Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File:                     L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier:          Oha+EGpI3MBwWwqxNKgkADPUQ2iQQ7B2wR7YgG54VQo=
Subject key identifier:   84:7E:67:30:BF:E6:E2:1B:E8:6E:34:C3:89:12:BB:46:CB:DD:55:83
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       019E002B3C6CB2C824DE08916ADB77884F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number:          18F6
Signing time:             Thu 07 May 2026 02:01:33 +0000
Manifest this update:     Thu 07 May 2026 02:01:33 +0000
Manifest next update:     Fri 08 May 2026 02:01:33 +0000
Files and hashes:         1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: f80uooPfQ9wKJ800/pIcAKVerZo2Ol7XwpPZQs2W9QM=)
                          2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:00:2b:3c:6c:b2:c8:24:de:08:91:6a:db:77:88:4f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: May  7 02:01:33 2026 GMT
            Not After : May  8 02:01:33 2026 GMT
        Subject: CN=847e6730bfe6e21be86e34c38912bb46cbdd5583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:8d:7f:5d:ae:aa:c7:ae:f6:ef:16:40:07:
                    1f:c0:d8:ad:12:2b:54:c1:1e:d0:a2:d8:94:d4:3a:
                    45:d4:07:c9:a9:3b:a1:b9:86:b0:0c:ef:1f:c3:09:
                    7c:27:22:50:8d:78:f9:23:f0:ed:71:6c:db:6a:2a:
                    1f:26:51:40:b6:41:d1:cc:5a:f5:c9:fc:14:82:1e:
                    9b:81:eb:07:b7:0a:bc:f8:77:dc:c4:bb:b3:11:42:
                    12:bd:05:8a:b9:1b:2a:51:39:4f:58:bb:3e:b9:f7:
                    af:77:62:b5:0d:02:a2:fc:28:14:47:f7:90:25:26:
                    91:cb:d6:c8:c0:db:0a:d5:3d:d8:22:57:ea:16:5f:
                    f7:94:33:00:63:fb:f4:c9:2f:3e:d0:01:e2:44:ef:
                    49:aa:0a:4b:12:45:c5:77:f8:58:0c:03:9a:c4:15:
                    1d:23:bb:b5:20:64:83:97:29:7a:71:01:2e:51:e7:
                    a0:da:0b:fe:31:2d:ab:17:50:6f:e9:6d:02:55:6d:
                    58:f6:59:e2:10:34:ba:f0:85:04:80:78:ae:0d:82:
                    bd:d1:cc:6c:e0:c1:d7:f7:c7:51:64:13:e2:8f:cb:
                    fc:2e:ef:39:47:e5:87:57:6a:98:f2:46:3c:e2:38:
                    35:57:a3:c7:be:d7:c1:bd:2e:e1:08:ec:e5:f4:05:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:67:30:BF:E6:E2:1B:E8:6E:34:C3:89:12:BB:46:CB:DD:55:83
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:b5:42:d8:da:ef:79:48:7e:d2:76:37:d0:b7:ae:13:6b:
         2e:d1:3a:a1:38:aa:22:be:6b:ed:fa:6a:6e:42:10:ba:d6:cf:
         86:8d:5d:45:ce:57:8c:27:fd:2e:e2:85:a6:fe:c2:a2:c4:36:
         0b:35:dd:5d:09:3c:1f:b0:05:5e:56:d2:35:1d:84:8c:99:e5:
         9c:d2:fe:05:51:3f:4a:13:cb:38:a2:c2:f3:c1:76:b3:1c:cf:
         e4:2e:ec:28:45:10:11:59:6e:bf:cf:73:ee:fe:c1:59:7a:1c:
         78:a2:57:ef:12:ff:0e:57:49:41:44:b8:80:61:b6:ab:f0:42:
         75:5d:e7:1b:2e:7c:5f:bc:a6:5a:f9:06:83:d0:4c:19:06:ba:
         d0:c5:62:a2:13:7e:4d:89:a2:93:7c:9e:f5:86:fc:d6:68:ea:
         f3:4e:5d:bc:46:a4:a0:dd:1d:1d:5e:8b:8b:51:30:da:19:bc:
         98:6e:97:62:19:dd:a5:97:e4:58:c6:a3:3b:e1:d9:94:d3:be:
         60:08:31:39:7e:70:97:6c:da:f2:99:92:63:d0:f0:21:45:41:
         7f:dc:72:76:6a:a7:55:b0:c8:4f:8d:9d:fc:27:87:78:a3:24:
         b2:57:6b:0a:5b:da:61:c7:b9:d4:15:4f:17:f3:9e:7b:61:7f:
         66:e7:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:30 2026 by rpki-client