Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          Fdrmiay+fDVfCH6ETDYvj1fdNiHXehCTBjnNrEau9so=
Subject key identifier:   D0:80:04:0D:75:E2:6D:B1:44:08:2A:B5:CB:11:63:FC:14:87:2D:06
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       019E311764B8B26BF03A80762E135C88F130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          105A
Signing time:             Sat 16 May 2026 14:01:17 +0000
Manifest this update:     Sat 16 May 2026 14:01:17 +0000
Manifest next update:     Sun 17 May 2026 14:01:17 +0000
Files and hashes:         1: hpL47SCSZrlNealKIc7LnC9PZp0.roa (hash: aYpQwmMiUXEwJ5X39H8U0kkfHeCdBOKpUZxQ3nISq/k=)
                          2: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: Ee2A9Xuaqxkt+15BFFTo1FTvGOiRAG0QSl7hthpR3/M=)
                          3: pw0RXXsD6LUrqOPEq8MgqL2qpD0.roa (hash: 917pV46CquJ4To8++B0OiVsGyf2fknUas8X+vyjzrnQ=)
                          4: uW3Eqs7Ri1lpnJVP-zAoNcXwTHM.roa (hash: /f9zR5HqJoOd5VfNKyewt9lLgfvwRHYV5D7mc7m8SfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:64:b8:b2:6b:f0:3a:80:76:2e:13:5c:88:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: May 16 14:01:17 2026 GMT
            Not After : May 17 14:01:17 2026 GMT
        Subject: CN=d080040d75e26db144082ab5cb1163fc14872d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:64:f6:89:9d:08:a0:f6:72:63:42:99:fa:
                    d2:49:b6:e0:9b:44:ed:a6:26:0d:e4:62:24:1c:a6:
                    5c:cf:6b:d1:c6:da:d6:cb:e7:89:ec:18:0c:92:79:
                    68:20:54:f4:a0:bc:7d:e1:77:9e:e4:14:25:6a:89:
                    2f:bc:93:47:d5:ad:36:a9:f4:15:db:9d:23:4c:ff:
                    8a:c9:9f:7f:42:1f:84:51:3a:00:ba:a9:55:98:e9:
                    9a:12:bf:3d:d2:f3:53:d7:e8:61:01:a1:b3:d9:67:
                    cd:dd:fc:a1:6d:8b:2d:24:71:ba:00:bd:f9:4a:22:
                    02:4b:24:99:37:a0:04:37:fe:4b:67:47:e0:9a:71:
                    a6:09:df:5f:55:cf:0d:2c:b3:21:94:88:51:cc:0c:
                    6d:21:4e:b7:d9:39:58:2a:41:11:09:51:93:d5:87:
                    e8:bf:85:e2:ca:70:57:9c:19:8c:19:71:3a:c6:80:
                    81:05:6e:82:af:4a:32:6c:ef:47:9f:28:cc:77:1e:
                    ba:63:fa:df:37:e7:6b:82:37:a0:85:60:3d:cf:2d:
                    03:78:35:f3:3c:73:f6:ee:4d:0a:d6:9c:71:79:bb:
                    f7:7f:9b:07:a9:6f:c3:74:8f:05:37:55:6a:34:1a:
                    42:69:89:e4:52:69:eb:3d:9e:6b:2d:eb:39:60:a6:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:04:0D:75:E2:6D:B1:44:08:2A:B5:CB:11:63:FC:14:87:2D:06
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:29:18:69:2f:45:80:d1:66:72:98:f2:38:3c:98:17:7c:
         19:8a:78:91:65:47:5e:71:da:a9:37:3f:0f:de:35:f4:a9:97:
         aa:b3:10:cf:ab:e8:59:53:bd:ea:7b:56:45:6b:ce:5d:fd:19:
         12:08:38:b6:b8:0b:af:c6:c9:fb:6a:5f:ed:d5:72:8c:ef:e8:
         51:ec:51:49:61:20:c1:5d:b8:ea:11:de:a9:c7:c4:4d:ba:e9:
         9c:b1:48:19:78:40:d8:cf:76:ee:bb:a1:7b:c9:7b:93:5f:db:
         97:9d:9b:5d:c0:b9:45:8b:eb:81:e0:ce:2f:0a:ab:7b:a6:5d:
         03:83:a8:91:fc:7d:9b:e0:f1:de:b3:82:d2:76:9f:0b:9c:5f:
         1c:22:fc:4b:90:63:6b:65:cd:04:f0:34:a0:01:2a:58:f6:84:
         d8:02:a1:aa:88:10:2b:85:85:ab:3b:a7:2a:f3:dc:98:98:ce:
         67:68:ec:fa:07:3c:ea:d5:24:e2:81:fe:11:5e:22:0b:d7:c6:
         18:4c:f5:b1:94:1a:ef:c2:da:4b:03:fe:ed:73:51:97:f8:37:
         83:27:44:3f:ac:fc:f2:c2:0f:84:f4:73:21:dd:b5:c8:c3:d3:
         f5:14:9e:ec:43:1f:50:c7:e9:54:ea:ed:26:4f:9b:88:ef:73:
         34:01:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:48 2026 by rpki-client