Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File:                     LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier:          kEI08e7JCZ38t8+Wgi7dCb1BdUavicoq5sRNQAYWVq8=
Subject key identifier:   0A:8E:1B:D5:18:99:21:A7:6C:75:A2:8A:8F:95:4B:3D:00:17:36:2E
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer:       /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial:       01A09F938D7AFC6B86CC8384CC913D85623D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number:          1A58
Signing time:             Mon 14 Sep 2026 11:00:42 +0000
Manifest this update:     Mon 14 Sep 2026 11:00:42 +0000
Manifest next update:     Tue 15 Sep 2026 11:00:42 +0000
Files and hashes:         1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
                          2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
                          3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: Cy6yWpGNXH3DcJDqFWNrx/VmuZLU1f3yvwOwx3z4bEU=)
                          4: cHAv-hR4aTG77AYkITXkfyjkv7w.roa (hash: Thgd06WEq033xim/iur0tbIXmRSvmjPC3WOYOjzBIpY=)
                          5: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
                          6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9f:93:8d:7a:fc:6b:86:cc:83:84:cc:91:3d:85:62:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
        Validity
            Not Before: Sep 14 11:00:42 2026 GMT
            Not After : Sep 15 11:00:42 2026 GMT
        Subject: CN=0a8e1bd5189921a76c75a28a8f954b3d0017362e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:c2:12:97:e9:86:47:07:1d:2c:da:6e:09:
                    07:d5:b7:8b:0e:90:3a:5e:f0:a6:33:10:f9:02:8e:
                    5e:4f:c9:05:fc:3a:45:e8:8a:0f:4a:85:39:6b:14:
                    bc:ef:97:2c:b8:64:f1:f9:a4:64:83:6f:2d:c1:dd:
                    94:31:ac:9a:91:47:c8:67:94:c4:e5:7c:2e:21:b7:
                    73:d8:48:ba:cc:41:e9:22:f9:e9:05:9a:ea:16:2c:
                    9e:0c:d7:24:4d:e7:99:fc:a4:1b:9e:b6:ba:f3:30:
                    ae:24:62:b4:5c:d4:b1:b5:45:e4:ee:9b:bb:62:5a:
                    83:fe:58:e4:29:3f:cd:ef:4f:a3:5e:e6:0f:3e:17:
                    63:93:7b:38:cc:c2:05:a1:dc:48:b3:33:89:d6:41:
                    8c:51:e3:26:60:ba:49:2d:be:90:8b:7e:8e:d6:af:
                    d1:bc:b6:a6:df:a4:65:6a:ce:c2:db:90:fb:e8:a2:
                    8f:89:38:9b:18:ff:f2:1e:0e:17:f2:38:3e:6d:66:
                    75:b1:d3:46:69:bb:0f:23:3d:75:a7:72:f1:57:a4:
                    97:2f:f9:61:3a:2d:96:5b:63:b3:9b:9d:df:9b:40:
                    a4:03:63:33:e6:76:4f:84:fe:79:27:da:6b:fa:32:
                    8b:d6:ea:a3:8b:cb:7b:ea:16:18:24:f7:91:92:5b:
                    af:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8E:1B:D5:18:99:21:A7:6C:75:A2:8A:8F:95:4B:3D:00:17:36:2E
            X509v3 Authority Key Identifier:
                keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:48:12:4f:74:1d:2e:9f:85:56:1b:8f:1e:d1:60:4f:53:
         5c:12:cf:05:c9:83:95:2c:99:5f:48:e9:8d:73:76:2d:30:4a:
         c5:63:ae:b5:18:e6:37:18:de:2b:54:93:6e:2b:25:47:2e:14:
         23:a3:cf:a7:35:38:b2:9e:46:a5:e7:df:81:6e:c3:6a:a9:66:
         73:e9:29:a0:08:4d:09:d3:6b:09:d4:d3:73:bf:df:4c:d7:04:
         70:73:51:12:8c:bf:a7:58:11:10:e8:60:2a:d7:e6:06:c5:9d:
         38:f6:f3:00:92:c0:bb:9d:c5:ca:19:7a:d1:2b:c2:86:36:b1:
         f0:e9:f7:58:18:c6:70:da:3a:56:0b:48:4d:b3:b6:43:f1:aa:
         c1:d3:f0:8e:c7:26:f6:83:03:69:1b:61:8d:3d:02:66:c6:3b:
         d1:bb:3c:d4:18:c7:99:44:4c:be:b5:97:80:68:7e:34:1d:5e:
         27:17:6e:a0:f3:64:e2:0e:6a:f3:3e:9e:01:19:55:84:45:ef:
         33:2d:e6:78:a0:f4:11:99:fe:c5:ab:79:79:49:10:5c:81:c0:
         82:5e:db:08:ab:21:f6:8f:3d:a7:61:f0:e0:52:89:4d:ba:ac:
         e0:0e:27:d1:66:b6:14:cb:2c:58:dd:cc:ac:54:95:60:87:f8:
         7c:a5:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 18:41:00 2026 by rpki-client