Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          l+IoASSArQX6YW3YjYT/XvUvRcPvEt9yVFLA22EtNsE=
Subject key identifier:   AE:CD:E1:16:A4:BA:37:BF:E6:3B:11:82:52:DE:45:C7:E7:6B:BB:69
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       019CC3E152B3EA41B9247411FB73636A61D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          1856
Signing time:             Fri 06 Mar 2026 16:00:49 +0000
Manifest this update:     Fri 06 Mar 2026 16:00:49 +0000
Manifest next update:     Sat 07 Mar 2026 16:00:49 +0000
Files and hashes:         1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
                          2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: Go+al3pEmNM7gR5xK0DJ0hl2gmgjFkHItW7UwZFm0e0=)
                          4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c3:e1:52:b3:ea:41:b9:24:74:11:fb:73:63:6a:61:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Mar  6 16:00:49 2026 GMT
            Not After : Mar  7 16:00:49 2026 GMT
        Subject: CN=aecde116a4ba37bfe63b118252de45c7e76bbb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:f1:fd:b8:9c:b1:5b:24:c6:58:65:0f:5c:
                    17:72:f7:4e:9b:b5:9e:d1:fd:3c:9a:0a:c3:d8:d0:
                    58:58:96:e0:55:10:a3:c0:a6:ee:7d:2b:51:ac:33:
                    6e:79:10:c2:7b:9e:9f:0e:cc:46:8b:12:1a:6b:05:
                    95:bd:ab:20:fc:5f:24:cf:8d:4b:e8:02:61:81:d8:
                    07:59:74:49:91:f5:92:ff:93:6d:1b:92:34:33:ea:
                    6a:77:a6:b2:02:48:2d:8d:60:b4:21:0b:08:c3:f5:
                    5f:de:a5:0b:f4:ea:2d:de:e6:df:4a:4d:9b:b4:10:
                    7e:b4:54:56:e4:a9:e2:c7:ff:69:4f:84:8b:79:8c:
                    89:fa:01:b8:b5:44:16:1c:1e:ce:d9:94:6c:e2:c9:
                    f6:4a:ca:28:bf:54:b4:cb:29:84:3b:74:98:3d:b4:
                    e8:22:a9:1b:72:18:b8:81:03:57:68:8e:56:27:db:
                    4a:09:c2:26:0d:b4:f4:74:db:6a:75:a6:0d:7f:96:
                    a2:12:b2:12:e2:c2:f7:3a:1d:4b:94:42:65:9f:8b:
                    5b:36:f6:45:14:20:71:16:78:ff:c1:0f:5d:cc:44:
                    20:ad:a6:c5:c6:e8:30:a6:0c:2c:79:17:60:c3:39:
                    fe:42:d0:f4:a7:e9:ce:98:e6:4c:e9:a4:05:c4:66:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:E1:16:A4:BA:37:BF:E6:3B:11:82:52:DE:45:C7:E7:6B:BB:69
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:4c:da:fe:a9:77:7e:ba:d4:09:1c:4c:a2:d6:c1:67:96:
         88:fe:ee:d6:9d:6a:76:44:4e:55:58:58:6d:a5:73:02:e4:03:
         0b:2c:f1:8f:8c:be:3f:49:5f:48:6f:46:c0:23:da:b1:15:77:
         d0:f9:8c:07:26:40:80:99:c7:d2:e0:d2:2e:2c:aa:85:58:42:
         f5:20:e7:c2:e8:bf:18:69:b8:0c:f5:65:f4:30:71:af:e0:0a:
         2b:cd:02:62:ba:2a:2c:76:75:ac:30:5d:64:94:19:11:5c:d5:
         60:ee:a5:24:55:7d:44:b1:af:06:e8:01:74:0d:6e:98:70:54:
         b8:61:2e:8f:0a:d2:54:b3:50:94:72:ef:49:f0:06:23:16:ec:
         c2:4a:07:f3:f8:41:ec:01:35:49:d0:d8:53:84:de:28:09:9f:
         9a:de:92:5b:51:c9:b4:8e:0a:ee:99:b2:a4:ac:e2:d6:bb:3d:
         45:22:8d:0a:55:d4:64:13:3d:86:d1:61:78:a8:44:8c:ce:9f:
         6e:a9:69:e4:1e:16:d9:91:44:e6:98:ae:09:ed:40:56:e4:32:
         fa:47:43:1a:17:43:fa:e0:ae:ab:0d:fb:f0:70:f8:ff:f6:1e:
         eb:cc:7e:a4:cd:d0:cf:8a:1e:b9:18:cd:b0:37:34:91:0b:43:
         df:08:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 18:21:31 2026 by rpki-client