Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File:                     lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier:          Q1jXnsFXdzRPxxu1/+ZzHzuglqLN3CrKymjmhapPHS4=
Subject key identifier:   40:30:64:9F:62:49:F3:6A:83:51:2D:1F:C5:2D:3F:15:6F:F9:74:0B
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer:       /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial:       019CEC6F5E167E79F67535FF2BB086652459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number:          0379
Signing time:             Sat 14 Mar 2026 13:00:47 +0000
Manifest this update:     Sat 14 Mar 2026 13:00:47 +0000
Manifest next update:     Sun 15 Mar 2026 13:00:47 +0000
Files and hashes:         1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
                          2: Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa (hash: PLDlG1iHC8FjmM9ZbPbgJZ/cE8eZpKuBZFtO/3E37fU=)
                          3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: +pKWqRSlzJcmAw+4cW2VREKKsvTYQCZ4Jmxy95azXJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:6f:5e:16:7e:79:f6:75:35:ff:2b:b0:86:65:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
        Validity
            Not Before: Mar 14 13:00:47 2026 GMT
            Not After : Mar 15 13:00:47 2026 GMT
        Subject: CN=4030649f6249f36a83512d1fc52d3f156ff9740b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:2f:60:6b:4d:94:8c:7e:26:3e:17:4f:3a:
                    20:59:34:c3:e4:6e:7b:13:0e:ef:e6:40:a0:43:a5:
                    5f:fb:89:e7:af:e3:ac:88:8d:9a:bb:5d:cc:1b:54:
                    bd:2a:c6:76:e2:6b:45:b0:d6:6d:a0:9a:5b:fb:11:
                    4e:1b:92:9a:55:4b:79:99:fb:b1:62:a8:2a:af:c1:
                    6c:5c:3e:31:a3:df:88:0e:9e:2b:f8:2f:cb:74:f1:
                    b0:36:32:cb:af:ad:aa:73:22:ca:a5:9d:14:07:75:
                    1a:7d:32:9d:89:4f:61:06:1f:cc:e4:ea:99:f5:2b:
                    98:8f:92:f5:6d:03:a0:47:3a:c6:32:cc:a6:36:60:
                    ab:ea:6d:4b:f6:b7:7d:64:46:76:0d:f7:07:3c:0f:
                    be:90:3e:e5:6f:3e:84:3a:70:ee:3a:d3:20:91:35:
                    27:9f:a2:b1:94:fc:f1:e6:d9:96:74:d9:63:84:95:
                    71:e3:f9:36:00:f0:e6:13:20:ad:90:a5:38:d4:57:
                    00:69:64:b6:d8:5e:dd:f6:f7:6e:db:65:d4:6d:84:
                    26:47:37:b6:1f:0e:ec:35:74:4f:85:a2:a3:2b:43:
                    cb:8c:3b:67:37:27:d5:18:24:fc:85:c3:f6:13:35:
                    ac:f4:b5:23:16:1e:89:0f:db:2b:8b:fd:e1:fe:e9:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:64:9F:62:49:F3:6A:83:51:2D:1F:C5:2D:3F:15:6F:F9:74:0B
            X509v3 Authority Key Identifier:
                keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:f7:6e:7a:99:47:32:99:75:27:e7:a7:35:0e:24:30:b4:
         28:0b:5e:37:af:ca:e5:4e:5f:f2:4c:9a:48:13:99:83:7f:e4:
         75:ba:39:37:b3:26:d8:91:52:4d:87:5f:98:26:58:4f:e2:dd:
         d3:4b:e4:98:f6:17:93:56:9a:d2:7a:25:1d:df:35:d5:7b:85:
         e9:20:1e:83:32:c7:00:f7:24:ff:af:b1:98:12:66:37:53:88:
         5d:65:0f:dc:f7:8a:03:d2:f6:51:d3:d8:95:8f:d5:19:5a:28:
         62:a0:e5:3d:4f:63:c8:87:3a:8d:59:ec:d0:95:8d:f4:58:83:
         92:77:66:f3:76:c5:62:c9:e7:00:90:53:ab:bb:5c:d2:e4:8c:
         12:a9:68:e3:39:62:fa:3d:09:61:69:1b:13:cc:cd:55:60:a7:
         82:0e:8d:05:02:31:88:ac:60:fe:c9:3f:6c:b9:5d:81:44:ee:
         2e:60:79:e6:28:7a:4c:cc:91:75:5a:4b:17:ba:d9:a9:0a:45:
         80:e6:d4:f8:2c:6e:f4:32:63:0d:f8:84:4f:f6:ad:1b:8c:3c:
         21:25:d5:84:00:ed:a2:84:61:2e:f3:90:61:98:d1:fd:9d:04:
         16:7e:71:94:1b:d8:b2:ee:bc:58:38:c6:ed:1e:2a:70:90:76:
         68:38:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:50:05 2026 by rpki-client