Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File:                     lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier:          5OTDQgmZvScctCZVwDcs5rFciA/25LDumV0xpJ7veDo=
Subject key identifier:   57:6D:43:85:B5:AA:82:59:65:FE:A8:BA:BA:27:8D:CA:A3:12:67:38
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer:       /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial:       019DCC74BD349B410B3BD5E171A44F1D597D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number:          18DC
Signing time:             Mon 27 Apr 2026 01:01:35 +0000
Manifest this update:     Mon 27 Apr 2026 01:01:35 +0000
Manifest next update:     Tue 28 Apr 2026 01:01:35 +0000
Files and hashes:         1: axFCojXUhSkytCN0atEZfj9fkA8.roa (hash: I3PEkjutyOX2FwIEMplxrCsf4ez6AG70VNxYovdKhQs=)
                          2: dp2gXrpfvOMg65Z1sl0IeonKbxM.roa (hash: 8Vzr1PEVztWf+5QEVA47vH/IaL1dnxwbEHxKX7SEwVU=)
                          3: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: Xb89MKR4KQTIEAQNNK1TK/Cs5+/96Px5ydv1JmdlSlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:74:bd:34:9b:41:0b:3b:d5:e1:71:a4:4f:1d:59:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
        Validity
            Not Before: Apr 27 01:01:35 2026 GMT
            Not After : Apr 28 01:01:35 2026 GMT
        Subject: CN=576d4385b5aa825965fea8baba278dcaa3126738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:ff:00:0c:bd:a4:61:1c:34:42:24:c1:41:
                    d1:af:52:f9:da:b7:59:7f:0a:db:12:51:40:6c:1a:
                    1d:a0:3f:fe:3b:d0:24:07:58:2f:03:55:ab:36:e5:
                    df:07:1a:f2:6b:90:6b:3f:18:74:cf:fe:a7:db:c9:
                    e3:87:50:aa:19:ab:1d:5d:e4:35:2e:4c:bc:e3:a7:
                    07:54:0e:e6:d8:3c:25:33:80:ba:3e:f2:03:8a:e0:
                    cc:48:8d:56:72:f7:95:7b:53:45:21:a1:68:c0:36:
                    14:6c:93:f5:a1:c0:3f:30:ff:07:10:c6:08:d2:ef:
                    fd:5b:d9:de:03:98:ef:a0:0c:60:2d:b7:90:6a:0e:
                    b2:7f:49:fd:7f:be:48:f5:8e:dc:f1:71:58:7a:10:
                    cb:28:71:bd:0b:4e:2d:89:02:c4:70:ba:5d:b5:8f:
                    4d:a2:6e:5d:ac:1a:fc:33:96:d5:3d:fc:7e:f6:4b:
                    a2:42:12:b7:e2:3d:0a:44:08:aa:15:19:d6:14:d0:
                    5c:6f:c4:23:39:02:e2:bd:53:81:67:5e:bf:c5:14:
                    f8:78:18:80:6c:b2:8a:1f:0e:96:68:a1:79:b1:d4:
                    3e:e4:d6:08:18:b8:2b:a2:a1:cf:aa:18:1e:c5:38:
                    41:ee:be:d9:19:bc:1b:99:a6:9f:3c:67:d6:36:26:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:43:85:B5:AA:82:59:65:FE:A8:BA:BA:27:8D:CA:A3:12:67:38
            X509v3 Authority Key Identifier:
                keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:19:f5:8d:39:4c:ad:cf:3f:94:7a:3e:40:e7:56:a4:3c:
         ac:ff:aa:22:fc:94:4d:d5:69:05:c0:35:21:e6:b0:59:d1:4f:
         75:19:f1:75:16:cd:49:bd:1f:05:0c:a4:ac:71:05:8b:1f:50:
         75:07:57:b3:b0:21:a8:94:05:82:c4:b6:37:76:7e:60:3a:72:
         47:e3:fd:42:81:b9:f6:07:f7:a5:69:3f:67:47:fb:e4:54:de:
         e5:33:ec:84:47:d5:ac:28:92:78:44:9e:c4:3d:d5:81:0b:74:
         a4:da:0c:69:65:4c:72:d1:55:05:d0:74:04:3c:51:da:f7:2a:
         42:5c:fb:dc:3a:a4:71:26:ac:70:2f:fd:fe:1b:27:89:a6:63:
         54:a8:c2:0e:17:d8:e9:57:f2:a3:ba:45:27:52:c0:d7:18:e8:
         dd:e3:52:05:72:e9:56:03:66:62:52:b6:5f:e8:77:54:9b:5e:
         9e:73:b6:9c:79:18:74:56:fa:60:33:27:2c:c2:b4:63:11:2b:
         a3:1e:56:0a:8a:27:8c:b5:c8:c0:07:1f:aa:81:4c:db:f8:df:
         75:80:b1:41:ba:00:c8:62:d0:ff:28:98:8b:df:72:e8:0f:91:
         08:fc:ee:bd:51:a7:20:05:cc:90:0d:b7:e7:36:5e:6f:7a:e4:
         23:82:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:35 2026 by rpki-client