Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File:                     lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier:          UJtPd49VZ3L2q0c2iNYX1QJMbfBF1ikk0X9LZIZuG2Y=
Subject key identifier:   24:14:09:6F:F6:02:EE:49:80:98:A2:0E:37:A5:2F:C1:68:59:B7:FA
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer:       /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial:       019DA4544273C28EDAA578725B152A28539D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 06:01:18 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:18 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:18 +0000
Files and hashes:         1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: v7Apv/U33eBV6ncfOzDwZAn4gRENFYtf/iex+l35jBk=)
                          2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:42:73:c2:8e:da:a5:78:72:5b:15:2a:28:53:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
        Validity
            Not Before: Apr 19 06:01:18 2026 GMT
            Not After : Apr 20 06:01:18 2026 GMT
        Subject: CN=2414096ff602ee498098a20e37a52fc16859b7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:86:6e:81:7d:38:b1:ea:8e:fa:e1:fe:92:
                    81:4b:1f:4f:52:95:51:4a:fc:34:da:17:f6:42:d5:
                    ce:20:40:28:40:2a:cd:98:b7:b5:73:58:ac:ff:9a:
                    06:d0:fb:99:6a:11:0b:a0:f5:8d:de:21:e3:8f:21:
                    d4:dd:0c:82:66:f5:cf:cd:71:c5:48:67:bf:45:5a:
                    5f:0e:e9:cb:ba:67:48:62:d0:53:ae:aa:f7:5e:f5:
                    41:2d:3e:58:94:71:02:50:b5:f8:6c:6c:13:7e:96:
                    6a:d0:d2:3e:34:14:d1:db:67:b2:88:49:b2:55:c7:
                    49:91:47:d9:dc:46:66:b5:51:30:40:5b:a0:2d:5a:
                    fc:08:f8:37:17:f7:20:c8:c8:30:73:04:0a:79:b9:
                    fa:f3:50:c6:d0:02:bd:7a:3d:b7:15:60:6c:27:21:
                    0e:a4:d2:13:70:d7:1d:04:97:bb:a7:43:89:bc:9a:
                    dd:11:75:a1:9f:5b:a5:1f:49:7f:29:4d:f5:e4:cd:
                    19:ee:1b:ff:2a:d6:57:c5:56:9f:be:f7:f8:ed:91:
                    4b:a6:bd:91:81:e7:75:9a:6a:6b:6e:bc:f6:30:e8:
                    34:5f:79:2e:dd:4d:e2:b1:e2:07:74:d1:20:d9:e3:
                    df:61:b8:45:f9:2d:7d:57:55:7b:7e:f1:f9:c4:b8:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:09:6F:F6:02:EE:49:80:98:A2:0E:37:A5:2F:C1:68:59:B7:FA
            X509v3 Authority Key Identifier:
                keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:65:0a:b9:64:dd:99:fc:e8:61:96:05:37:dd:a6:be:d5:
         44:d5:21:86:28:28:3d:d8:a7:30:3a:0a:9b:f3:1e:d4:0b:7a:
         cc:c1:07:90:de:b5:6f:1b:d9:79:d6:dc:01:06:49:11:af:63:
         5b:c0:6f:42:df:43:d7:c1:49:59:2e:6a:2c:92:71:ab:5b:74:
         95:ae:82:13:8e:98:b6:02:6d:68:4d:8f:7b:55:ed:c2:a3:87:
         3d:2d:c5:07:05:d3:b5:e8:87:19:1a:81:68:5f:ab:4c:a0:7e:
         1c:c8:6d:02:9a:d7:41:77:58:ab:39:e0:57:fc:19:0f:13:18:
         90:9b:b9:a5:be:47:c0:ad:72:70:33:50:54:8f:76:36:4e:98:
         76:e4:3d:32:e8:51:4f:40:8b:1f:80:be:be:b9:a9:37:5d:b3:
         95:e0:1a:7e:ae:3a:3a:c9:48:a2:35:b0:c0:ae:c2:2f:46:14:
         c4:6a:bb:4a:5b:1d:08:ce:f1:7c:9a:00:a6:79:0f:d1:da:89:
         14:a9:5b:67:16:1d:3a:e2:83:ee:de:98:74:7a:d1:37:d7:62:
         85:79:b3:03:aa:8c:5f:3a:5b:f4:d9:d5:c2:52:22:c2:23:b2:
         53:d0:26:71:e1:f7:3b:60:6d:7b:05:99:76:fc:59:bc:33:8e:
         7a:0e:1b:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVEJzwo7apXhyWxUqKFOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1
NTM4NmMwHhcNMjYwNDE5MDYwMTE4WhcNMjYwNDIwMDYwMTE4WjAzMTEwLwYDVQQD
EygyNDE0MDk2ZmY2MDJlZTQ5ODA5OGEyMGUzN2E1MmZjMTY4NTliN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFKGboF9OLHqjvrh/pKBSx9PUpVR
Svw02hf2QtXOIEAoQCrNmLe1c1is/5oG0PuZahELoPWN3iHjjyHU3QyCZvXPzXHF
SGe/RVpfDunLumdIYtBTrqr3XvVBLT5YlHECULX4bGwTfpZq0NI+NBTR22eyiEmy
VcdJkUfZ3EZmtVEwQFugLVr8CPg3F/cgyMgwcwQKebn681DG0AK9ej23FWBsJyEO
pNITcNcdBJe7p0OJvJrdEXWhn1ulH0l/KU315M0Z7hv/KtZXxVafvvf47ZFLpr2R
ged1mmprbrz2MOg0X3ku3U3iseIHdNEg2ePfYbhF+S19V1V7fvH5xLgRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQUCW/2Au5JgJiiDjelL8FoWbf6MB8GA1UdIwQY
MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt
NDZmZDQ2ZDZiNTQ3LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3
LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvplCrlk
3Zn86GGWBTfdpr7VRNUhhigoPdinMDoKm/Me1At6zMEHkN61bxvZedbcAQZJEa9j
W8BvQt9D18FJWS5qLJJxq1t0la6CE46YtgJtaE2Pe1XtwqOHPS3FBwXTteiHGRqB
aF+rTKB+HMhtAprXQXdYqzngV/wZDxMYkJu5pb5HwK1ycDNQVI92Nk6YduQ9MuhR
T0CLH4C+vrmpN12zleAafq46OslIojWwwK7CL0YUxGq7SlsdCM7xfJoApnkP0dqJ
FKlbZxYdOuKD7t6YdHrRN9dihXmzA6qMXzpb9NnVwlIiwiOyU9AmceH3O2BtewWZ
dvxZvDOOeg4bWw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:01 2026 by rpki-client