Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          imVE2/rJxnF6Q6xJcs3XZmG+J9CoSN66TOIZEqRUSS4=
Subject key identifier:   CE:D6:E5:65:8A:EF:62:73:C4:33:9E:A0:F0:47:99:28:01:F1:AB:F0
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       019E916F75831C9F674498D237BAF91909BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          1945
Signing time:             Thu 04 Jun 2026 07:01:01 +0000
Manifest this update:     Thu 04 Jun 2026 07:01:01 +0000
Manifest next update:     Fri 05 Jun 2026 07:01:01 +0000
Files and hashes:         1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
                          2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: Mi+JMibeuDuTqqtIKoVkCsABvNIcgpGgOW5ph+erJBQ=)
                          4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:6f:75:83:1c:9f:67:44:98:d2:37:ba:f9:19:09:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Jun  4 07:01:01 2026 GMT
            Not After : Jun  5 07:01:01 2026 GMT
        Subject: CN=ced6e5658aef6273c4339ea0f047992801f1abf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:8a:bd:1c:fc:b0:fa:77:f5:27:28:de:5f:
                    37:ed:3c:21:83:03:a8:52:fa:1f:d8:3c:9e:b3:84:
                    0e:d0:19:bb:83:13:4a:a1:14:73:18:55:bf:ad:b1:
                    f4:3a:ba:d9:21:d3:cf:33:85:68:92:be:d9:81:a2:
                    f5:53:4e:d3:17:a1:fb:02:2f:04:ab:4c:8b:51:1c:
                    87:c1:e2:fe:e7:97:cc:6c:7e:2f:be:7b:7c:82:aa:
                    1a:24:1b:fb:5c:5e:82:06:f0:56:41:b7:8c:d5:36:
                    1d:33:22:9f:43:a6:b5:b3:0b:37:f2:d7:e2:38:fe:
                    2a:c7:d5:88:e5:b8:54:1d:f3:9d:91:74:98:bb:39:
                    08:13:1b:f9:c0:39:07:0b:86:f8:ec:b9:38:9f:3a:
                    85:52:cc:04:00:fc:ad:f3:53:16:0f:1b:3d:34:d8:
                    35:1f:7b:13:ae:34:1b:2e:c0:77:d7:57:0b:e1:4a:
                    eb:fc:ae:be:32:0e:1d:09:0f:d9:c7:4a:a8:10:d8:
                    ca:fd:b2:a8:3c:40:0d:8b:a8:01:aa:79:56:2a:a0:
                    e9:4a:6b:cd:20:9a:30:db:7a:7e:cc:20:6a:dc:36:
                    91:49:1d:db:0f:82:40:60:d3:89:3e:15:2d:c0:8e:
                    81:66:78:04:11:53:ff:d8:11:07:75:e6:f1:b6:bb:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D6:E5:65:8A:EF:62:73:C4:33:9E:A0:F0:47:99:28:01:F1:AB:F0
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ff:a8:77:3d:60:e6:7c:a3:ae:e5:7f:2e:48:ab:a1:75:64:
         92:d6:d4:80:0c:b9:52:89:82:27:bf:c6:49:f6:34:f4:ae:08:
         17:34:43:8a:a5:f8:1c:60:48:67:8b:c9:8f:95:c8:27:71:f2:
         ac:68:a1:e1:a2:56:2d:57:2e:3b:63:b4:d1:44:df:df:61:83:
         2c:21:1e:ff:e0:32:cd:f2:8c:b6:94:bd:bf:d7:44:cc:a0:70:
         3e:b9:0e:05:ff:c8:31:b6:36:ae:d4:56:90:9b:21:b9:6f:b8:
         83:2e:63:1b:cb:4e:0d:85:f2:9c:2f:43:70:c7:6d:3a:f8:4d:
         3c:36:3d:f0:e9:42:03:ec:25:09:ab:d6:b5:d9:4a:13:22:9f:
         d1:38:3c:75:0e:6e:12:0d:db:04:c6:75:b7:11:5d:ad:e0:0e:
         44:39:1b:51:1d:f8:97:15:46:6a:34:90:91:34:1d:33:5c:f3:
         3f:64:9a:c0:cf:ac:cf:38:cd:11:32:8b:5e:63:d7:96:4e:34:
         11:f8:0c:cc:e4:dd:5e:ff:92:fb:07:c8:6e:e8:9d:96:03:98:
         f8:5e:3d:61:79:c2:ed:e6:75:9e:06:1f:05:43:a9:06:ec:fc:
         91:79:e3:e2:54:56:46:0a:03:df:94:c2:b2:40:38:89:78:ac:
         68:2a:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:02:04 2026 by rpki-client