Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File:                     lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier:          6Fb4BTv5AAusXoiilw2yc2ppISaKjbm01UzMf8VrglE=
Subject key identifier:   FB:F7:D0:E4:38:3C:AB:3D:02:A3:1A:84:5F:97:D3:9C:B8:59:B9:2D
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer:       /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial:       019DA3AF46D4EAC96C4B97242759A067A4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number:          0848
Signing time:             Sun 19 Apr 2026 03:01:06 +0000
Manifest this update:     Sun 19 Apr 2026 03:01:06 +0000
Manifest next update:     Mon 20 Apr 2026 03:01:06 +0000
Files and hashes:         1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: nEufFoDbtl/GDM0voNZzl/cKGEHKr5Yt5Jkqgm1xIAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:46:d4:ea:c9:6c:4b:97:24:27:59:a0:67:a4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
        Validity
            Not Before: Apr 19 03:01:06 2026 GMT
            Not After : Apr 20 03:01:06 2026 GMT
        Subject: CN=fbf7d0e4383cab3d02a31a845f97d39cb859b92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:77:30:9d:fb:8c:71:73:0a:30:39:9d:92:
                    79:30:69:ce:6e:10:8b:e7:f9:84:8d:4a:bb:b2:55:
                    56:15:15:11:92:45:97:f8:92:c8:15:6b:79:e9:32:
                    33:ee:f8:c2:cf:b9:ce:e7:1a:46:75:1b:9f:c5:a3:
                    80:e4:03:d3:b6:7b:f2:2c:26:5d:9e:25:4d:98:17:
                    8d:02:d8:6c:e3:9e:06:cb:0c:54:1d:15:9c:77:de:
                    60:d4:15:af:d7:e6:77:6d:6a:f8:d0:01:9d:79:2f:
                    fb:bc:c5:73:4b:2f:c0:6c:5c:be:58:87:1a:cb:71:
                    fc:ba:dc:b3:fd:63:e4:6e:5e:0f:0d:18:91:ff:41:
                    a5:55:a0:31:e0:62:34:95:d7:3d:87:93:33:34:9c:
                    80:5d:25:57:01:33:21:dd:17:70:99:c3:94:4a:86:
                    c1:65:47:3a:21:c8:98:d9:33:d1:1b:ee:ee:d1:88:
                    e5:fd:ca:4b:4d:79:ef:ef:3e:64:9c:f9:b9:d9:a4:
                    7e:af:78:1e:76:21:08:01:20:f7:f7:35:e4:c9:e3:
                    e7:0b:f3:d0:0b:09:94:56:2b:a9:5a:c9:bd:69:39:
                    b9:6d:e0:0d:49:c1:d3:0e:e6:ce:ba:d2:4c:4c:cf:
                    26:04:e3:9f:25:b2:2d:bb:da:6b:fc:89:2d:f3:6c:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:D0:E4:38:3C:AB:3D:02:A3:1A:84:5F:97:D3:9C:B8:59:B9:2D
            X509v3 Authority Key Identifier:
                keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:70:2b:7e:e5:88:89:cf:78:ed:36:af:e3:cd:18:d0:30:cc:
         03:de:23:87:d3:33:91:c0:1c:fb:b2:37:e8:1d:57:62:aa:27:
         20:ff:a5:00:08:0f:b0:00:0d:0e:29:25:6e:cb:b3:27:1c:a7:
         0a:89:06:24:5a:6c:b4:40:b4:51:aa:f4:23:af:44:38:12:e5:
         5f:85:a7:77:6b:17:b2:9d:42:e4:ed:56:f2:c8:d7:23:92:a5:
         dc:df:5e:7b:0b:08:2e:ad:a4:f5:e0:68:5e:c1:27:77:e9:54:
         08:e0:fe:4d:d1:7a:5b:b7:9b:4b:7f:d4:81:25:bc:f9:38:2a:
         8d:23:e3:c0:a2:29:6b:de:05:f4:5e:45:9b:3e:54:66:60:87:
         f5:8e:5b:ef:29:b3:d8:1e:9c:a1:c5:11:4b:0c:67:3b:3d:09:
         ba:4e:aa:4a:54:78:90:b7:0a:bf:35:94:b7:aa:98:f8:0d:98:
         46:9c:2c:bb:3d:0e:94:3c:27:76:f1:e3:ae:c9:2c:37:5a:38:
         fd:6d:6b:c0:54:a1:36:d8:2e:3c:28:37:bd:16:34:64:a2:b3:
         f9:2e:a4:0d:c6:07:21:8c:81:ba:97:05:00:51:6f:9f:cd:68:
         2d:44:11:09:ae:0c:61:1c:75:7b:f8:61:66:c0:69:63:be:5b:
         b3:0e:99:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jr0bU6slsS5ckJ1mgZ6TbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx
N2YxMjQwHhcNMjYwNDE5MDMwMTA2WhcNMjYwNDIwMDMwMTA2WjAzMTEwLwYDVQQD
EyhmYmY3ZDBlNDM4M2NhYjNkMDJhMzFhODQ1Zjk3ZDM5Y2I4NTliOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlZ3MJ37jHFzCjA5nZJ5MGnObhCL
5/mEjUq7slVWFRURkkWX+JLIFWt56TIz7vjCz7nO5xpGdRufxaOA5APTtnvyLCZd
niVNmBeNAths454GywxUHRWcd95g1BWv1+Z3bWr40AGdeS/7vMVzSy/AbFy+WIca
y3H8utyz/WPkbl4PDRiR/0GlVaAx4GI0ldc9h5MzNJyAXSVXATMh3RdwmcOUSobB
ZUc6IciY2TPRG+7u0Yjl/cpLTXnv7z5knPm52aR+r3gediEIASD39zXkyePnC/PQ
CwmUViupWsm9aTm5beANScHTDubOutJMTM8mBOOfJbItu9pr/Ikt82z0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv30OQ4PKs9AqMahF+X05y4WbktMB8GA1UdIwQY
MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt
ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2
LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXArfuWI
ic947Tav480Y0DDMA94jh9MzkcAc+7I36B1XYqonIP+lAAgPsAANDiklbsuzJxyn
CokGJFpstEC0Uar0I69EOBLlX4Wnd2sXsp1C5O1W8sjXI5Kl3N9eewsILq2k9eBo
XsEnd+lUCOD+TdF6W7ebS3/UgSW8+TgqjSPjwKIpa94F9F5Fmz5UZmCH9Y5b7ymz
2B6cocURSwxnOz0Juk6qSlR4kLcKvzWUt6qY+A2YRpwsuz0OlDwndvHjrsksN1o4
/W1rwFShNtguPCg3vRY0ZKKz+S6kDcYHIYyBupcFAFFvn81oLUQRCa4MYRx1e/hh
ZsBpY75bsw6ZRg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:39 2026 by rpki-client