Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          0nP56pl22MEC7XnUIahJglXA2YFwkG5UDgUWz7KYqpU=
Subject key identifier:   41:F8:5C:F1:AB:51:59:85:D7:1F:76:E4:F3:45:14:AC:7C:E7:F6:D5
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       019DCE2B3F75A2F33EBF87A089713B110D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          18EF
Signing time:             Mon 27 Apr 2026 09:00:33 +0000
Manifest this update:     Mon 27 Apr 2026 09:00:33 +0000
Manifest next update:     Tue 28 Apr 2026 09:00:33 +0000
Files and hashes:         1: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (hash: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M=)
                          2: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: n798vSB9haJmMZkWUXyULgmCHTZOi295D5/EziBFkn0=)
                          3: MtlNPbOiQrDPq9JzI5yqmhqIeu0.roa (hash: jVaCEGYVnh9jmEuUNesf3uuQIlhN1CzzAG7BWnlcSmA=)
                          4: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (hash: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ=)
                          5: _tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa (hash: sG2gr2VibfwBBWqITc4yDuS8f9cCBW1DEngPZoKQfNg=)
                          6: gGIqjOk7g2PlsS-LqhKTvWucpIY.roa (hash: W502vrehV9CtMQIyWcS05BwV8XiwYtXO1sMXV5IcC2E=)
                          7: q4XekdpB8TJEjFPDt8ccc_PZPoY.roa (hash: PjKWv/0KNDEM4pTyCe/55FuN+l88tsgTGIft6oTHhlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:2b:3f:75:a2:f3:3e:bf:87:a0:89:71:3b:11:0d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Apr 27 09:00:33 2026 GMT
            Not After : Apr 28 09:00:33 2026 GMT
        Subject: CN=41f85cf1ab515985d71f76e4f34514ac7ce7f6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:e8:57:2a:0a:27:b3:1c:3f:82:dc:e1:15:
                    ce:eb:0a:19:50:7f:71:46:c4:9c:db:ba:6d:6c:8c:
                    29:25:3c:8d:fa:da:5c:2f:dc:08:23:d6:fa:fd:7d:
                    9a:04:8e:4b:83:f6:a7:46:b6:0b:b6:c7:69:56:c8:
                    b6:47:65:92:2d:9c:ea:8f:31:03:d3:67:f5:5c:c8:
                    fc:87:8e:c0:d4:43:ac:ee:85:d1:ff:66:59:ad:19:
                    71:0b:b8:66:4d:f8:e0:9a:11:e7:24:40:8e:ca:e6:
                    db:6a:61:5a:59:c4:33:5a:bc:bb:2d:c5:38:36:74:
                    11:a1:fc:ae:bd:1f:8d:e2:31:dc:9f:1b:b8:ef:24:
                    0d:09:5d:fa:74:7b:03:63:01:39:4c:3d:64:3f:5f:
                    7e:8c:b7:be:b3:03:51:92:24:80:15:de:10:f7:a4:
                    44:cb:78:8f:ca:3b:b0:88:1e:ec:f9:49:33:71:f3:
                    ee:15:06:1b:ea:a5:c4:a8:a9:47:7a:b8:1b:9e:b6:
                    c6:f0:38:10:2c:a1:61:b4:c3:29:fc:3a:4b:5d:bc:
                    22:60:5d:aa:b6:c4:1a:8d:98:6b:2c:48:0a:cd:68:
                    f1:13:f8:8b:5f:fc:2a:99:a4:3e:cc:3e:d4:2a:fa:
                    66:32:6f:c8:48:31:29:38:f4:8d:eb:b0:82:0e:db:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:5C:F1:AB:51:59:85:D7:1F:76:E4:F3:45:14:AC:7C:E7:F6:D5
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:e3:c4:eb:1a:c5:ee:98:cc:1b:18:52:66:53:c8:06:fb:
         81:80:c1:63:af:f0:1b:93:01:d2:6a:51:c1:ff:8e:1b:51:cf:
         c9:c0:0a:64:ab:9d:ef:9f:16:1a:ee:c5:2f:d7:a4:9a:65:1d:
         aa:4b:bd:4c:2b:b8:11:ea:8e:07:cf:21:fa:52:e8:54:11:a1:
         f1:53:11:04:87:47:1b:22:46:6b:57:54:e9:14:bc:fd:10:a3:
         0f:21:c9:3e:8c:44:80:1c:d4:51:3a:c8:41:cd:f9:62:18:bc:
         91:10:29:29:c2:b4:36:bf:19:ed:1e:1b:46:bb:d7:81:f0:9f:
         b0:f2:36:c6:14:34:43:8c:26:82:9c:28:1f:3c:db:6d:66:73:
         0f:f6:47:ce:63:65:5e:86:1d:93:4f:15:9d:fd:cd:b1:c4:16:
         4f:0c:74:0e:8f:12:73:e0:f1:e3:f7:6d:4e:ce:0b:7e:c3:70:
         8c:23:8d:f5:a0:e0:8d:55:e5:de:b2:b0:fa:a4:fc:71:fa:21:
         7b:2d:ac:47:f0:61:9d:cc:6a:72:81:d3:3c:b2:c6:a6:56:aa:
         be:a7:14:e8:d3:40:20:48:78:62:d5:b0:0d:9e:c8:8a:2b:66:
         76:1a:75:db:f2:0d:66:67:3c:7a:b5:46:8a:81:71:51:b8:df:
         b2:de:f9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OKz91ovM+v4egiXE7EQ2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2
ZmFjOTgwHhcNMjYwNDI3MDkwMDMzWhcNMjYwNDI4MDkwMDMzWjAzMTEwLwYDVQQD
Eyg0MWY4NWNmMWFiNTE1OTg1ZDcxZjc2ZTRmMzQ1MTRhYzdjZTdmNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+HoVyoKJ7McP4Lc4RXO6woZUH9x
RsSc27ptbIwpJTyN+tpcL9wII9b6/X2aBI5Lg/anRrYLtsdpVsi2R2WSLZzqjzED
02f1XMj8h47A1EOs7oXR/2ZZrRlxC7hmTfjgmhHnJECOyubbamFaWcQzWry7LcU4
NnQRofyuvR+N4jHcnxu47yQNCV36dHsDYwE5TD1kP19+jLe+swNRkiSAFd4Q96RE
y3iPyjuwiB7s+UkzcfPuFQYb6qXEqKlHergbnrbG8DgQLKFhtMMp/DpLXbwiYF2q
tsQajZhrLEgKzWjxE/iLX/wqmaQ+zD7UKvpmMm/ISDEpOPSN67CCDtuvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH4XPGrUVmF1x925PNFFKx85/bVMB8GA1UdIwQY
MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt
N2Y5NzBhM2FmOWNkLzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk
LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzHjxOsa
xe6YzBsYUmZTyAb7gYDBY6/wG5MB0mpRwf+OG1HPycAKZKud758WGu7FL9ekmmUd
qku9TCu4EeqOB88h+lLoVBGh8VMRBIdHGyJGa1dU6RS8/RCjDyHJPoxEgBzUUTrI
Qc35Yhi8kRApKcK0Nr8Z7R4bRrvXgfCfsPI2xhQ0Q4wmgpwoHzzbbWZzD/ZHzmNl
XoYdk08Vnf3NscQWTwx0Do8Sc+Dx4/dtTs4LfsNwjCON9aDgjVXl3rKw+qT8cfoh
ey2sR/BhncxqcoHTPLLGplaqvqcU6NNAIEh4YtWwDZ7Iiitmdhp12/INZmc8erVG
ioFxUbjfst75xw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:25 2026 by rpki-client