Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File:                     legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier:          pDMVKfUB5FYZjDCAUeRLJtkU8SSfUKYu5Y+0vpwBWSc=
Subject key identifier:   48:9A:0F:BB:D9:27:C5:41:58:03:A6:5E:30:0B:D1:D7:27:79:D9:FA
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer:       /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial:       01A026FC8C26CAA532169C29D1BCEFCC8BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number:          1576
Signing time:             Sat 22 Aug 2026 01:01:20 +0000
Manifest this update:     Sat 22 Aug 2026 01:01:20 +0000
Manifest next update:     Sun 23 Aug 2026 01:01:20 +0000
Files and hashes:         1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
                          2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: Q6hh8Ywsyvr709dORtDrmlkb0VE8k366tVYmCkBimcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:fc:8c:26:ca:a5:32:16:9c:29:d1:bc:ef:cc:8b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
        Validity
            Not Before: Aug 22 01:01:20 2026 GMT
            Not After : Aug 23 01:01:20 2026 GMT
        Subject: CN=489a0fbbd927c5415803a65e300bd1d72779d9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:78:0d:ec:e6:52:ac:88:6f:73:4c:f5:5a:
                    72:6f:7a:5b:9e:a4:7f:fe:15:c8:57:0f:10:9d:66:
                    36:99:9a:53:b3:ee:3e:9d:96:9b:d6:c7:6d:8d:c1:
                    9b:68:35:22:cb:e5:84:ef:ba:33:b8:0d:69:04:97:
                    ed:3b:34:75:2a:9c:11:5d:04:79:97:fb:41:2e:26:
                    61:f2:de:f1:ae:01:a2:eb:88:de:af:19:da:cc:6e:
                    45:c0:6e:8e:09:87:2e:c1:85:33:82:98:f9:86:e7:
                    55:a6:17:dc:26:87:e2:b1:45:25:e3:42:0b:0a:73:
                    33:89:79:08:66:c2:86:81:be:5b:0c:e4:9a:fa:16:
                    ce:7c:7b:73:d9:d2:3e:dc:42:28:f8:72:82:b7:0d:
                    73:c6:fe:6f:37:56:60:e6:73:57:1f:c2:73:6a:d4:
                    03:db:6f:48:83:18:42:ae:f7:ec:70:49:bc:1d:bf:
                    59:06:7c:b8:2d:ce:2d:ae:61:d4:8c:a8:9e:8d:3e:
                    50:32:d5:e1:0c:33:7d:dd:7e:ab:4b:dd:be:db:fd:
                    ec:d8:38:e3:7a:de:44:ee:9a:a8:eb:fb:f6:e9:54:
                    3d:7e:48:36:2f:e9:e1:d0:86:11:ff:19:43:cd:97:
                    97:31:02:6f:db:56:6e:22:66:40:e5:0c:58:3f:3d:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:0F:BB:D9:27:C5:41:58:03:A6:5E:30:0B:D1:D7:27:79:D9:FA
            X509v3 Authority Key Identifier:
                keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:e1:da:70:90:46:95:7e:c1:61:72:ba:cf:91:e2:5b:df:
         27:ea:46:92:19:f1:ed:56:36:2c:4e:d0:0a:66:67:4e:82:91:
         98:ae:fd:87:e8:5e:5a:06:52:78:4c:08:46:b5:07:fa:51:ba:
         26:9d:aa:6f:d8:48:84:50:99:c5:93:1b:44:12:3b:e5:fa:ac:
         1b:7f:05:8e:25:5a:98:e0:ab:49:60:a6:c1:57:d1:b5:8f:4b:
         4e:b4:8f:9c:ee:6d:6f:db:83:98:f4:4c:29:2c:78:69:37:0d:
         2a:49:52:53:75:1e:a6:1b:02:d0:d9:a3:eb:4b:39:9e:a0:60:
         1a:79:c4:78:ef:68:92:1e:28:83:c3:cd:7a:e7:ab:c3:dc:44:
         23:db:7f:7b:a9:df:aa:0b:29:8f:87:9f:f5:73:23:da:8c:e1:
         ec:77:0a:9a:55:00:53:2c:80:f1:75:7c:44:e8:1d:90:c1:de:
         82:6b:1a:57:c7:56:1e:53:97:5d:e2:31:c7:e8:71:34:7f:9c:
         a7:f1:1c:f5:17:4a:5c:57:10:72:e9:93:56:16:d7:02:34:27:
         ca:5e:35:44:a0:34:cc:8e:00:83:c1:60:d0:01:c1:ce:4d:b9:
         f1:00:a6:88:f3:6a:bb:9b:7d:74:57:d0:41:38:6e:e0:58:8a:
         9d:96:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:08:25 2026 by rpki-client