Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          lybZMpqKxKP56207AxIF8grK/rVACL4PrnoMoH1eRWY=
Subject key identifier:   B1:35:C8:39:72:F1:1F:F7:8E:62:55:A7:50:BE:45:76:E9:46:ED:64
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       019D38D354E99A5312AA288055D60A3F2330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 09:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:07 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: QnpL7JpkV7zNsxhn6M+o2VANXZ7s8BLt30z2C+f18c8=)
                          2: cO4n71Ca1KW9YOy3Lk5tseYgVLs.roa (hash: mIrTwfJ5XFJdShmQyd6p7zVMdef2lZJKuLHzMy3HxFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:54:e9:9a:53:12:aa:28:80:55:d6:0a:3f:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Mar 29 09:01:07 2026 GMT
            Not After : Mar 30 09:01:07 2026 GMT
        Subject: CN=b135c83972f11ff78e6255a750be4576e946ed64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:57:ea:49:bb:d8:17:fb:1d:cb:8b:03:4a:
                    6f:cb:90:bc:7a:df:63:2b:ac:38:41:79:fe:10:43:
                    21:ca:4b:8c:31:de:1f:16:41:b8:29:4c:9b:3c:10:
                    d4:33:e0:01:0f:f1:5e:fb:5d:10:00:8b:9e:3b:5b:
                    16:76:67:e8:00:ff:da:49:c1:ca:43:08:f3:94:a6:
                    a5:95:77:ee:03:ae:19:31:e2:52:f5:f9:eb:7a:f6:
                    17:df:b6:61:e3:0d:d5:ba:24:ab:c8:a7:aa:a5:69:
                    30:9d:cf:23:64:96:31:59:47:75:b2:c2:ab:31:ec:
                    51:84:8a:35:7c:4d:39:80:7a:cc:80:f3:bd:5b:f9:
                    2e:c8:57:cf:83:ff:0e:f1:e7:8c:b5:d9:36:45:59:
                    ab:2b:3e:6c:45:92:c9:2c:b1:84:8c:73:d3:d9:fe:
                    01:b5:bd:11:f8:f5:a9:d1:e1:cd:4a:7c:2e:3f:6f:
                    46:23:fc:1c:91:82:4b:0f:20:c9:fd:7c:ab:52:85:
                    df:e6:30:dd:f6:fe:d8:bc:d7:2d:39:f5:28:b7:a2:
                    b6:29:13:08:d1:b0:ef:0d:1c:7d:2d:60:c3:be:2b:
                    6b:67:c8:0d:af:7c:56:b9:d4:6f:e8:16:fd:ac:6b:
                    60:ce:7f:80:35:e2:ca:2a:d5:22:6b:12:28:5a:22:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:35:C8:39:72:F1:1F:F7:8E:62:55:A7:50:BE:45:76:E9:46:ED:64
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:32:73:10:16:f0:27:7d:61:8d:0d:77:2e:e1:b1:ea:88:
         cc:3b:0b:ea:14:c1:95:30:9c:30:a8:7c:c7:39:da:6d:52:86:
         ee:0b:13:7e:98:ea:a5:09:d7:05:05:cf:d7:66:59:86:4a:b4:
         30:93:32:ef:95:3b:e9:79:5c:5a:29:ea:99:a5:01:03:6a:20:
         f0:53:b1:72:75:ec:a7:51:53:ed:e4:9b:2f:f9:ff:fd:88:fa:
         4c:0d:81:e8:57:10:ac:1a:1e:0a:54:f1:8d:0e:a2:33:f0:b2:
         49:49:67:20:af:70:2d:c0:20:38:d8:7a:a3:2c:90:e0:4b:13:
         4a:4e:16:76:27:19:81:7b:46:ed:79:d6:3e:88:1a:f7:45:4d:
         9f:75:12:03:6b:54:f1:7c:5d:7b:e2:37:c1:d0:d1:11:1e:f0:
         7d:4f:3f:c6:d3:e1:2b:d2:88:d4:dc:88:0f:e9:03:96:8b:77:
         78:33:5b:3e:1f:91:d1:8e:1c:28:28:e1:5c:00:e3:1e:c3:56:
         b2:1a:b3:38:b6:e9:dd:fb:9a:b9:81:32:02:81:81:c4:b3:b3:
         79:2d:ff:37:55:c9:dd:2e:30:bc:c4:27:7d:71:6b:b8:30:4a:
         20:93:f2:51:48:e3:ae:16:55:e7:15:d5:d3:e9:40:59:e3:3f:
         65:c0:e6:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0401TpmlMSqiiAVdYKPyMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYjYxNmYzYWQwMzYzZTcyNjljYzJlYjU4ZDFiYzA4NmNj
OTc1ZjIwHhcNMjYwMzI5MDkwMTA3WhcNMjYwMzMwMDkwMTA3WjAzMTEwLwYDVQQD
EyhiMTM1YzgzOTcyZjExZmY3OGU2MjU1YTc1MGJlNDU3NmU5NDZlZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqpX6km72Bf7HcuLA0pvy5C8et9j
K6w4QXn+EEMhykuMMd4fFkG4KUybPBDUM+ABD/Fe+10QAIueO1sWdmfoAP/aScHK
QwjzlKallXfuA64ZMeJS9fnrevYX37Zh4w3VuiSryKeqpWkwnc8jZJYxWUd1ssKr
MexRhIo1fE05gHrMgPO9W/kuyFfPg/8O8eeMtdk2RVmrKz5sRZLJLLGEjHPT2f4B
tb0R+PWp0eHNSnwuP29GI/wckYJLDyDJ/XyrUoXf5jDd9v7YvNctOfUot6K2KRMI
0bDvDRx9LWDDvitrZ8gNr3xWudRv6Bb9rGtgzn+ANeLKKtUiaxIoWiK+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE1yDly8R/3jmJVp1C+RXbpRu1kMB8GA1UdIwQY
MBaAFC22FvOtA2PnJpzC61jRvAhsyXXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEt
YTRiNTVhNzFjMjI4LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEtYTRiNTVhNzFjMjI4
LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWcycxAW
8Cd9YY0Ndy7hseqIzDsL6hTBlTCcMKh8xznabVKG7gsTfpjqpQnXBQXP12ZZhkq0
MJMy75U76XlcWinqmaUBA2og8FOxcnXsp1FT7eSbL/n//Yj6TA2B6FcQrBoeClTx
jQ6iM/CySUlnIK9wLcAgONh6oyyQ4EsTSk4WdicZgXtG7XnWPoga90VNn3USA2tU
8Xxde+I3wdDRER7wfU8/xtPhK9KI1NyID+kDlot3eDNbPh+R0Y4cKCjhXADjHsNW
shqzOLbp3fuauYEyAoGBxLOzeS3/N1XJ3S4wvMQnfXFruDBKIJPyUUjjrhZV5xXV
0+lAWeM/ZcDmkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:39 2026 by rpki-client