Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          l+yeRjqVKNUWe/umRWffB43gdSL3wgboFfpz0R7g8E4=
Subject key identifier:   80:E7:33:6F:5E:4F:6D:F5:B2:51:00:80:84:A0:29:AB:3A:05:B2:09
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       019E2C28224D78E55A949A1E1AAB993BA3D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          0514
Signing time:             Fri 15 May 2026 15:01:28 +0000
Manifest this update:     Fri 15 May 2026 15:01:28 +0000
Manifest next update:     Sat 16 May 2026 15:01:28 +0000
Files and hashes:         1: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: zC1gpnQpTzR7YuSuwyaT8kIlMRYrrxjwSk1QF4YIURE=)
                          2: tdITwv0zRtaKmsmIYJ8svd-vjFU.roa (hash: Tuddv3yQVf/k3vQa7nswjjjj4m2xTNF5boEVBehAC4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:28:22:4d:78:e5:5a:94:9a:1e:1a:ab:99:3b:a3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: May 15 15:01:28 2026 GMT
            Not After : May 16 15:01:28 2026 GMT
        Subject: CN=80e7336f5e4f6df5b251008084a029ab3a05b209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:35:c6:66:88:a1:b8:dc:c0:c9:8b:fe:00:
                    38:da:2e:e0:6a:09:4c:a6:14:33:21:83:f0:4f:b7:
                    1c:c7:3d:60:27:bc:6e:e6:38:0f:ff:c5:03:a2:eb:
                    e3:20:e7:4e:e8:73:ef:e5:ac:68:18:b3:f1:6d:f5:
                    3f:e8:34:21:19:46:fe:ce:ab:fc:29:42:1f:54:a8:
                    d5:c1:d2:c4:a2:65:79:5b:c3:57:ee:5c:50:4f:0e:
                    c5:e2:87:1f:d4:7b:bf:4e:36:bb:66:bb:af:31:7a:
                    45:53:e8:f9:a6:3f:ce:e8:17:c4:48:be:54:7a:1f:
                    a2:db:ac:7b:f0:2f:df:ee:dd:5f:dd:32:37:3d:46:
                    42:a1:8f:20:9f:49:b1:04:42:08:a8:66:4c:3d:38:
                    dc:eb:e2:7d:56:21:b7:e7:c5:80:79:bd:01:27:07:
                    96:f2:a4:ff:4d:26:a7:a2:9c:66:6d:9e:79:2c:df:
                    2b:88:d9:4a:b7:05:28:b7:eb:c7:b1:e3:1d:d0:40:
                    a4:75:5c:05:dc:e0:3c:18:24:4f:49:5e:51:b2:88:
                    9a:f6:13:bb:df:94:f2:31:e9:92:a1:40:d4:4b:8c:
                    23:1a:e6:c8:ee:8c:ae:1c:af:e2:21:f2:85:2b:4e:
                    98:76:84:12:08:f2:54:14:dc:c4:5d:20:fa:3e:58:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E7:33:6F:5E:4F:6D:F5:B2:51:00:80:84:A0:29:AB:3A:05:B2:09
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:de:df:7f:74:a5:95:7d:17:72:de:0b:2d:c4:1b:2c:2c:bb:
         53:88:44:f7:a0:86:70:67:e2:94:46:e8:15:11:65:57:6c:13:
         dd:7e:09:ad:7d:ca:ed:90:86:4c:33:71:fa:05:12:f3:db:ba:
         4b:84:b3:59:81:92:4d:a1:c3:4c:73:c2:ea:2d:03:14:b0:89:
         9c:8f:d0:2b:f2:b5:6b:a6:87:81:73:32:0c:a8:bd:f0:1d:03:
         e9:12:e5:8d:f9:3d:ba:ae:a0:53:41:fc:c5:cd:4b:6f:51:81:
         79:53:96:55:1c:7c:31:ad:4a:10:0b:7a:44:e6:fe:32:9c:e9:
         fd:41:34:4c:0e:d9:d0:2d:6b:8e:af:c1:2e:67:fc:9d:11:37:
         d9:37:2b:22:1f:6d:df:86:ef:d1:5d:63:95:3d:e9:ac:e1:51:
         3a:e0:53:ec:fb:06:88:49:8c:28:9a:5e:a5:15:0a:2a:cb:a8:
         4b:82:f1:3b:07:9e:96:ff:e5:78:01:07:2f:a2:09:d3:cb:84:
         7b:49:df:95:8b:45:2d:75:43:0d:7a:ee:a3:49:d3:ea:22:ae:
         4a:29:de:22:29:4a:5b:43:72:de:eb:13:e4:10:95:00:6d:a9:
         d5:4a:1d:5e:7b:96:59:7d:73:93:f5:eb:40:33:3c:f9:fa:45:
         70:bc:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:26:26 2026 by rpki-client