Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          MmRxkY8gxBs3cSJzpfQ95vfZasCWjawtjkFp4JQYEA8=
Subject key identifier:   77:2B:3B:89:1B:2D:68:25:D4:B2:FB:1E:CB:2B:20:AE:15:70:4B:B2
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       019D99D075C08EC30B1C130E87BEAEBA645B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          11DC
Signing time:             Fri 17 Apr 2026 05:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:08 +0000
Files and hashes:         1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
                          2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
                          3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
                          4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: YEK4EP0seV+3SF3u3TAFotv4RT1HSMyY4aldZcEn/Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:75:c0:8e:c3:0b:1c:13:0e:87:be:ae:ba:64:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Apr 17 05:01:08 2026 GMT
            Not After : Apr 18 05:01:08 2026 GMT
        Subject: CN=772b3b891b2d6825d4b2fb1ecb2b20ae15704bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:59:5c:49:bb:39:67:39:46:c3:48:ac:a8:
                    8e:11:32:30:12:6e:33:70:a5:07:f5:2c:75:7e:30:
                    99:30:99:db:6c:7e:f1:9b:e4:14:fe:8b:3e:3c:96:
                    00:a5:56:ac:1e:9a:60:7b:12:5e:bc:65:bc:7b:b4:
                    b9:9e:0b:7e:31:65:1c:e5:c8:f4:9e:e5:c8:91:ba:
                    e6:41:dc:6a:5d:cc:1b:4e:23:c0:b4:24:59:17:c3:
                    bb:74:67:59:f3:1e:3c:ac:0e:a8:44:7f:7b:06:8c:
                    75:5e:21:56:7a:60:74:57:ed:03:99:cc:90:cd:3f:
                    42:a4:0e:3d:b5:f9:bb:a2:83:db:5a:be:49:e4:85:
                    ec:20:91:37:bc:b4:9d:b4:a5:c9:23:57:18:88:08:
                    7c:18:d8:72:d9:ac:8e:a8:e9:c0:34:b0:1d:6f:d6:
                    b0:45:15:44:be:9b:a9:c6:29:c4:d6:d8:17:6c:b4:
                    c0:6f:65:8c:ba:a0:13:f3:b1:fe:41:51:a7:49:2c:
                    a2:52:30:40:93:93:7d:d2:a1:90:fe:b1:f6:ca:e8:
                    ce:58:8c:e7:6b:2b:c5:34:db:13:c5:f8:4a:6e:b6:
                    1b:83:d8:cf:a4:4a:39:ab:8c:e8:07:00:3d:b0:2a:
                    6b:40:81:6d:79:b9:ef:79:03:64:80:a3:93:cf:1a:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:3B:89:1B:2D:68:25:D4:B2:FB:1E:CB:2B:20:AE:15:70:4B:B2
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:af:0e:64:e4:df:9f:c0:47:6b:44:34:66:16:3c:61:c4:45:
         22:96:6c:7c:21:61:4d:be:cc:57:3e:de:00:0d:31:15:68:50:
         64:b5:da:73:61:ea:cb:d1:75:fc:52:f8:1b:e0:c7:cc:4e:67:
         ce:cc:c8:bd:eb:4e:51:dc:fa:4c:4c:56:62:a7:4b:50:36:43:
         24:b6:2f:81:bc:53:f2:86:d2:82:07:d6:6e:64:a1:9d:3c:e5:
         bc:61:ea:a7:b0:18:db:52:b1:19:9c:e3:6c:f7:40:e3:81:6f:
         0c:da:d0:a2:96:54:c9:dc:ab:cd:7f:fe:9c:6e:f6:59:20:5a:
         09:92:77:3e:1c:95:13:8c:fb:5b:05:cf:b4:bb:1f:60:36:66:
         3e:7d:b4:c0:2c:87:11:01:43:14:04:6a:b1:1a:61:00:34:a7:
         f1:85:b6:82:c4:66:94:d4:2b:e3:98:98:6f:dd:41:78:c1:30:
         be:5e:ca:7c:cd:40:04:8b:10:4b:b6:25:15:74:fe:0f:8b:ec:
         a5:8b:38:94:a9:52:18:4c:e6:d3:da:e8:98:59:14:1a:66:cb:
         fe:5b:02:61:fc:d2:bb:bd:d6:d7:73:51:ef:b4:06:5a:80:29:
         b7:9e:41:25:ed:f5:6b:c9:ef:a6:2c:19:67:b8:72:a6:fd:46:
         ab:94:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:16 2026 by rpki-client