Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          rRmd5YCbyuH7JFeO5gygQTrFeqmdMG2fFDx7b/fwDP4=
Subject key identifier:   D2:4D:76:90:11:C6:78:3B:94:77:19:FA:64:A2:6C:E5:0C:88:B2:FA
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       019CE47F2A6EC6F331B9E87427BB87A6F5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          17BA
Signing time:             Fri 13 Mar 2026 00:01:05 +0000
Manifest this update:     Fri 13 Mar 2026 00:01:05 +0000
Manifest next update:     Sat 14 Mar 2026 00:01:05 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: 1YSLM2UH77S0Z/nq7c80+OiFHJNLi8ZdWkWWiQSW3So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:2a:6e:c6:f3:31:b9:e8:74:27:bb:87:a6:f5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Mar 13 00:01:05 2026 GMT
            Not After : Mar 14 00:01:05 2026 GMT
        Subject: CN=d24d769011c6783b947719fa64a26ce50c88b2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:d2:07:d3:56:35:23:b6:76:5d:b5:1d:22:
                    a1:df:ee:8d:c2:8d:bc:86:5a:18:63:38:da:5f:18:
                    fc:6a:6c:84:c9:c5:56:08:9f:64:b0:54:4b:f0:a1:
                    17:9b:cb:f4:f7:a7:68:ec:11:49:86:71:a2:58:40:
                    42:c8:19:ba:97:a1:da:ac:81:6d:ef:98:8b:ac:b0:
                    69:ad:e4:6b:1f:e2:24:81:2e:9b:a7:41:25:8a:b5:
                    15:f8:bb:ee:a5:ea:a8:f0:c5:7c:26:83:4b:19:00:
                    9a:46:e2:5d:6b:e8:34:5b:19:ca:2e:e5:a7:de:0a:
                    a4:15:fc:79:13:5a:10:d4:4e:7d:64:3e:8e:a8:dd:
                    f8:16:40:82:2a:6c:41:f2:18:bf:bc:b3:a9:44:a0:
                    28:9a:d9:ec:a5:e7:52:62:83:86:3a:32:2b:7f:8b:
                    0f:6b:d8:7a:a8:44:fc:af:72:36:18:ea:e3:42:7b:
                    c6:ad:d4:29:55:13:ca:7d:fe:4b:fa:1c:70:a6:b8:
                    ad:39:2c:c0:e9:d5:1e:49:11:cc:5a:d5:a3:80:3f:
                    c2:65:73:3e:59:58:48:e0:05:23:30:6f:2b:79:6c:
                    3b:77:f1:28:5c:89:3b:71:f1:f8:d2:a0:cd:2c:f3:
                    8c:ab:98:9e:7d:27:23:48:d2:bd:47:ae:4a:57:e4:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4D:76:90:11:C6:78:3B:94:77:19:FA:64:A2:6C:E5:0C:88:B2:FA
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ca:b7:86:e9:d5:51:da:2f:68:c8:ab:74:1e:4c:32:87:8c:
         72:30:95:ec:24:78:df:f8:55:8f:fa:43:52:9d:36:7d:c4:b1:
         e5:b0:e1:f8:27:c2:db:8a:c0:8a:cc:b4:f9:f4:19:53:90:36:
         8f:a4:2b:e0:96:c7:53:fb:a0:78:3e:12:a9:0a:0a:4a:2b:89:
         2a:7d:31:5e:b4:71:19:5e:b1:3f:a5:68:6e:25:a0:08:1e:ed:
         24:e0:48:ea:4d:17:64:2e:6b:80:e3:de:fc:9f:74:38:a2:d5:
         b2:bd:ed:9b:9c:2b:29:40:e1:2c:f0:df:3b:46:a3:c0:2c:f5:
         37:6f:5d:db:41:19:d5:ce:a1:c6:f8:70:d4:27:f9:2c:35:f3:
         13:ea:b2:93:2d:7f:12:88:dd:d7:7e:6f:c6:fd:77:07:c0:e2:
         b3:04:c5:f1:f3:f6:0b:0d:ac:97:b3:8a:0e:c4:4a:6e:c5:b8:
         e9:db:21:4a:f0:be:1c:6b:f0:a8:3d:d0:a2:aa:de:52:5e:62:
         81:be:11:02:0d:07:89:b3:92:ce:a8:a6:e6:ee:e6:98:9d:53:
         b3:7f:b7:0d:7a:95:37:a0:eb:07:d4:12:a0:5b:7a:8e:f1:1d:
         db:8c:a7:52:f8:be:c6:80:4e:30:a3:81:bb:a2:34:53:8c:16:
         69:73:48:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkfypuxvMxueh0J7uHpvWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjI3NjEzNjI1NDgzMGJiNDkwN2U5OGMyNThlNDkzYjQy
YWFhM2EwHhcNMjYwMzEzMDAwMTA1WhcNMjYwMzE0MDAwMTA1WjAzMTEwLwYDVQQD
EyhkMjRkNzY5MDExYzY3ODNiOTQ3NzE5ZmE2NGEyNmNlNTBjODhiMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtznSB9NWNSO2dl21HSKh3+6Nwo28
hloYYzjaXxj8amyEycVWCJ9ksFRL8KEXm8v096do7BFJhnGiWEBCyBm6l6HarIFt
75iLrLBpreRrH+IkgS6bp0ElirUV+Lvupeqo8MV8JoNLGQCaRuJda+g0WxnKLuWn
3gqkFfx5E1oQ1E59ZD6OqN34FkCCKmxB8hi/vLOpRKAomtnspedSYoOGOjIrf4sP
a9h6qET8r3I2GOrjQnvGrdQpVRPKff5L+hxwpritOSzA6dUeSRHMWtWjgD/CZXM+
WVhI4AUjMG8reWw7d/EoXIk7cfH40qDNLPOMq5iefScjSNK9R65KV+T+1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJNdpARxng7lHcZ+mSibOUMiLL6MB8GA1UdIwQY
MBaAFC5idhNiVIMLtJB+mMJY5JO0Kqo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMt
OTNiOTE0NzAxNDcwLzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMtOTNiOTE0NzAxNDcw
LzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMq3hunV
UdovaMirdB5MMoeMcjCV7CR43/hVj/pDUp02fcSx5bDh+CfC24rAisy0+fQZU5A2
j6Qr4JbHU/ugeD4SqQoKSiuJKn0xXrRxGV6xP6VobiWgCB7tJOBI6k0XZC5rgOPe
/J90OKLVsr3tm5wrKUDhLPDfO0ajwCz1N29d20EZ1c6hxvhw1Cf5LDXzE+qyky1/
Eojd135vxv13B8DiswTF8fP2Cw2sl7OKDsRKbsW46dshSvC+HGvwqD3QoqreUl5i
gb4RAg0HibOSzqim5u7mmJ1Ts3+3DXqVN6DrB9QSoFt6jvEd24ynUvi+xoBOMKOB
u6I0U4wWaXNIHQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:12 2026 by rpki-client