vvVQg23k2yJM=)
                          3: vrV8KB95q2_fxuLiil-ALWVgbaA.roa (hash: v1waj9FATfrwz5lLbL9USP8KlqV0JVnfBS+y9CnLHbA=)
                          4: x0MELFSbqqJKiGquntsM_ntKjzI.roa (hash: AoRA2wOoPtKeWgJD9qk2RQiOPxBRat9/lgim3GntO3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:68:3a:97:2e:87:b1:20:c4:3b:fb:7f:21:d2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Apr 17 14:00:40 2026 GMT
            Not After : Apr 18 14:00:40 2026 GMT
        Subject: CN=f473a5f2658be69f069260545620b375c891c044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:8a:a5:aa:14:4e:01:67:65:1c:e8:d5:3b:
                    f6:09:9f:79:a2:23:ae:7d:f9:8b:8d:59:d3:2e:2a:
                    61:6d:c8:bf:89:f3:29:45:08:85:97:a0:66:02:18:
                    f4:49:08:e4:6e:f5:8a:04:a8:bf:e4:77:81:8e:76:
                    7b:3c:5b:bb:25:35:eb:6a:1b:52:6d:1e:46:b6:29:
                    07:70:7a:9a:bb:cc:9d:3d:00:04:f5:51:0a:53:1d:
                    49:98:81:30:06:12:67:ae:b7:fe:6e:da:f5:bd:1e:
                    1a:53:80:d8:13:ca:03:78:d6:3a:2c:13:11:42:f9:
                    43:05:84:85:a0:04:e7:85:f9:6d:09:56:5d:18:11:
                    ba:31:e1:48:3e:a8:22:ed:63:dc:5e:99:74:6d:83:
                    e1:74:fd:99:fa:44:49:b4:71:15:0e:12:be:b5:bb:
                    2a:d8:26:9f:35:0c:81:41:c6:aa:68:ce:f3:e2:7b:
                    71:5f:c5:ea:f2:56:1e:3c:02:89:39:9a:ed:fe:d1:
                    bb:5d:74:80:03:5f:ab:60:a0:ad:1d:61:ad:3a:9e:
                    f7:f5:f6:62:ff:17:2a:85:ad:e4:62:05:8d:8a:2d:
                    5d:7b:33:dc:f2:28:a1:b0:11:8a:fe:5e:c6:57:72:
                    bd:bb:f0:9c:2a:29:7a:fc:f3:93:bc:04:4b:32:14:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:73:A5:F2:65:8B:E6:9F:06:92:60:54:56:20:B3:75:C8:91:C0:44
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:4f:7c:8b:73:f9:cb:ed:6d:8b:ac:26:ae:98:c3:f8:d0:
         07:18:1c:ae:71:be:ab:40:15:d1:02:36:f6:8f:c1:0f:59:71:
         93:cc:22:0d:b5:cf:5a:03:c7:4c:dc:71:a4:8f:cb:16:53:dd:
         4e:0d:15:5b:e0:c2:35:3d:71:bb:2c:57:17:d4:1d:b7:de:90:
         cd:b7:e5:2c:89:9b:69:48:ae:ce:a8:10:c9:76:a6:be:2f:60:
         ef:07:ec:71:60:4c:e0:ee:51:b6:41:9b:ee:32:ae:df:1a:e7:
         02:5a:49:4b:c9:0b:a9:21:13:be:b4:63:87:72:ec:ae:2b:df:
         d7:b9:43:5a:91:99:9e:52:af:46:1b:1a:17:8d:22:16:8b:8b:
         60:ea:89:3e:44:77:00:27:ef:de:7f:e2:d5:61:1f:7e:38:e6:
         ca:c3:d0:a2:ae:fa:1e:4f:9c:91:a1:64:66:8a:e7:70:24:8b:
         2e:75:5e:a9:f9:86:b4:88:6d:0f:e8:34:a1:cf:25:65:a8:b6:
         0a:05:ac:b4:4e:2b:af:5f:1c:b8:e0:f6:b3:aa:fb:79:f3:db:
         26:13:4e:05:cd:a0:1e:82:ac:c6:74:10:9a:c3:2a:00:fb:74:
         77:12:7e:e8:02:75:6b:f7:d4:24:7e:ed:f1:3b:02:b1:da:28:
         b2:3e:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:44 2026 by rpki-client