Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          9CXMTQ+22ueoS3U7Xo2VA7bo5eNQ7kxe8W3GpxdlAZE=
Subject key identifier:   FC:87:FB:07:29:6E:11:3C:6D:A8:CA:72:EA:40:DA:40:B2:2C:9E:DE
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       01A00326E15AB12E984DAE5905BF4720370B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          1A00
Signing time:             Sat 15 Aug 2026 02:01:14 +0000
Manifest this update:     Sat 15 Aug 2026 02:01:14 +0000
Manifest next update:     Sun 16 Aug 2026 02:01:14 +0000
Files and hashes:         1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
                          2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: N4cpZB/OPIUXF7u8xURXJ71X+BcyfhtPD92bTECGkCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:e1:5a:b1:2e:98:4d:ae:59:05:bf:47:20:37:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Aug 15 02:01:14 2026 GMT
            Not After : Aug 16 02:01:14 2026 GMT
        Subject: CN=fc87fb07296e113c6da8ca72ea40da40b22c9ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:e5:5f:a0:0a:39:fd:86:88:3b:f8:23:3a:
                    98:d5:52:68:5b:0f:a1:9e:c4:45:97:a6:47:a7:73:
                    dd:eb:55:34:6e:a6:bd:8f:4d:b2:89:e5:45:92:0d:
                    46:73:0e:6f:b6:ab:3a:db:5a:90:01:76:40:ad:dd:
                    79:20:57:2e:4d:4f:80:b4:eb:1b:2e:63:2a:e7:a5:
                    26:96:69:3a:e3:46:f5:2b:9e:8b:9f:75:1a:50:55:
                    1d:54:8c:28:60:13:60:96:15:88:1e:d3:6a:b1:1d:
                    f9:43:04:ae:1b:95:af:2f:12:4a:1b:a3:7e:be:11:
                    63:14:4e:22:00:37:db:49:07:a5:d5:05:9c:54:3b:
                    4c:40:f2:49:42:6b:46:be:ad:cc:07:50:ef:bf:64:
                    7b:27:c9:d0:0b:08:3c:17:6a:61:12:aa:db:64:a7:
                    c0:cc:28:fb:52:3f:a6:a5:f5:98:c2:40:1c:34:ab:
                    2b:c7:21:c4:2c:c4:75:cd:a6:f0:b3:20:68:93:c1:
                    e1:c3:d4:5d:f1:ba:c5:36:73:c1:4d:92:16:d0:2c:
                    03:52:82:48:98:ef:5e:3a:09:4f:70:b1:ca:19:1a:
                    37:42:dc:9c:cd:1e:42:61:7d:e2:98:45:37:01:bf:
                    16:ff:08:60:95:38:b5:b3:f8:05:8f:49:62:f5:85:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:FB:07:29:6E:11:3C:6D:A8:CA:72:EA:40:DA:40:B2:2C:9E:DE
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:ff:fb:28:e9:e7:d1:ef:cd:d1:56:67:99:0f:2d:82:fd:
         5f:1f:fe:2e:b2:44:a4:96:e9:27:1c:94:66:b2:25:bd:16:92:
         1d:04:af:36:d7:ae:fa:de:4c:2c:f9:f0:ea:b5:fe:0b:6f:15:
         59:10:94:9b:7b:0f:23:48:de:08:f9:3b:9c:b7:4a:f0:48:65:
         46:5b:ed:28:79:aa:1f:de:88:90:47:ba:96:9a:ea:aa:9d:3e:
         7b:8f:b2:3e:53:ea:2c:d9:e7:7c:da:92:33:80:23:19:6d:01:
         5e:29:90:0c:3d:c8:52:79:4f:59:82:40:f9:43:22:6e:34:29:
         3f:38:e9:01:dc:60:2a:91:9b:25:93:bd:52:af:39:68:9d:38:
         61:46:f8:4b:54:fd:bf:47:3f:6c:20:3c:09:47:23:fd:e3:1d:
         d7:e8:ef:ec:4f:d3:28:7e:a3:23:c5:f3:b7:ee:a0:aa:6d:8e:
         0c:53:5f:44:16:71:1b:43:e3:0f:7c:0b:a4:bf:18:91:b3:1b:
         8a:6b:e8:b8:66:21:ee:9d:3a:8d:a0:89:59:b1:17:40:ad:60:
         53:ac:20:26:f0:6e:22:ae:39:c7:91:fb:ae:88:f7:1e:7f:a4:
         98:bb:05:ba:8d:46:39:97:ff:c3:f4:c6:4a:eb:fd:1d:c2:df:
         3c:93:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:50 2026 by rpki-client