Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
File:                     lh80Y53Jb_GEYziBzXBzrjGf4to.mft (raw, json)
Hash identifier:          43t2xk3GpiP28Gd7ep0pLi1x2qx/SDNdRxB0BhTHE28=
Subject key identifier:   34:45:95:44:17:06:97:5C:69:F4:FB:BC:25:F4:F3:81:29:B4:22:29
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Certificate issuer:       /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial:       019E2881B50639E5C730A95FB69A9129D8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
Manifest number:          9E
Signing time:             Thu 14 May 2026 22:00:49 +0000
Manifest this update:     Thu 14 May 2026 22:00:49 +0000
Manifest next update:     Fri 15 May 2026 22:00:49 +0000
Files and hashes:         1: kjCR_bdCRqh1misX4Uz-yIyS1po.asa (hash: 82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=)
                          2: lh80Y53Jb_GEYziBzXBzrjGf4to.crl (hash: SAgJJu/7XI+wBdkRQVAx3sc97MaxW9+208hLkFMkeuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:b5:06:39:e5:c7:30:a9:5f:b6:9a:91:29:d8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
        Validity
            Not Before: May 14 22:00:49 2026 GMT
            Not After : May 15 22:00:49 2026 GMT
        Subject: CN=344595441706975c69f4fbbc25f4f38129b42229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:3a:94:bc:73:f3:83:83:42:7d:1c:db:40:
                    f1:d6:74:ec:98:6d:85:44:1f:da:70:b1:ea:84:d0:
                    55:5b:e7:76:c7:cf:c1:fa:40:82:70:41:9a:f7:0a:
                    f5:9c:30:6d:ac:69:e1:83:2c:52:36:cf:bc:cb:cd:
                    b9:11:95:1d:71:4e:27:12:f6:bd:f9:61:af:be:f8:
                    5b:e7:cc:40:e7:62:bd:21:fb:bd:c3:28:c2:05:50:
                    e6:2e:29:52:f2:6b:51:15:c8:4f:2d:b9:25:ba:17:
                    31:f0:1d:ed:67:a6:2b:de:6a:e7:cb:0e:3e:ce:8b:
                    63:0b:a5:91:c7:81:9a:2d:21:f7:be:ff:99:98:24:
                    04:31:77:87:bc:98:6c:be:e7:da:70:7f:ed:6d:69:
                    9c:3a:d2:28:24:69:87:31:7f:91:46:91:91:55:07:
                    91:51:0d:dc:f5:50:53:7f:07:b8:4a:c6:2e:e8:e5:
                    d5:87:2c:e3:54:99:77:60:16:e4:b0:cc:cc:2b:7c:
                    8b:0b:7f:9a:be:69:06:6f:c9:e4:fb:cf:34:3a:0c:
                    0c:63:bd:6e:b0:8f:63:54:72:e6:eb:2d:d5:44:58:
                    b5:0c:2b:01:29:46:60:4b:d7:a0:0c:d8:64:8c:b1:
                    55:16:d4:ba:dd:ae:40:ea:dd:4a:12:b2:89:b4:87:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:95:44:17:06:97:5C:69:F4:FB:BC:25:F4:F3:81:29:B4:22:29
            X509v3 Authority Key Identifier:
                keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:49:15:0a:13:d2:28:84:87:d0:55:bd:7a:d0:5a:8b:4c:7b:
         de:bd:01:6e:74:25:8f:77:4c:5e:fd:f6:11:f5:b8:8c:19:e5:
         e2:54:5b:34:54:8d:eb:5d:4c:e0:f5:0c:dc:ad:c4:26:87:d5:
         63:45:1e:e2:86:0e:94:1f:b4:5e:d5:e7:7f:95:fe:19:4e:c5:
         36:bf:4a:e5:83:8c:47:59:1c:02:06:83:c3:ad:d1:fe:83:f9:
         93:ab:b7:3d:a4:93:55:81:4e:9a:12:59:80:e9:19:cb:c3:d7:
         f9:65:74:d4:f5:52:58:e6:d0:3b:17:79:9e:3a:da:8c:97:80:
         6a:02:69:ab:cc:70:e0:06:6f:24:b3:2b:fc:89:ff:6c:d3:06:
         fa:98:04:5f:40:f0:2d:cb:62:87:30:26:f5:ee:79:be:32:ef:
         e2:93:26:36:10:99:f8:9d:1a:11:f0:89:2a:06:17:75:30:db:
         4b:06:e2:c5:fa:02:1c:b8:35:f5:07:ac:b4:a7:da:3b:ff:c6:
         4c:7b:02:10:12:c2:97:ce:40:3b:eb:c8:77:55:1d:91:5f:36:
         54:52:9a:cd:cb:cc:64:72:31:f4:a3:2d:83:62:44:c3:a1:3d:
         85:06:f9:54:05:f3:6d:4e:3c:70:29:e4:d5:db:11:37:69:b0:
         77:bf:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:21:13 2026 by rpki-client