Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File:                     lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier:          fuWOsQ+HXag0STlLGWUQM/1AFdEWaEucGGJc73JnrfM=
Subject key identifier:   AA:DC:51:0A:64:F0:68:45:51:E5:64:4C:07:24:7A:95:A2:79:56:D4
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer:       /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial:       019DD276935A4673145327D05A4ECA612DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number:          18E1
Signing time:             Tue 28 Apr 2026 05:01:19 +0000
Manifest this update:     Tue 28 Apr 2026 05:01:19 +0000
Manifest next update:     Wed 29 Apr 2026 05:01:19 +0000
Files and hashes:         1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
                          2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
                          3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: kzYBrjsqlUK8A216VQ9KjAbWC4MlzDz2OOTl1aW/wkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d2:76:93:5a:46:73:14:53:27:d0:5a:4e:ca:61:2d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
        Validity
            Not Before: Apr 28 05:01:19 2026 GMT
            Not After : Apr 29 05:01:19 2026 GMT
        Subject: CN=aadc510a64f0684551e5644c07247a95a27956d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:db:55:45:a5:d9:0b:ed:b1:27:ee:74:b9:
                    a0:2f:bf:ba:81:be:ab:27:26:a9:70:3a:c6:f7:e6:
                    f0:68:f3:46:05:45:62:6a:16:3e:20:62:f2:77:a6:
                    e6:f7:54:b2:9f:d3:51:a5:81:8b:58:7e:01:8a:06:
                    33:70:b6:02:3b:d7:d8:bf:d0:45:83:55:b4:11:36:
                    23:ec:53:c1:6c:f1:c2:67:d4:f9:ed:b8:7d:c4:d0:
                    8b:7f:bd:ac:eb:f7:5d:99:fd:8a:1b:61:5b:2c:b9:
                    fe:89:8c:70:db:61:5e:08:fd:c7:b7:a7:60:1a:91:
                    26:ab:28:cf:1a:4e:28:70:2d:00:73:a4:67:e8:76:
                    92:74:d3:f7:2c:ae:e0:d9:9b:ad:bc:91:3f:fb:29:
                    b2:b9:4b:ec:d8:dd:5c:a2:a0:07:29:8c:4f:28:3b:
                    6f:42:81:6e:21:78:93:4f:e9:48:2e:6c:4a:c2:8d:
                    3c:b4:52:e6:0b:2c:ac:d9:7c:87:82:bd:40:e6:6e:
                    ef:73:70:6e:9d:2c:41:1d:f2:d3:fe:2b:b1:b3:17:
                    75:88:9b:8b:78:ef:d1:26:ab:5d:db:19:b9:92:1b:
                    0b:34:6f:2b:90:1f:f8:1f:02:aa:56:5f:0a:87:96:
                    95:c9:73:69:f5:d5:8e:45:c4:75:a6:7e:65:66:8b:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:51:0A:64:F0:68:45:51:E5:64:4C:07:24:7A:95:A2:79:56:D4
            X509v3 Authority Key Identifier:
                keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:af:5a:13:dd:ea:40:49:2d:75:72:ea:0d:e7:f0:54:21:
         e1:52:9a:21:b9:64:c0:69:94:5c:4a:ad:f7:49:9d:31:9f:ab:
         8d:53:9c:9e:4e:e4:77:35:b8:e6:0e:a1:7b:73:d6:7b:ed:81:
         62:6b:fa:49:33:a4:0b:59:b5:36:b3:2c:b5:ab:b9:e2:8f:e4:
         9d:e5:07:98:a5:07:aa:2e:75:9f:5e:22:5b:95:69:10:30:21:
         41:3f:63:8b:5c:68:bc:ac:d1:a2:cc:7e:a7:c9:75:85:6d:fd:
         3d:73:d5:a1:f8:1d:7f:e2:36:c3:eb:fb:4e:34:83:44:d9:4f:
         e8:2c:37:61:8c:2c:13:4f:40:af:2f:d6:76:73:80:d6:2a:b9:
         c9:29:07:b0:0a:cb:e5:d4:a5:2d:18:56:37:ed:f7:a9:97:c2:
         25:fd:3f:93:f3:48:de:d7:b0:17:a6:a8:0f:ed:55:1e:cb:ac:
         97:09:ba:0e:13:8e:da:76:6c:91:06:57:a3:c1:61:46:5e:14:
         76:ea:dd:77:c9:cd:5c:d5:72:e4:ac:71:4a:81:f3:28:52:a3:
         6b:5d:ac:54:83:cc:f6:d2:1a:30:42:e5:13:4a:49:29:4d:59:
         83:d8:f1:78:f6:e4:c6:ad:11:ae:c8:39:56:56:f1:39:f6:3e:
         40:ed:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:06:44 2026 by rpki-client