Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          CvLLDy/4dsNDs4kWY0xLfeT9yv86ijj6Q2h6DlhHeFE=
Subject key identifier:   B2:D0:FC:5B:64:D2:07:CB:88:7A:99:95:5C:6C:6A:03:9B:4A:BD:51
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       019D051CB99C1579E353E9C7B5DF511BCBFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          118F
Signing time:             Thu 19 Mar 2026 08:01:01 +0000
Manifest this update:     Thu 19 Mar 2026 08:01:01 +0000
Manifest next update:     Fri 20 Mar 2026 08:01:01 +0000
Files and hashes:         1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
                          2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
                          3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
                          4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: pKdK+Bvx/03NHeP+YnAxkbAWQg5XtfoqZ6J7wqKn79U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1c:b9:9c:15:79:e3:53:e9:c7:b5:df:51:1b:cb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Mar 19 08:01:01 2026 GMT
            Not After : Mar 20 08:01:01 2026 GMT
        Subject: CN=b2d0fc5b64d207cb887a99955c6c6a039b4abd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:86:e6:17:3a:ee:64:ac:90:0f:31:fe:8c:
                    39:9e:1a:71:87:f7:96:c7:2d:c8:a0:51:40:29:fd:
                    85:38:71:61:d6:f3:fd:20:d1:30:c2:cc:10:de:72:
                    0b:5e:cb:93:c9:3c:48:d9:a4:1d:b7:58:65:89:9e:
                    c1:4d:ab:0b:79:28:e3:4e:d3:9f:db:a0:24:be:1d:
                    2d:0d:8a:39:ff:59:7a:da:c0:e7:22:7d:09:a2:56:
                    1d:62:04:7d:14:ef:f5:3e:db:5e:40:6c:29:55:2f:
                    32:17:4e:7f:fe:12:2f:e1:fb:5e:b4:9e:26:d7:5b:
                    51:60:ce:55:96:b0:b7:05:d0:c4:5e:e6:7f:c6:8a:
                    ad:d1:e7:c7:16:29:5f:dd:ce:26:74:62:4e:62:ff:
                    e8:2c:0b:33:1c:f5:85:0b:82:70:72:52:86:b9:40:
                    21:ab:24:67:23:18:a3:d9:22:25:1c:e0:25:80:00:
                    1e:cc:ad:ad:c4:4f:f6:b4:61:aa:c3:70:ca:22:83:
                    4c:34:c2:e5:a9:ef:99:61:b2:1f:e0:b7:9a:c8:29:
                    3a:5a:cb:f1:97:cc:89:b9:00:4d:fd:7e:68:b3:ab:
                    b6:e2:04:31:fe:b5:16:b6:fc:f1:07:95:e7:26:c3:
                    d0:b8:85:b8:da:0f:89:da:82:6d:fe:ef:5f:86:e0:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:FC:5B:64:D2:07:CB:88:7A:99:95:5C:6C:6A:03:9B:4A:BD:51
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:9f:31:93:2f:50:5d:d8:e5:ca:cf:ee:08:36:c6:01:92:
         28:42:1a:30:c6:0d:f9:97:66:5d:09:b7:42:9a:2c:d3:e2:b0:
         bf:ea:92:a3:5d:ca:fd:a7:bb:08:00:db:40:3d:0b:50:51:c3:
         27:81:13:a4:89:97:e6:f9:dc:8f:ac:35:23:fa:2f:3f:42:f3:
         0a:93:d7:70:48:6a:c2:92:1e:d8:e5:a6:6e:24:ab:b3:27:6f:
         ae:4a:2c:7f:ca:7a:41:9f:82:be:69:0e:92:83:0f:50:23:b6:
         d7:ff:b0:df:a9:49:c3:51:6b:0d:95:4a:c6:67:5e:8a:a8:e0:
         20:db:41:39:44:9c:0e:45:a1:07:74:6d:69:c0:f7:3c:bb:68:
         a3:c1:63:57:db:56:ee:ca:45:95:64:17:54:2a:3d:93:5b:26:
         e2:80:f4:74:cf:7d:f8:d2:59:0a:19:91:bb:3a:87:19:12:73:
         56:bf:35:22:03:06:e5:61:2b:97:a8:f5:5c:9c:81:41:93:a2:
         07:66:07:cb:ea:24:9d:ec:fc:72:5c:92:15:2a:d6:3f:be:3c:
         47:70:93:96:ca:7d:28:01:48:b2:1a:ba:6e:cf:66:b2:58:0d:
         52:b0:74:db:4f:d4:34:a2:10:c3:b8:8b:a9:78:70:38:49:fd:
         a6:09:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:57:02 2026 by rpki-client