Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File:                     slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier:          J/j2LiyPJK/oQXfyWRVHZlEmdwHGqKMgljb9RKu4ZlU=
Subject key identifier:   14:5C:05:A1:A3:1C:3C:F7:F0:33:0C:66:BB:33:3A:D0:DE:D9:AE:55
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer:       /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial:       01A08A1E982E323F290EF32262A931850819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 07:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 07:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 07:00:55 +0000
Files and hashes:         1: Igv0iKibrdAXGjgsd8hPRxgEjCg.roa (hash: 9mosYeawKJ3SeEs3+N+XOX8qvV/b7ZB2EjQAeZlJCHc=)
                          2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: U+RapwOvbW1abDUfU0MeTvzqPglyCA+xUtqv74nw1B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:98:2e:32:3f:29:0e:f3:22:62:a9:31:85:08:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
        Validity
            Not Before: Sep 10 07:00:55 2026 GMT
            Not After : Sep 11 07:00:55 2026 GMT
        Subject: CN=145c05a1a31c3cf7f0330c66bb333ad0ded9ae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:04:20:10:d6:5d:f7:d9:35:14:ba:99:fc:
                    d2:9f:29:83:e6:44:44:a0:58:a2:d2:89:2d:b0:b7:
                    a5:62:5d:29:7d:41:ee:8f:fe:81:75:0b:3c:b2:58:
                    c2:a8:2f:5e:79:27:fc:ac:77:15:43:c8:74:fb:9a:
                    97:2a:2f:c0:bd:6c:47:c1:d5:cf:88:6d:77:28:ca:
                    a9:db:cf:be:40:06:9b:ca:50:9d:5d:bf:59:26:64:
                    be:e7:f0:db:df:8e:30:0c:d8:e3:1a:6f:ec:a3:c0:
                    f4:58:50:1a:1b:74:61:0c:f4:2c:e5:b9:37:0f:d7:
                    94:10:d0:60:47:03:d4:7e:96:ba:5d:e8:f3:6c:35:
                    12:86:ab:dc:bc:bb:02:cb:32:fc:88:c6:f9:25:a3:
                    a1:57:3d:ab:b0:bb:5c:de:00:42:06:ac:86:82:fb:
                    95:93:51:5e:34:ae:11:6d:20:06:00:a6:21:f2:ac:
                    6c:ba:d2:e0:a7:51:ff:6b:2d:e8:e4:76:0e:60:ae:
                    7a:30:84:66:d0:14:93:89:e2:db:ae:d2:9b:10:91:
                    18:15:3c:c6:c9:15:78:96:7d:db:01:1f:fe:4f:c2:
                    15:ca:9f:0d:02:da:74:3d:b6:e3:ba:fc:9d:cb:db:
                    0a:fd:80:dd:88:b4:82:8b:5d:ff:dc:aa:bf:e6:d2:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5C:05:A1:A3:1C:3C:F7:F0:33:0C:66:BB:33:3A:D0:DE:D9:AE:55
            X509v3 Authority Key Identifier:
                keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:1e:8d:ec:92:e1:59:bc:68:5d:95:09:06:7a:ee:bd:81:
         cc:58:96:c4:bc:ca:9d:be:68:b0:70:57:03:21:86:2a:6a:2f:
         2f:ea:49:ce:0d:14:85:c6:c2:b3:0f:34:d9:1f:89:dd:11:6e:
         11:46:b3:4a:a3:35:c7:23:dc:71:1e:59:ea:ab:b2:4c:4e:5e:
         79:35:7f:99:64:51:7b:bc:93:c6:d7:2c:68:53:a7:08:ec:29:
         64:47:e3:0a:06:10:b6:d7:b9:f3:f4:7c:67:f8:ef:ec:e8:48:
         08:e4:7a:42:46:16:c7:22:1c:65:4f:92:2c:74:ff:7b:c4:44:
         dc:ba:93:68:ec:6a:91:f0:9a:80:69:1e:37:6d:d0:bb:36:d7:
         6f:7b:77:e6:57:e1:6a:c3:39:b2:f8:eb:3f:04:15:1e:59:c8:
         f8:fa:f1:5d:d0:d6:fc:86:79:60:ed:f3:e5:d4:38:05:6b:3f:
         d2:22:a9:f4:74:a7:1f:9a:3c:54:46:aa:5e:d7:b1:1f:24:22:
         c0:46:dd:e4:2f:9a:07:67:c3:a7:4a:55:c8:92:04:54:13:b5:
         60:dc:8a:15:b5:ba:c1:c3:8e:ef:b9:d7:68:32:3a:c9:21:af:
         67:31:ee:ac:fa:9c:ad:bc:53:2e:fb:0d:84:d6:74:31:a6:42:
         c6:55:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:48:24 2026 by rpki-client