Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File:                     lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier:          GhZs7O61hXJIQkIQW0wDkO1nUJG34R6Q3xl8p0OF81U=
Subject key identifier:   ED:EF:7D:52:3D:1B:DD:14:A3:E4:7F:34:AD:8E:DC:C1:CE:92:72:45
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer:       /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial:       01A06FF15AD1AF1B221B3D6818511876CBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number:          0EDF
Signing time:             Sat 05 Sep 2026 05:01:23 +0000
Manifest this update:     Sat 05 Sep 2026 05:01:23 +0000
Manifest next update:     Sun 06 Sep 2026 05:01:23 +0000
Files and hashes:         1: 5tq-dphgnapNG8uID0bzWyuSiiI.roa (hash: Geh8HxvdWtRdjQA8GTRZhRKQeMt/TQkbrTaKQX7hwuM=)
                          2: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (hash: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc=)
                          3: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (hash: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg=)
                          4: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: Mr371fudwb5+qcCgQbrOeGSy8wi+FbWrZpgJQXaQasc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:f1:5a:d1:af:1b:22:1b:3d:68:18:51:18:76:cb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
        Validity
            Not Before: Sep  5 05:01:23 2026 GMT
            Not After : Sep  6 05:01:23 2026 GMT
        Subject: CN=edef7d523d1bdd14a3e47f34ad8edcc1ce927245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fd:ff:02:18:c0:21:84:92:0e:68:27:90:bd:
                    c8:c4:15:fa:67:43:d4:4d:fa:bb:63:f9:53:85:a8:
                    61:62:23:54:32:b2:31:54:03:4c:1f:5c:62:7b:b2:
                    af:d7:5c:f6:b9:f9:01:10:df:bd:5d:6e:2b:7c:88:
                    01:d6:a5:f1:de:83:28:44:dc:2a:83:51:7f:ef:b6:
                    50:87:73:9f:cd:0d:b6:73:39:2c:26:91:b9:05:69:
                    4d:10:64:0e:c8:1a:60:44:b2:07:d1:6a:12:a9:58:
                    8c:f8:96:77:b4:db:61:44:1e:fb:bc:c5:23:3e:5e:
                    0f:70:e7:34:ab:e0:c4:80:b6:16:28:61:67:2e:3f:
                    c4:78:ca:69:0b:cf:41:d0:e7:c0:50:bf:51:cf:c0:
                    0d:ea:a5:35:6c:38:9d:eb:11:12:70:a0:87:b5:75:
                    5a:95:0d:00:f8:83:47:e1:25:17:df:f2:d0:94:d6:
                    49:78:cf:c7:3b:88:53:d5:40:57:82:f5:c7:53:a2:
                    ed:b8:99:b7:bc:6f:1b:12:1f:81:6a:27:c7:2b:93:
                    a2:a4:9e:42:55:3b:bf:04:0b:3b:80:0d:8e:73:28:
                    fe:cd:f3:37:28:01:f5:b8:5a:b3:90:1b:cf:ab:57:
                    11:87:f5:76:0b:3b:53:03:15:01:eb:91:89:53:42:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EF:7D:52:3D:1B:DD:14:A3:E4:7F:34:AD:8E:DC:C1:CE:92:72:45
            X509v3 Authority Key Identifier:
                keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:dc:72:6d:b0:d5:fc:2d:22:21:26:9a:b2:72:35:a8:c0:
         dc:5f:0c:dc:c9:59:f5:97:55:90:46:78:82:7f:c7:91:a8:5e:
         9a:a1:62:4b:e8:76:93:d2:15:d1:8f:6b:9b:2b:e3:0f:0f:e6:
         54:9d:02:e2:8d:be:05:1c:9c:33:68:10:f4:95:7a:bd:3d:10:
         b6:c0:2d:17:e1:e4:6d:7c:3b:d9:ea:dc:5e:a2:68:8a:7c:43:
         b7:05:a3:81:33:fc:a4:08:a7:de:e7:e8:35:4f:42:01:06:30:
         d0:0c:a7:b7:57:76:19:b4:65:5d:10:de:d2:17:11:d0:9a:e1:
         4a:96:93:29:5a:21:06:eb:33:d4:d0:37:c7:cc:70:4f:8a:ac:
         e9:36:2d:9a:c0:e6:3c:4c:25:b4:51:cc:de:d6:a1:ee:f6:b7:
         e9:2b:8d:75:0a:56:b0:6e:0d:26:20:3a:f9:73:86:ef:0e:78:
         4a:b2:86:c1:39:42:73:d5:6b:dd:f0:5a:44:eb:a7:80:39:02:
         1f:19:c0:ea:c1:05:3e:84:9f:ab:67:04:7a:d0:09:79:67:df:
         a3:eb:78:ea:0e:64:70:de:05:fe:47:59:02:0c:11:47:d7:40:
         ee:f1:17:3d:c1:a3:1f:49:83:59:4b:ce:21:b6:63:a1:fa:5c:
         12:ce:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:21:44 2026 by rpki-client