Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File:                     LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier:          DQ8w3+FbNdU9EDFP/sOkCq3ljz7I0IjNMYT68rTseFM=
Subject key identifier:   3C:14:8D:59:07:F7:0A:A8:EC:3D:54:F5:7F:4E:13:A2:78:4E:2F:D9
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer:       /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial:       019D382E9D78280556AB9BC765E0853C4B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number:          1460
Signing time:             Sun 29 Mar 2026 06:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:12 +0000
Files and hashes:         1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: YkcyXGPPqyDvMF7/90JqnCmhKI53l66o2IONDfwT8mc=)
                          2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:9d:78:28:05:56:ab:9b:c7:65:e0:85:3c:4b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
        Validity
            Not Before: Mar 29 06:01:12 2026 GMT
            Not After : Mar 30 06:01:12 2026 GMT
        Subject: CN=3c148d5907f70aa8ec3d54f57f4e13a2784e2fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:63:42:49:d6:a5:ca:dc:a2:f0:df:29:77:
                    43:29:8a:e4:cf:56:67:f2:0c:b1:c8:db:c7:9c:fd:
                    c6:c3:67:53:ce:fd:57:73:10:4d:13:d5:f3:1c:b3:
                    fe:1e:51:bc:fe:a8:35:5a:fe:53:cc:0f:ed:51:e5:
                    56:dc:72:e3:05:31:2b:74:cd:94:cc:9e:19:32:0f:
                    9d:d3:51:72:41:66:9f:de:dd:06:82:3d:71:15:4c:
                    80:5c:88:28:ee:18:f8:e6:cf:d0:ed:c0:88:1a:78:
                    1a:8f:31:50:ba:92:41:b3:cb:71:4a:5d:c6:43:0d:
                    a3:b5:6a:b0:57:0d:cb:48:cb:b3:55:c8:9a:76:df:
                    7e:33:20:ec:c8:44:cd:e7:5c:fc:03:b7:3c:b0:ce:
                    b0:54:9b:00:04:87:af:4a:e4:2b:c2:20:ae:dc:8b:
                    61:bf:dd:30:48:88:ea:30:46:f7:4d:3b:52:71:8a:
                    d9:c4:ea:b9:4c:7e:ae:16:56:1d:9c:18:82:56:c0:
                    41:79:a8:d3:71:eb:67:e3:1a:85:85:7a:05:76:91:
                    2e:60:1c:6b:33:4d:4b:fd:4f:46:28:0c:0f:7c:96:
                    37:5a:4a:6f:ca:7a:eb:5c:59:ee:ad:b5:55:6c:c3:
                    5f:a1:f0:e0:36:0c:99:6f:71:39:fb:22:37:b3:88:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:14:8D:59:07:F7:0A:A8:EC:3D:54:F5:7F:4E:13:A2:78:4E:2F:D9
            X509v3 Authority Key Identifier:
                keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:30:49:66:8e:04:28:f5:64:bd:24:b2:cc:a5:7e:17:e6:e5:
         ae:c7:66:57:6e:d0:ab:a8:79:ac:25:eb:10:b3:c9:2b:bc:9b:
         f6:13:20:db:23:0e:75:c7:77:ae:e3:9f:12:8a:7b:ec:ff:33:
         25:dd:f7:98:83:0e:e7:74:8d:85:c1:a1:9a:58:07:7d:4d:f8:
         35:12:eb:e3:74:91:f4:68:61:b3:76:cd:98:c7:81:7e:ba:63:
         1d:9a:c1:32:c8:aa:7e:44:d8:19:10:4d:f0:78:f6:34:0a:ac:
         63:03:b3:37:77:3e:0a:3a:cb:3c:f3:73:fd:71:6c:c3:8f:a6:
         09:af:08:6e:23:ad:48:a3:e7:bf:7e:d3:cd:fa:1c:77:52:93:
         95:9c:1e:c8:a9:91:e5:85:0f:52:7f:7f:7f:a5:e9:56:f4:1c:
         f6:66:2b:18:33:de:45:5c:dd:81:53:5d:9b:f4:2b:2b:8a:39:
         4c:98:77:8d:aa:2a:9d:83:53:42:44:53:11:03:8b:81:af:47:
         87:ee:4c:b9:8e:d8:1d:05:ee:a8:17:13:d7:44:b1:ac:49:87:
         4c:63:eb:6f:cb:36:d3:bc:a7:3e:2c:dc:3f:2b:16:30:09:d1:
         f9:05:a2:0c:9e:1a:11:9c:23:8c:5c:d7:ae:69:4a:f4:f4:97:
         bd:fa:65:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lp14KAVWq5vHZeCFPEtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjYwMzI5MDYwMTEyWhcNMjYwMzMwMDYwMTEyWjAzMTEwLwYDVQQD
EygzYzE0OGQ1OTA3ZjcwYWE4ZWMzZDU0ZjU3ZjRlMTNhMjc4NGUyZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzBjQknWpcrcovDfKXdDKYrkz1Zn
8gyxyNvHnP3Gw2dTzv1XcxBNE9XzHLP+HlG8/qg1Wv5TzA/tUeVW3HLjBTErdM2U
zJ4ZMg+d01FyQWaf3t0Ggj1xFUyAXIgo7hj45s/Q7cCIGngajzFQupJBs8txSl3G
Qw2jtWqwVw3LSMuzVciadt9+MyDsyETN51z8A7c8sM6wVJsABIevSuQrwiCu3Ith
v90wSIjqMEb3TTtScYrZxOq5TH6uFlYdnBiCVsBBeajTcetn4xqFhXoFdpEuYBxr
M01L/U9GKAwPfJY3WkpvynrrXFnurbVVbMNfofDgNgyZb3E5+yI3s4iR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwUjVkH9wqo7D1U9X9OE6J4Ti/ZMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjBJZo4E
KPVkvSSyzKV+F+blrsdmV27Qq6h5rCXrELPJK7yb9hMg2yMOdcd3ruOfEop77P8z
Jd33mIMO53SNhcGhmlgHfU34NRLr43SR9Ghhs3bNmMeBfrpjHZrBMsiqfkTYGRBN
8Hj2NAqsYwOzN3c+CjrLPPNz/XFsw4+mCa8IbiOtSKPnv37Tzfocd1KTlZweyKmR
5YUPUn9/f6XpVvQc9mYrGDPeRVzdgVNdm/QrK4o5TJh3jaoqnYNTQkRTEQOLga9H
h+5MuY7YHQXuqBcT10SxrEmHTGPrb8s207ynPizcPysWMAnR+QWiDJ4aEZwjjFzX
rmlK9PSXvfplRg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:48 2026 by rpki-client