Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          ZEupvRUsR3yFJIt6PUZRrG6dBmwQO03xVuYoiP5LMM4=
Subject key identifier:   6F:79:49:55:C1:77:B7:E8:F2:25:1A:AB:77:12:0D:96:C2:55:5D:19
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       01A025B2B01678897B53FB3CED88DFA6231C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1A1A
Signing time:             Fri 21 Aug 2026 19:01:02 +0000
Manifest this update:     Fri 21 Aug 2026 19:01:02 +0000
Manifest next update:     Sat 22 Aug 2026 19:01:02 +0000
Files and hashes:         1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: jJECHSlsmj1UHNibNZzBzDLiC2EsH0QaUAam35UmhOQ=)
                          2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
                          3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
                          4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
                          5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
                          6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
                          7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:b2:b0:16:78:89:7b:53:fb:3c:ed:88:df:a6:23:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Aug 21 19:01:02 2026 GMT
            Not After : Aug 22 19:01:02 2026 GMT
        Subject: CN=6f794955c177b7e8f2251aab77120d96c2555d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:2d:8d:f1:a4:6e:f8:1a:45:a2:74:16:a3:
                    93:f2:03:d7:0b:20:eb:87:ce:28:e1:4e:36:fa:f0:
                    47:d0:ed:dc:27:a3:c5:d4:ae:b5:1a:15:e8:1d:f2:
                    c9:a5:ac:04:57:90:5d:a4:00:25:8f:bc:d4:df:6a:
                    4a:0c:82:58:20:78:57:18:44:50:a6:c5:97:8b:33:
                    78:4b:46:1e:d9:e6:35:a0:cc:4b:7a:f7:6a:43:1b:
                    f0:73:f4:32:71:db:6b:cc:b3:7f:19:4e:c9:d3:02:
                    84:9d:32:aa:84:c0:13:82:ee:a5:d5:b9:a5:de:a5:
                    90:24:99:df:d1:49:12:c0:24:c1:f1:3d:c6:b2:e3:
                    fd:0d:ff:41:d1:db:4c:3f:73:8d:4c:4b:18:fd:11:
                    ee:59:57:5f:7b:bb:e1:80:a8:6e:f5:e1:f4:ca:5e:
                    5c:b1:8a:be:f2:ad:e8:e1:bb:02:82:fd:8b:67:b8:
                    01:87:9e:dc:ad:8b:bb:62:53:ed:43:97:6e:01:17:
                    51:f4:a0:32:7f:23:00:05:da:2f:17:0e:c6:b6:58:
                    1d:e2:2d:ff:b3:bc:22:42:90:66:54:d0:88:06:06:
                    25:c5:c1:04:16:ab:5c:0f:8c:81:e7:91:3f:d8:5e:
                    10:32:c7:ec:d1:4c:fa:ff:4e:c3:67:81:7e:94:2c:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:49:55:C1:77:B7:E8:F2:25:1A:AB:77:12:0D:96:C2:55:5D:19
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:e8:03:4e:05:47:72:c6:5a:e3:6c:ab:30:8f:7a:5e:52:
         74:92:30:3c:1b:d2:d1:21:02:cc:cd:c5:54:8d:37:fc:59:5b:
         1a:f6:6d:37:56:ff:7e:7f:dd:fe:11:47:47:39:38:43:f0:3f:
         4e:40:8c:0a:f9:f4:9d:06:2f:1a:26:df:89:1c:36:0d:82:7b:
         cd:ec:25:5d:3b:c4:95:c7:5d:9f:87:30:d5:49:1a:7a:83:f4:
         d8:49:03:b6:56:30:c2:c5:e4:37:84:95:c4:31:98:a9:38:be:
         9d:69:da:46:8c:51:30:04:af:4e:35:30:e1:28:45:84:e7:14:
         dc:17:84:57:0c:0e:26:c9:64:e8:dd:02:59:f1:21:3b:62:b4:
         68:6c:02:f6:6f:51:5a:74:d5:44:4d:0b:a8:31:42:35:46:76:
         ae:27:f4:c2:a2:5c:d3:9e:08:0a:16:00:8a:4a:e6:f0:dd:c8:
         92:99:78:d2:08:20:36:4c:03:a1:1f:c4:d5:20:6f:9e:18:c5:
         11:93:da:29:28:89:85:a2:96:b4:9c:93:81:3e:d0:71:b6:cb:
         8a:64:c8:e9:62:e7:3e:5a:34:e7:9d:3a:44:d0:31:ff:8f:be:
         b5:af:42:51:48:c5:9e:42:92:c2:2f:0d:48:02:e4:f3:2e:62:
         bf:4d:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:41:05 2026 by rpki-client