Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File:                     LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier:          WhM8AdRyUStTVmvozR++WjnhiAnQVmQpG9BYOY/yv+U=
Subject key identifier:   56:61:D0:AE:A0:5C:5A:3E:C8:05:D3:39:DA:D3:33:04:50:04:F4:AD
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer:       /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial:       019E31F3635013020AB412D0EC9EB0D72D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number:          02AE
Signing time:             Sat 16 May 2026 18:01:34 +0000
Manifest this update:     Sat 16 May 2026 18:01:34 +0000
Manifest next update:     Sun 17 May 2026 18:01:34 +0000
Files and hashes:         1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: TJ0EnM10Gc7tXv0L4qPxUmuWts3KH2MYy5Z9djt7Ans=)
                          2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 18:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:63:50:13:02:0a:b4:12:d0:ec:9e:b0:d7:2d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
        Validity
            Not Before: May 16 18:01:34 2026 GMT
            Not After : May 17 18:01:34 2026 GMT
        Subject: CN=5661d0aea05c5a3ec805d339dad333045004f4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:28:e8:ae:e1:53:82:c2:2a:1b:7f:fc:e3:
                    e2:b4:47:b3:fd:9d:76:c6:c6:7d:63:63:56:67:23:
                    21:f0:40:e0:9e:91:cb:32:8f:b6:f7:4d:5c:12:6f:
                    1c:e7:d2:a4:8d:35:d5:72:ca:7e:2e:99:a6:c9:e3:
                    52:87:14:3b:f5:99:f6:7e:38:87:8a:0a:53:a2:0d:
                    f9:40:a9:d8:2d:78:d0:4b:46:e6:84:5b:62:a2:14:
                    b7:99:2b:38:8c:e4:56:71:60:6c:e5:ac:92:f8:e6:
                    32:bf:42:53:5a:3b:ca:f0:5c:98:f7:40:95:4d:b2:
                    6c:db:b3:3d:fd:aa:bb:b6:a0:85:c3:55:45:1d:44:
                    a1:25:58:58:1d:bf:e1:2d:f0:8c:3a:82:4f:0c:45:
                    3e:6b:c4:78:86:59:fd:ae:16:83:21:6f:9a:c1:ea:
                    22:81:0e:ac:59:34:68:b0:f1:84:08:12:f9:52:4b:
                    90:af:54:fa:66:7b:b7:b5:52:9f:e9:39:10:9d:d6:
                    02:4e:7d:84:13:27:0b:e4:f3:60:b5:6b:d1:c4:db:
                    14:9c:93:f2:b7:a9:7f:8e:a2:28:74:8c:b4:ee:76:
                    ec:20:0e:2a:29:1c:59:24:14:72:86:09:90:ef:a9:
                    3a:23:b4:34:fd:aa:62:d4:21:ee:73:f0:27:cd:bd:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:D0:AE:A0:5C:5A:3E:C8:05:D3:39:DA:D3:33:04:50:04:F4:AD
            X509v3 Authority Key Identifier:
                keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:41:cf:ed:ee:dc:44:51:54:85:9f:55:ab:71:27:74:81:
         d9:c2:91:6f:07:1e:b2:f0:0a:2c:06:e4:27:d5:45:e3:41:27:
         08:0e:7e:6c:c5:08:2c:35:a1:5d:a3:b1:8f:f7:f3:9a:b7:a2:
         f1:e6:4b:bb:35:73:d2:9d:81:0f:48:63:0f:5c:54:e4:25:ac:
         2a:7d:c1:0d:ed:f6:89:3d:62:36:60:b0:cb:bd:05:40:9a:71:
         50:3f:74:b8:b8:47:2f:47:46:ff:92:ce:16:2e:29:a7:fa:75:
         85:33:a1:83:4a:30:2f:55:fb:64:19:af:7d:6e:06:40:6e:29:
         14:16:f4:f0:aa:8d:f0:c0:58:4d:6d:5b:8b:d5:68:be:fc:98:
         48:48:33:48:66:3e:c4:f7:ee:ec:49:cb:7e:f6:fc:54:fa:2b:
         0f:3e:67:ac:d4:11:85:2c:b2:59:4e:1b:39:b2:01:34:c6:85:
         1a:80:32:c0:f1:6c:ea:15:10:af:06:7c:04:52:83:0d:8f:23:
         92:c0:7d:0b:1c:62:23:0f:fd:3f:87:8a:3f:f6:ba:57:12:8f:
         a8:7d:71:09:ac:5e:84:28:0f:0c:88:9f:ea:e7:01:75:24:98:
         b7:9e:97:04:30:a5:e4:1d:35:ab:33:ba:0d:0c:11:d3:b8:6c:
         fa:71:01:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x82NQEwIKtBLQ7J6w1y17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDQwODdhMzcyN2YwNDdlMDk2ZGI2OTJlMDAzZDZjMDEx
M2YxZTIwHhcNMjYwNTE2MTgwMTM0WhcNMjYwNTE3MTgwMTM0WjAzMTEwLwYDVQQD
Eyg1NjYxZDBhZWEwNWM1YTNlYzgwNWQzMzlkYWQzMzMwNDUwMDRmNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ8o6K7hU4LCKht//OPitEez/Z12
xsZ9Y2NWZyMh8EDgnpHLMo+2901cEm8c59KkjTXVcsp+LpmmyeNShxQ79Zn2fjiH
igpTog35QKnYLXjQS0bmhFtiohS3mSs4jORWcWBs5ayS+OYyv0JTWjvK8FyY90CV
TbJs27M9/aq7tqCFw1VFHUShJVhYHb/hLfCMOoJPDEU+a8R4hln9rhaDIW+aweoi
gQ6sWTRosPGECBL5UkuQr1T6Znu3tVKf6TkQndYCTn2EEycL5PNgtWvRxNsUnJPy
t6l/jqIodIy07nbsIA4qKRxZJBRyhgmQ76k6I7Q0/api1CHuc/Anzb00GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZh0K6gXFo+yAXTOdrTMwRQBPStMB8GA1UdIwQY
MBaAFC7UCHo3J/BH4JbbaS4APWwBE/HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzIt
Y2M4NGViNDJhYzM5LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzItY2M4NGViNDJhYzM5
LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNhBz+3u
3ERRVIWfVatxJ3SB2cKRbwcesvAKLAbkJ9VF40EnCA5+bMUILDWhXaOxj/fzmrei
8eZLuzVz0p2BD0hjD1xU5CWsKn3BDe32iT1iNmCwy70FQJpxUD90uLhHL0dG/5LO
Fi4pp/p1hTOhg0owL1X7ZBmvfW4GQG4pFBb08KqN8MBYTW1bi9VovvyYSEgzSGY+
xPfu7EnLfvb8VPorDz5nrNQRhSyyWU4bObIBNMaFGoAywPFs6hUQrwZ8BFKDDY8j
ksB9CxxiIw/9P4eKP/a6VxKPqH1xCaxehCgPDIif6ucBdSSYt56XBDCl5B01qzO6
DQwR07hs+nEBwQ==
-----END CERTIFICATE-----
Generated at Sun May 17 03:33:27 2026 by rpki-client