Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          KTZ/FxzR1O7uYYhOmKwsr0HTAxT5LgqkL67G1jR4Fsk=
Subject key identifier:   6A:07:28:55:60:7E:EC:94:2D:10:57:DE:4D:09:9B:24:FF:F6:96:B8
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       019DD019B008DCDAAAF105798A534502B1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          1834
Signing time:             Mon 27 Apr 2026 18:00:37 +0000
Manifest this update:     Mon 27 Apr 2026 18:00:37 +0000
Manifest next update:     Tue 28 Apr 2026 18:00:37 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: ZLdx1WZd+M0yrwdV2fHyctBz8nQDr3HdrsIWr4/7UHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:19:b0:08:dc:da:aa:f1:05:79:8a:53:45:02:b1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Apr 27 18:00:37 2026 GMT
            Not After : Apr 28 18:00:37 2026 GMT
        Subject: CN=6a072855607eec942d1057de4d099b24fff696b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:26:d9:3e:2b:15:92:20:a4:70:c6:0f:77:
                    95:c1:48:ab:1f:56:58:cf:b3:1b:be:ac:0e:17:f3:
                    56:51:95:e7:12:48:73:e9:f2:08:20:b2:bd:26:34:
                    b6:53:8b:7c:10:4f:6c:ce:ef:ff:83:61:8a:3c:aa:
                    29:1a:72:2e:70:3f:e5:17:57:92:20:98:39:35:a9:
                    64:92:7a:a6:cc:70:66:52:d9:0c:ef:0e:f3:c8:9a:
                    7d:1a:3d:10:c0:27:bd:2f:22:7c:0b:57:c9:d5:17:
                    be:ce:e3:25:a2:89:e4:b3:a3:83:f9:28:6c:26:f4:
                    ed:67:8b:a4:0f:91:69:d5:d9:d4:7e:61:5a:42:c1:
                    b6:1e:47:4f:14:d5:d8:2f:87:af:22:7f:79:9b:48:
                    ba:da:c8:1f:12:2e:74:38:bc:28:ee:89:c5:2e:44:
                    ce:c0:a6:d7:d3:49:20:de:ef:a6:ba:fa:c7:f3:d2:
                    5a:7a:36:43:39:37:4c:3a:62:f6:b1:b1:82:7f:1b:
                    5f:66:51:96:06:41:c3:44:55:0b:e9:82:17:78:a4:
                    72:5f:c1:be:ca:bd:3b:32:da:31:ca:82:90:b2:3a:
                    19:08:c7:4b:99:19:0f:76:dc:50:ef:48:b6:57:75:
                    dc:c0:4c:5c:fb:ce:2c:bb:d2:b9:fd:38:f2:e9:67:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:07:28:55:60:7E:EC:94:2D:10:57:DE:4D:09:9B:24:FF:F6:96:B8
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:39:53:bd:48:8b:4e:d6:b8:37:b2:60:61:f9:11:df:59:96:
         a5:b9:68:8f:c8:aa:7f:ad:32:a1:cc:23:ae:1d:7c:f2:07:c6:
         38:e1:d6:cc:11:99:08:30:05:db:12:41:b0:90:bb:01:62:10:
         ed:af:e8:fc:fe:9e:75:d7:e2:40:6c:5b:5b:d9:5b:fe:e8:63:
         d5:4b:78:b6:99:5d:4d:a5:d3:5b:6c:ce:a5:f1:ab:7e:bf:0e:
         4c:ac:31:3f:e1:8e:e4:5a:13:a3:97:ee:b4:1e:75:25:90:b2:
         f0:23:0d:c7:dc:da:b8:34:ad:81:b4:fe:aa:f7:ac:50:b4:8e:
         02:a2:cf:f2:0f:61:43:b1:67:2e:92:03:e8:b6:f3:0b:fd:a6:
         74:a8:13:00:87:e0:fc:cc:c4:96:59:12:d0:ae:b7:8b:6f:d1:
         02:8f:69:cd:a2:32:e9:7f:62:f0:b8:42:14:fe:78:c4:98:da:
         78:3a:1a:0b:a8:69:87:ea:6e:43:55:6c:b3:72:3e:d6:76:1c:
         5c:54:79:e8:d0:d5:66:38:35:54:79:c6:0a:25:de:c5:92:d5:
         69:33:c3:74:5e:f1:04:51:bb:ee:3b:4f:f0:de:52:70:9c:fd:
         1b:55:31:a9:ef:5c:1d:b0:50:8c:b9:27:df:df:2a:0a:d2:76:
         82:38:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:45 2026 by rpki-client