Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File:                     lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier:          gdm07VCHeL/JJHnYX01ki+uL04/hvpiah7S/48Q6dWQ=
Subject key identifier:   6D:06:DE:43:FF:F9:DF:90:2C:E9:C7:2C:8B:0B:23:75:D7:BD:84:75
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer:       /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial:       019CE5234FF2F9D6B2A2FEFF060F60EF07B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number:          1805
Signing time:             Fri 13 Mar 2026 03:00:22 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:22 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:22 +0000
Files and hashes:         1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: qHwjbDY3j7zfhTamuniwoQ3Wcl2kUusKS0iEgMDfXWE=)
                          2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:4f:f2:f9:d6:b2:a2:fe:ff:06:0f:60:ef:07:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
        Validity
            Not Before: Mar 13 03:00:22 2026 GMT
            Not After : Mar 14 03:00:22 2026 GMT
        Subject: CN=6d06de43fff9df902ce9c72c8b0b2375d7bd8475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:02:81:80:af:df:a6:7b:c0:03:7d:38:c2:
                    12:cf:43:4d:31:b5:8f:f3:e8:40:4d:b4:2f:b5:5d:
                    2c:40:43:9f:5b:a0:fe:b5:32:20:2e:c8:fe:23:50:
                    41:fa:48:db:03:d7:88:62:2d:59:b0:2d:90:0c:30:
                    22:02:b9:18:72:20:86:d8:75:44:ff:82:d4:d3:13:
                    17:93:cd:e9:89:6c:5a:40:2e:f3:bd:5e:2f:1f:f0:
                    bf:c9:f2:90:7e:18:4e:56:ac:43:63:09:e8:3a:87:
                    98:f0:b5:99:b2:9a:88:89:70:15:64:d3:7f:54:cf:
                    9e:1c:a2:85:51:9c:13:0b:cf:c6:45:9d:53:b8:21:
                    98:76:95:3f:dc:93:0d:99:8d:59:84:6f:ac:37:da:
                    57:38:86:aa:85:20:47:52:ff:9c:c3:8e:f2:88:e1:
                    8c:81:df:6f:f9:33:39:36:cb:4a:4c:67:41:2e:c4:
                    4a:41:36:59:7b:8e:f8:b8:3d:20:68:64:be:6b:fd:
                    7e:77:cd:34:eb:a2:0a:44:d6:83:87:c7:67:e5:eb:
                    db:4d:2a:ef:22:22:91:03:f8:ad:d8:26:11:2b:bf:
                    b2:40:ce:82:c3:6c:d5:cd:84:f2:5f:59:4b:ad:d8:
                    e3:08:d6:3a:3d:b4:2c:96:06:ad:34:cc:66:e9:3f:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:06:DE:43:FF:F9:DF:90:2C:E9:C7:2C:8B:0B:23:75:D7:BD:84:75
            X509v3 Authority Key Identifier:
                keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e9:35:23:8d:3a:e2:f6:00:ab:3e:96:6e:3b:e6:68:fa:07:
         60:d0:47:8b:3f:71:d8:b8:b3:97:e5:e3:56:b9:fa:2b:a3:07:
         e6:1c:88:a6:6b:cd:e0:54:7f:b9:1e:9d:0d:3a:c9:60:3e:d5:
         44:a0:29:1b:7e:8f:81:ad:96:3b:87:64:c2:4a:67:aa:d1:3f:
         49:85:e2:21:74:44:eb:39:36:70:5d:6c:a0:3f:af:ac:1c:d1:
         48:4c:45:c9:8d:f4:37:13:9f:17:f9:3f:ca:08:6e:a4:c4:76:
         18:66:38:66:02:11:ad:74:e3:06:bc:16:d8:5e:d7:88:40:22:
         44:e9:2d:45:2b:a8:27:ad:78:df:2a:61:32:7e:ce:86:3e:cf:
         05:15:d3:a7:a5:23:0a:3a:d1:58:ca:4e:1f:55:fd:ad:74:69:
         4a:0a:9d:86:60:19:e5:12:a3:bd:18:d9:ce:67:61:63:10:81:
         8a:a6:ad:66:7c:c7:2a:0c:85:c6:20:9d:e5:6c:bb:7a:c6:f3:
         36:75:7a:fd:87:43:60:ba:03:d1:83:cf:86:27:cf:72:92:b3:
         d1:b0:40:47:95:18:f4:8a:49:d8:ff:59:77:dc:a9:2f:d1:d6:
         9c:82:11:23:40:76:1d:d8:29:0a:19:4a:b6:48:be:ce:49:59:
         54:88:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:24 2026 by rpki-client