Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
File:                     rlLbggkLND-J98Y3z0GpS8_UNGo.mft (raw, json)
Hash identifier:          rGyvF8OELUQz/bcv6bXLxIHUUZM758/GfJWYsH8u9V8=
Subject key identifier:   16:55:57:74:70:2D:DF:DA:AE:A5:AE:04:5E:D6:09:D7:7F:D1:45:81
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       019D3978433FF44AE14DEFCCA0640019EE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
Manifest number:          01BD
Signing time:             Sun 29 Mar 2026 12:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 12:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 12:01:15 +0000
Files and hashes:         1: 7ydENpjQareWHpO9uslcqsis6UA.roa (hash: wTeA8bx96xEJxxUYSI6aHxzjGmdwgzhbWWttVJ8dPDw=)
                          2: Da4zofv_3zQcJHV3L83VNbH7UEY.roa (hash: p+hoOJTvA0x6ON4Ggw3OE0Gfu4aJUBLpv1YI+CkSFhc=)
                          3: co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa (hash: kD/drcWwBr6x5xqwMF16Xc4LXWddRLyNIKIsPwoN+78=)
                          4: eEnkFR6pXLhlHa3K_hBPWDi1w58.roa (hash: SV4R5qDN4YbUrJOQ/Cn0+Be7TsAwFGb5aLPqwWgd988=)
                          5: rlLbggkLND-J98Y3z0GpS8_UNGo.crl (hash: x0gsaBUJeG1h6TxQiCp6WnM3fgSZP33gDos1Dq8JRfg=)
                          6: sN3nanuzELsiTRZZnMMhpzRL9CQ.roa (hash: iIsUfUIoF5P1otrI7EzZzKCaeejtCwHBloYzwegYqT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:43:3f:f4:4a:e1:4d:ef:cc:a0:64:00:19:ee:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: Mar 29 12:01:15 2026 GMT
            Not After : Mar 30 12:01:15 2026 GMT
        Subject: CN=16555774702ddfdaaea5ae045ed609d77fd14581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:60:fc:00:8d:06:23:06:18:8c:73:c4:86:
                    83:a8:fe:51:54:b7:0b:21:fa:01:ab:88:a6:7f:f6:
                    75:84:c5:69:3e:84:43:6e:f6:38:96:48:ce:9f:39:
                    cd:f8:ca:c0:e7:59:ae:7f:fe:31:fe:57:06:b2:68:
                    f4:b3:e0:76:69:b9:b7:4c:bc:25:48:e6:c9:9b:f3:
                    a1:09:79:44:66:78:a0:b6:8d:7c:fc:79:0c:b2:ce:
                    54:f9:75:57:cf:b7:96:12:84:4a:af:02:e1:2a:dd:
                    57:f8:d2:89:3a:6d:0a:b5:d3:5a:c0:47:6c:fd:6d:
                    b2:93:22:1c:d9:f1:9d:1e:28:aa:7d:2a:fc:ed:1a:
                    be:be:17:57:eb:5d:c1:81:53:95:18:57:4b:a2:6b:
                    7c:4c:7e:bc:31:7c:d8:28:35:93:dd:e8:f1:1d:46:
                    60:8a:c3:6f:12:d1:d0:19:7c:4a:61:fc:fa:cb:48:
                    94:db:bf:6f:3b:f6:90:75:cd:ed:dc:e3:27:18:6e:
                    ff:34:56:dc:ee:b9:04:87:ad:2a:0d:52:a7:af:15:
                    e6:11:8e:0a:f6:bd:e1:84:5c:8e:5c:47:b8:2f:fa:
                    7c:02:91:eb:a2:e2:8e:85:ef:19:9d:61:81:b8:d1:
                    b6:32:0e:5d:40:6c:b5:1a:55:25:c5:b0:06:df:c4:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:57:74:70:2D:DF:DA:AE:A5:AE:04:5E:D6:09:D7:7F:D1:45:81
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:ba:26:8d:e4:95:1b:c8:5d:af:d6:d0:30:10:18:f6:5b:
         ac:8f:3a:ef:fa:b0:fb:cc:88:8b:6d:9d:5b:48:89:07:7b:6f:
         5a:ba:4d:26:a7:b2:1f:ee:8b:1c:de:74:a1:6a:54:e1:0c:62:
         e0:e2:8f:4d:99:1b:b4:ba:3b:67:61:f1:3f:0a:70:6c:46:6b:
         0a:2c:05:65:63:ff:6d:79:52:04:6b:84:9d:a0:83:90:d4:c5:
         77:a5:32:50:8b:4b:25:0c:8b:23:f4:06:dc:62:53:1f:79:a5:
         41:4f:2f:0d:23:32:7b:b9:10:f5:80:a0:26:7d:8f:b3:d8:c2:
         42:c1:0b:48:5c:77:7e:91:fd:76:7e:94:28:e8:27:39:bb:52:
         76:3e:7b:82:d2:fc:63:ba:85:45:63:35:93:c4:d1:76:54:0a:
         df:c4:40:5a:21:48:78:e2:d5:be:10:e8:58:98:cb:5e:21:c2:
         89:99:d8:cf:28:0f:f7:68:72:bb:15:3b:6b:d8:b9:a0:61:a4:
         1c:fc:7f:24:9a:00:ea:cf:83:80:1f:a7:f0:28:0a:db:1b:0d:
         0e:22:f3:5b:f5:27:b3:93:0e:9c:9b:be:38:b0:0c:e3:29:2b:
         c4:73:8c:e5:d9:ed:df:d0:f7:50:42:2a:45:3b:71:7d:7b:c1:
         16:11:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:44 2026 by rpki-client