Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File:                     lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier:          inIcLc4u+Kq6uNacPCeW0uu65QnO+BkUF8lmtqPmpaQ=
Subject key identifier:   2D:31:81:D1:63:27:A2:29:A1:A8:CD:15:B0:EE:CD:01:A5:FE:B1:FB
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer:       /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial:       019E2B15330E0C22D2B3B7E3EC26B3609EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number:          1917
Signing time:             Fri 15 May 2026 10:01:10 +0000
Manifest this update:     Fri 15 May 2026 10:01:10 +0000
Manifest next update:     Sat 16 May 2026 10:01:10 +0000
Files and hashes:         1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
                          2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: lW8sPBA+jcJdp6hzA/1D+RNBv3RPsnmTCxTDqcbOGhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:33:0e:0c:22:d2:b3:b7:e3:ec:26:b3:60:9e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
        Validity
            Not Before: May 15 10:01:10 2026 GMT
            Not After : May 16 10:01:10 2026 GMT
        Subject: CN=2d3181d16327a229a1a8cd15b0eecd01a5feb1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:2b:c7:28:b8:a9:65:37:a0:51:c0:04:15:
                    17:3c:8c:e9:69:6c:9c:9b:e3:85:66:e7:21:49:37:
                    07:38:5c:1c:7b:12:27:f9:45:03:28:00:2f:b9:36:
                    3f:f6:52:c7:70:d9:0c:2c:b6:f0:3d:c2:1e:e8:b4:
                    d6:32:ef:e6:96:44:9e:96:00:6f:4f:49:e2:1c:fe:
                    b9:69:57:33:cb:c7:a8:21:28:7f:f5:4a:b8:b1:ea:
                    56:ad:c2:f9:92:50:11:ab:98:0e:02:0d:b3:a3:6f:
                    16:e5:46:b2:1d:b4:81:1e:91:4d:6f:ae:88:ee:a3:
                    c0:4c:30:3e:09:2a:84:20:48:7c:0b:0f:18:53:b7:
                    f3:c5:a1:ae:47:f5:9b:ac:4a:7e:34:22:45:21:5b:
                    cf:b5:f2:cf:1e:21:74:25:0b:93:39:d5:2f:88:1a:
                    ff:77:62:d7:0e:8a:06:53:2d:44:a3:8b:87:ef:a9:
                    ba:1c:85:f8:15:ed:2b:4c:26:fe:b7:04:de:59:7c:
                    6c:c5:dd:6b:5b:4b:7c:3a:51:24:e8:6f:84:76:46:
                    e8:cf:c5:ae:6e:28:67:c5:0a:11:84:3f:24:a3:ff:
                    fd:ae:b3:2c:bb:b8:ab:db:e9:3e:2c:de:4d:47:32:
                    ae:29:d8:46:74:ca:32:f4:d8:87:21:bb:5d:19:69:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:31:81:D1:63:27:A2:29:A1:A8:CD:15:B0:EE:CD:01:A5:FE:B1:FB
            X509v3 Authority Key Identifier:
                keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7f:09:94:34:26:7d:6b:6b:45:1f:9f:7c:dd:c5:c2:82:a0:
         b2:52:26:09:91:7e:6b:32:49:62:03:3a:18:ec:09:83:64:02:
         58:72:03:64:4d:7a:b5:d2:3d:7c:5f:9a:b5:5f:3e:d6:11:1e:
         20:36:37:d4:a6:ed:5d:ca:20:0d:5a:da:c8:28:0a:62:90:97:
         77:b7:41:a1:43:6c:49:9d:ad:12:41:22:01:99:65:09:a3:fe:
         93:02:a5:e4:75:77:77:0b:be:0e:15:32:95:e5:c6:1c:22:65:
         59:8e:27:87:8f:b7:a7:de:ca:7b:45:36:e3:a1:4f:20:e7:b1:
         52:dc:1d:64:55:73:0d:d2:4e:e3:b6:7d:ca:63:06:7d:08:5b:
         54:e0:28:09:3b:6f:65:39:d7:9b:b6:75:7b:b9:51:74:aa:43:
         07:c5:5a:ec:93:a1:36:8f:f7:1e:2c:43:d4:cd:bb:dd:7f:52:
         1a:1f:bb:50:8a:07:37:5c:36:5b:42:92:61:da:e1:b9:3b:34:
         3f:5e:a2:ba:06:d1:e0:27:3c:ac:8e:43:9d:36:a7:b0:d3:51:
         95:bb:e4:82:ce:2b:f3:5d:bf:1f:43:ab:ad:29:17:f3:d6:5b:
         98:c5:6f:26:2e:df:98:1f:6a:9d:cf:3a:49:72:53:08:0a:ea:
         e2:df:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:04 2026 by rpki-client