Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          NzRs8RRot9uf/wpWWMsTmYs8zsuN7IfTFb3J57yKXEA=
Subject key identifier:   89:42:0A:13:52:86:1D:8F:2D:8C:73:23:15:B9:CC:FA:52:C0:B2:F3
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       01A03E968217DA6E32B5FA600B3BB1651213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          142C
Signing time:             Wed 26 Aug 2026 15:00:46 +0000
Manifest this update:     Wed 26 Aug 2026 15:00:46 +0000
Manifest next update:     Thu 27 Aug 2026 15:00:46 +0000
Files and hashes:         1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: 2aq2cqAWFxOc+8jW6rqtMaFu6er4rh6UD6DbjgvU0V8=)
                          2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:96:82:17:da:6e:32:b5:fa:60:0b:3b:b1:65:12:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: Aug 26 15:00:46 2026 GMT
            Not After : Aug 27 15:00:46 2026 GMT
        Subject: CN=89420a1352861d8f2d8c732315b9ccfa52c0b2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:97:2b:9a:fb:2b:35:1d:5c:be:ce:76:6c:
                    42:c1:8c:01:2c:2a:5a:4c:3a:2a:eb:91:27:c6:3f:
                    32:71:56:49:4f:09:33:35:57:0d:f5:48:e7:98:c1:
                    9d:34:a7:e9:67:c4:74:be:3f:50:4a:bd:09:60:5a:
                    e6:f3:69:b7:a5:3d:1e:0e:50:19:fb:6b:72:81:92:
                    89:1f:84:fc:5a:78:f4:ec:10:88:08:96:33:28:69:
                    65:cc:c9:97:72:59:1d:ae:bd:e1:02:95:5c:f3:eb:
                    71:8c:0c:20:6f:77:bd:ac:ea:ec:36:6c:a6:b6:bb:
                    d9:1d:93:e4:aa:f6:dc:1d:d0:34:6a:c0:a0:e6:18:
                    ff:b0:b9:43:a7:57:d3:66:10:f4:b4:e6:dc:8a:48:
                    61:eb:84:64:6f:bb:4b:ec:84:01:a9:00:1f:17:8c:
                    d1:22:ed:da:9d:ce:4b:03:e1:ea:e0:df:cb:e5:7d:
                    b8:7d:ea:78:25:a2:dd:eb:a8:98:26:9a:fa:7b:58:
                    9e:aa:c4:d6:34:5b:bc:88:9f:4b:b3:36:8e:e5:46:
                    11:ec:ad:97:3c:9b:45:05:ba:04:0c:4b:b8:47:64:
                    bc:c5:63:8e:f5:21:81:aa:66:10:96:8c:e6:eb:6c:
                    67:91:ff:0c:34:36:13:07:ef:f6:ac:40:e6:fe:75:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:42:0A:13:52:86:1D:8F:2D:8C:73:23:15:B9:CC:FA:52:C0:B2:F3
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:e3:68:6e:68:3c:c5:17:5e:71:05:98:cb:19:bb:af:e6:
         57:c3:9d:e1:d2:d7:e6:7c:26:80:08:f5:4c:55:e8:f9:58:2e:
         fd:30:bd:4c:c0:a5:58:1f:98:06:c7:85:19:6e:5a:aa:a2:35:
         87:dc:cc:1e:1f:00:80:04:ce:20:70:ab:72:7d:c3:7c:78:c3:
         45:16:3d:b3:25:d5:ef:b6:b8:ac:70:68:54:5c:3b:5e:7a:ba:
         4b:79:88:c9:ac:45:3d:f7:e9:2d:5b:02:3e:1e:d0:5b:a3:e5:
         9b:7b:9f:ba:b9:c1:c0:ea:42:29:7e:63:6e:ed:aa:fd:b7:e8:
         b8:6f:05:3e:29:45:79:b4:93:31:55:05:5a:04:02:3e:27:21:
         cd:b5:99:42:5f:98:5c:59:23:58:ac:99:95:4d:e8:74:a1:0f:
         9b:cc:df:91:df:1c:c2:8e:2f:92:2e:5f:44:03:89:65:c4:bc:
         0a:a1:dc:8b:a6:80:0a:cf:3b:18:0b:32:c6:24:8e:c9:32:59:
         aa:08:6b:cd:c0:cb:5f:2a:4c:09:d1:fc:91:4d:fa:e7:6c:5e:
         3f:8c:81:2f:be:38:7f:a4:bd:db:2a:33:8e:65:35:27:fa:64:
         40:90:97:b7:fb:6d:1e:d4:e5:4f:43:1e:c1:5a:b4:bf:f5:60:
         eb:87:4e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+loIX2m4ytfpgCzuxZRITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2
OGFjOWIwHhcNMjYwODI2MTUwMDQ2WhcNMjYwODI3MTUwMDQ2WjAzMTEwLwYDVQQD
Eyg4OTQyMGExMzUyODYxZDhmMmQ4YzczMjMxNWI5Y2NmYTUyYzBiMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fKXK5r7KzUdXL7OdmxCwYwBLCpa
TDoq65Enxj8ycVZJTwkzNVcN9UjnmMGdNKfpZ8R0vj9QSr0JYFrm82m3pT0eDlAZ
+2tygZKJH4T8Wnj07BCICJYzKGllzMmXclkdrr3hApVc8+txjAwgb3e9rOrsNmym
trvZHZPkqvbcHdA0asCg5hj/sLlDp1fTZhD0tObcikhh64Rkb7tL7IQBqQAfF4zR
Iu3anc5LA+Hq4N/L5X24fep4JaLd66iYJpr6e1ieqsTWNFu8iJ9LszaO5UYR7K2X
PJtFBboEDEu4R2S8xWOO9SGBqmYQlozm62xnkf8MNDYTB+/2rEDm/nXyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlCChNShh2PLYxzIxW5zPpSwLLzMB8GA1UdIwQY
MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt
OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm
LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpbjaG5o
PMUXXnEFmMsZu6/mV8Od4dLX5nwmgAj1TFXo+Vgu/TC9TMClWB+YBseFGW5aqqI1
h9zMHh8AgATOIHCrcn3DfHjDRRY9syXV77a4rHBoVFw7Xnq6S3mIyaxFPffpLVsC
Ph7QW6Plm3ufurnBwOpCKX5jbu2q/bfouG8FPilFebSTMVUFWgQCPichzbWZQl+Y
XFkjWKyZlU3odKEPm8zfkd8cwo4vki5fRAOJZcS8CqHci6aACs87GAsyxiSOyTJZ
qghrzcDLXypMCdH8kU3652xeP4yBL744f6S92yozjmU1J/pkQJCXt/ttHtTlT0Me
wVq0v/Vg64dO7A==
-----END CERTIFICATE-----
Generated at Thu Aug 27 00:44:36 2026 by rpki-client