Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File:                     LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier:          JsQG2QCBWrI6iq6kFkE/H25pXIKD/aBUSXOG1lhAaKQ=
Subject key identifier:   41:89:49:C6:33:FD:84:66:81:12:E6:8D:EB:7C:D3:88:4E:A9:AE:6D
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer:       /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial:       019DCE999EA601B28453B2BF1DCF1978EF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number:          18DE
Signing time:             Mon 27 Apr 2026 11:01:07 +0000
Manifest this update:     Mon 27 Apr 2026 11:01:07 +0000
Manifest next update:     Tue 28 Apr 2026 11:01:07 +0000
Files and hashes:         1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: /J3LNj2k2JQzdS/Se/FovsctYLGm1Ey4sRW5UcaToPc=)
                          2: z82FEt3pcMufgW4WCxzJHceETKc.roa (hash: 5ZwxV3wn8Z4Xkli1EfsKloCex1LXSENEzKtm05iJtlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:9e:a6:01:b2:84:53:b2:bf:1d:cf:19:78:ef:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
        Validity
            Not Before: Apr 27 11:01:07 2026 GMT
            Not After : Apr 28 11:01:07 2026 GMT
        Subject: CN=418949c633fd84668112e68deb7cd3884ea9ae6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:2a:6b:0b:a8:54:07:67:fa:f9:c7:4f:c8:
                    ee:ca:e8:f4:53:7c:ae:64:11:5f:eb:01:b3:28:c6:
                    c9:b5:98:2c:e5:f4:1d:2f:ce:03:59:0e:70:39:82:
                    38:8e:2f:12:c4:5d:bf:37:8f:a3:f7:25:42:21:22:
                    0b:98:c4:f1:f1:b1:c0:4a:e2:53:27:16:4a:83:a5:
                    63:9c:87:e3:61:eb:ef:5a:6b:a5:98:80:5d:44:27:
                    23:ab:a6:98:ee:58:10:39:83:eb:1d:e1:b2:19:27:
                    e8:c1:c0:e6:e3:02:77:ac:8f:e5:bd:d9:8f:fb:8f:
                    c3:58:37:05:6f:e4:6a:21:9e:6e:7c:7f:85:3b:63:
                    76:92:a4:4f:a8:12:a7:f0:30:4f:3c:38:81:fc:12:
                    2b:73:1c:4a:7d:d9:70:a6:d2:17:81:88:0a:b8:2c:
                    9d:ef:e1:11:30:d3:89:d6:72:cb:93:42:db:79:b8:
                    39:61:77:2a:ea:a2:e4:87:14:43:89:91:b0:75:5f:
                    0c:62:90:08:4c:5f:d8:62:05:a1:8e:dd:e1:c2:26:
                    4e:d2:16:03:cb:5a:88:e9:65:73:4a:9f:af:d1:44:
                    55:91:64:04:3a:09:b8:55:9d:c3:42:fa:76:f2:48:
                    58:c6:09:1b:e8:82:72:8e:e7:0c:56:4e:92:b7:33:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:49:C6:33:FD:84:66:81:12:E6:8D:EB:7C:D3:88:4E:A9:AE:6D
            X509v3 Authority Key Identifier:
                keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c0:05:4c:58:66:21:18:cf:c9:43:8f:d8:b9:8a:96:3d:6a:
         28:68:38:dc:d7:ee:25:25:43:06:6c:09:fa:4e:ff:39:ef:73:
         39:a1:34:37:fc:72:3d:b4:35:3c:a5:3d:98:cc:de:c1:dd:25:
         db:fd:63:9a:68:e1:2b:df:c6:0f:8e:11:3b:7b:8f:5f:19:72:
         59:e0:09:8c:b6:20:41:9e:9d:f5:f9:0a:68:ad:8d:64:a4:70:
         18:85:0a:29:4d:3d:77:44:b3:94:23:95:a4:f2:4c:28:f8:4f:
         fa:f8:29:d4:ce:1d:d5:18:3f:60:ea:73:8a:ee:b2:75:09:9d:
         25:d5:9d:e9:16:74:76:24:c7:40:8e:6b:eb:b2:32:fc:d0:58:
         f6:98:2a:af:6e:ac:2e:e5:6d:d7:8d:9b:d7:b0:a9:5d:aa:c8:
         1a:02:89:44:70:c9:98:01:da:80:28:72:7b:8c:4a:8f:ea:81:
         21:e3:36:dc:86:ce:1a:10:75:24:c8:dc:6b:ea:d9:49:aa:78:
         3f:3a:8e:1e:54:87:93:31:3e:68:cb:1e:99:da:2e:68:dd:ac:
         e4:1f:3a:b1:3f:15:29:44:ba:56:72:e5:8b:78:05:aa:26:44:
         62:21:b7:4f:cf:6f:c2:a3:dc:be:82:9a:0e:68:36:7e:c4:34:
         50:0c:79:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmZ6mAbKEU7K/Hc8ZeO86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1
YWFjMTgwHhcNMjYwNDI3MTEwMTA3WhcNMjYwNDI4MTEwMTA3WjAzMTEwLwYDVQQD
Eyg0MTg5NDljNjMzZmQ4NDY2ODExMmU2OGRlYjdjZDM4ODRlYTlhZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGYqawuoVAdn+vnHT8juyuj0U3yu
ZBFf6wGzKMbJtZgs5fQdL84DWQ5wOYI4ji8SxF2/N4+j9yVCISILmMTx8bHASuJT
JxZKg6VjnIfjYevvWmulmIBdRCcjq6aY7lgQOYPrHeGyGSfowcDm4wJ3rI/lvdmP
+4/DWDcFb+RqIZ5ufH+FO2N2kqRPqBKn8DBPPDiB/BIrcxxKfdlwptIXgYgKuCyd
7+ERMNOJ1nLLk0Lbebg5YXcq6qLkhxRDiZGwdV8MYpAITF/YYgWhjt3hwiZO0hYD
y1qI6WVzSp+v0URVkWQEOgm4VZ3DQvp28khYxgkb6IJyjucMVk6StzOvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGJScYz/YRmgRLmjet804hOqa5tMB8GA1UdIwQY
MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt
ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1
LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsAFTFhm
IRjPyUOP2LmKlj1qKGg43NfuJSVDBmwJ+k7/Oe9zOaE0N/xyPbQ1PKU9mMzewd0l
2/1jmmjhK9/GD44RO3uPXxlyWeAJjLYgQZ6d9fkKaK2NZKRwGIUKKU09d0SzlCOV
pPJMKPhP+vgp1M4d1Rg/YOpziu6ydQmdJdWd6RZ0diTHQI5r67Iy/NBY9pgqr26s
LuVt142b17CpXarIGgKJRHDJmAHagChye4xKj+qBIeM23IbOGhB1JMjca+rZSap4
PzqOHlSHkzE+aMsemdouaN2s5B86sT8VKUS6VnLli3gFqiZEYiG3T89vwqPcvoKa
Dmg2fsQ0UAx5wQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:00 2026 by rpki-client