Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
File:                     lICKbds0DQqKISfGTaKNdw7t3pM.mft (raw, json)
Hash identifier:          wBpI9aSZotIWKt6bcIxfa1xN2z8UgU8gUj9ovqTI0F4=
Subject key identifier:   0A:0B:E4:EF:62:94:30:2D:4F:A6:FB:34:70:58:BB:19:6E:A8:AA:9D
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Certificate issuer:       /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial:       01A088D4A391088E621FC83282816F34DBBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 01:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 01:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 01:00:31 +0000
Files and hashes:         1: 0_aFekBMdFqNOphj1MEzPKVtmT0.roa (hash: YB/bN3AAooYOfmHTAnQ/FECmO0TWzvsn8QhVsoUQzUY=)
                          2: 64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa (hash: BeGDi5VESth0C9pJC6qZlN6Zb8k5M9gWJV+LnTk4B3Y=)
                          3: Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa (hash: jyeskLTbwVPBESh5W51wXjNVOuucTxX63WTMSQq/zQk=)
                          4: PdHeaDywJi7J-a3zuc6-1mdUfSM.roa (hash: l+ho2GKXOZvF0KZ6/PCYPC090Oshz6jifmJBVRB6i5c=)
                          5: VGNTVsc9nejbVwiuI2nbOHrhT4A.roa (hash: wG2E1ysGhVBc57CqY90n2KOFbOVGCHFK1WJuuKwNSso=)
                          6: lICKbds0DQqKISfGTaKNdw7t3pM.crl (hash: S6z++/BNlh84mrgGW9Wnnq6kkQVZXXXpiNdpFm7ofYg=)
                          7: oThXb4QmTGdzVtthRGYRVzspjNY.roa (hash: vrCmZWsAWrsHQ4ME8ZX38nmpmr/rd33lideKndjp8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:d4:a3:91:08:8e:62:1f:c8:32:82:81:6f:34:db:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
        Validity
            Not Before: Sep 10 01:00:31 2026 GMT
            Not After : Sep 11 01:00:31 2026 GMT
        Subject: CN=0a0be4ef6294302d4fa6fb347058bb196ea8aa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:bf:6a:dc:0e:df:46:4b:58:c7:a1:83:01:
                    73:1c:65:8d:35:4e:14:5a:d8:13:e7:5a:d4:6a:5c:
                    c0:dc:e8:b6:5a:e1:b9:4b:c4:f1:a1:e8:c5:23:04:
                    8f:7a:62:1a:22:c4:23:70:83:0b:fc:de:7a:79:ca:
                    bf:00:49:11:fc:72:8d:a5:15:c9:b8:42:d6:28:b2:
                    63:93:e3:ce:9f:8d:40:6b:99:b4:ee:27:9b:fd:45:
                    3d:89:fe:83:33:15:03:f2:66:e7:b4:46:3d:07:fb:
                    31:32:b0:3d:68:39:27:42:31:f1:6a:b1:89:7d:70:
                    c7:3c:14:da:a7:9f:96:4a:22:c8:2d:59:f1:39:a7:
                    3b:ac:89:fd:a8:cd:c0:88:37:59:2e:11:e0:e1:b3:
                    40:96:80:04:64:8d:42:8c:33:18:26:ba:7c:67:ed:
                    e7:b5:c8:ce:f1:d6:62:92:d3:65:8c:19:17:de:9f:
                    5a:af:5a:27:34:1a:3e:37:c4:2f:63:ad:bd:e8:cd:
                    79:68:31:64:ca:28:7c:32:0c:61:8f:4a:65:d7:de:
                    79:c7:da:44:3f:a2:92:1b:f4:3e:45:c9:e4:68:21:
                    b3:e6:10:ce:b1:40:d4:6b:ee:47:1b:e2:6a:4c:8b:
                    62:75:0c:aa:3d:71:48:fc:e7:1c:15:5e:f0:32:a6:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0B:E4:EF:62:94:30:2D:4F:A6:FB:34:70:58:BB:19:6E:A8:AA:9D
            X509v3 Authority Key Identifier:
                keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:e5:80:81:85:9c:eb:21:cb:a2:9a:57:1e:e0:9c:8c:3d:
         48:c7:b9:f0:59:ac:0b:d2:12:f3:56:97:8b:1d:ee:2d:ad:22:
         c6:ed:34:c7:45:45:cb:43:63:76:4a:47:47:73:cd:ce:37:15:
         4a:cf:80:1e:63:c0:a6:4c:e1:39:e0:22:a7:cf:96:0d:62:26:
         72:87:3e:01:91:d4:eb:54:69:59:05:da:34:01:fe:4d:c1:4c:
         32:8d:b8:e0:c2:ec:a5:0b:a0:e5:6b:be:ae:04:b2:b6:6c:c8:
         02:58:d6:83:73:46:03:29:81:0e:38:ce:ed:d9:3a:41:09:b2:
         c8:a1:81:14:07:4b:10:57:3b:c7:80:39:44:6e:a7:f6:c4:ce:
         ea:cb:50:d8:a9:28:10:52:58:06:04:0c:71:17:28:5a:34:fa:
         2f:35:13:37:46:b7:07:89:6e:9d:c1:8f:bf:9f:f9:b0:fe:90:
         d1:6a:b3:fd:da:72:10:91:e5:e7:e6:03:fd:a9:8a:93:16:7b:
         ac:e3:fe:83:51:de:ab:32:61:b5:ab:97:59:ff:11:c8:9e:ea:
         16:64:0f:8a:ef:f3:b2:0c:34:33:e6:8c:c6:8e:95:96:90:e7:
         04:e3:b9:6c:68:4f:be:71:47:4c:ee:d5:44:0c:84:66:cf:96:
         1c:73:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:59 2026 by rpki-client