Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File:                     LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier:          l0ic00tA9tmFeq8ZWSe2wUDz/5BOUN7FWELzi4EDrFw=
Subject key identifier:   AD:B2:59:C4:15:03:0D:F5:D7:BF:91:64:21:3C:10:0A:01:78:DD:F8
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer:       /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial:       01A1803E045B3FC418CFB4F877D757F9C73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number:          07EE
Signing time:             Wed 28 Oct 2026 02:01:50 +0000
Manifest this update:     Wed 28 Oct 2026 02:01:50 +0000
Manifest next update:     Thu 29 Oct 2026 02:01:50 +0000
Files and hashes:         1: 1VDI8LOlZotQXEwbdB6SzbnLPM4.roa (hash: l27UrnMvu8nzJebzCXh2pQXrYsMLQuNNu0v0Sq6JVOs=)
                          2: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: Y0db9ix1NGiHPkIJ0LxBu4MTBUaKEDGDTtLLDc8Wluc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:3e:04:5b:3f:c4:18:cf:b4:f8:77:d7:57:f9:c7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
        Validity
            Not Before: Oct 28 02:01:50 2026 GMT
            Not After : Oct 29 02:01:50 2026 GMT
        Subject: CN=adb259c415030df5d7bf9164213c100a0178ddf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:43:cf:58:aa:ed:0f:eb:43:87:54:bb:0a:
                    08:49:d8:be:58:e4:85:61:79:2e:69:26:52:41:fd:
                    a5:67:a9:4a:ff:57:06:49:e3:e5:24:a8:ef:e4:b6:
                    48:43:21:3f:82:30:22:f7:a6:1b:89:52:13:f1:5d:
                    2c:e6:a4:ca:43:12:18:9f:19:a4:cb:35:5d:72:a6:
                    ae:55:a4:7d:75:74:30:fc:a9:78:a8:8b:5f:a7:95:
                    3e:ef:9a:41:16:2a:58:fd:f6:95:0c:2a:8e:d4:34:
                    fa:fa:a0:36:ea:5c:54:f1:d0:3e:92:26:ba:e6:53:
                    c0:e2:ce:54:0f:89:5c:d7:c6:37:a5:c8:10:91:8d:
                    72:e7:ae:13:1b:a6:30:ff:91:1d:93:e9:79:0b:0f:
                    06:10:74:7e:5c:65:ef:47:47:13:6d:ce:71:4f:7a:
                    99:50:08:97:01:ab:49:63:d6:ac:a9:13:5c:cc:3d:
                    05:bd:87:57:b6:c2:46:be:36:cb:47:7b:3e:69:57:
                    b9:9a:f0:d5:cd:cf:53:3d:c3:d6:77:e2:0c:5a:52:
                    36:70:90:83:b7:5f:da:4c:87:a1:d8:e9:1f:e3:25:
                    ae:61:ab:40:9c:39:d8:02:36:34:43:28:80:90:de:
                    25:20:8e:73:dd:a0:f3:f9:d6:4d:70:a3:59:d0:2f:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:59:C4:15:03:0D:F5:D7:BF:91:64:21:3C:10:0A:01:78:DD:F8
            X509v3 Authority Key Identifier:
                keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:56:6b:d0:b8:df:45:0c:2b:8d:8c:21:01:8c:91:1d:8d:c6:
         e6:5a:17:68:28:48:60:14:b2:d2:69:f7:24:0c:19:4b:48:b5:
         aa:37:3e:48:c8:99:fb:e6:48:4d:90:cc:e1:8e:5c:4d:c8:aa:
         0d:da:1b:30:50:1a:44:67:6b:fc:06:56:64:d3:5e:73:f7:a0:
         b8:15:a1:c8:d8:a6:35:c5:db:9e:ba:85:fd:d9:f3:24:82:df:
         5f:f5:d6:ea:dc:b8:02:1f:d6:3c:7e:f6:f8:f0:06:2f:33:3e:
         38:73:1a:90:1c:72:21:97:23:c2:6b:5a:6c:ae:5d:ed:76:29:
         59:cd:13:62:34:40:5f:74:50:90:a1:9f:eb:4d:6d:9d:b6:51:
         3b:a7:cc:e1:dc:db:a0:c2:f5:d3:bf:b7:bf:31:ee:b2:d5:63:
         08:f2:2e:58:db:9a:35:bb:2d:b9:f6:d4:a4:b5:66:0b:1e:2a:
         8d:5b:75:ef:c9:92:88:58:5e:86:b2:8d:1f:a0:47:49:46:80:
         a9:76:b8:fe:cb:45:65:c0:ff:89:9e:37:b9:b5:76:69:e0:15:
         49:22:af:f8:6d:60:6e:14:77:cf:62:15:39:b9:0c:50:1a:12:
         29:a4:da:e0:19:8a:3e:f3:58:68:53:43:15:61:4a:7c:d0:7f:
         ed:7b:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:52 2026 by rpki-client