Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File:                     LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier:          fpTp29cFlpnGXByd9uiKzVLhBHsnKsfvCsBMzMgr4LM=
Subject key identifier:   E0:B0:30:15:F7:36:8E:DB:05:83:F3:FF:0D:0E:F0:9B:0F:62:03:4E
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer:       /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial:       01A06D5E0396CE0FA2D475E5612072AA469C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number:          0968
Signing time:             Fri 04 Sep 2026 17:01:12 +0000
Manifest this update:     Fri 04 Sep 2026 17:01:12 +0000
Manifest next update:     Sat 05 Sep 2026 17:01:12 +0000
Files and hashes:         1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
                          2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: SJ0NRhgA9bPzImTb36epcTvqM6v54r2ZNkcCTC3UKYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5e:03:96:ce:0f:a2:d4:75:e5:61:20:72:aa:46:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
        Validity
            Not Before: Sep  4 17:01:12 2026 GMT
            Not After : Sep  5 17:01:12 2026 GMT
        Subject: CN=e0b03015f7368edb0583f3ff0d0ef09b0f62034e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:fe:53:90:c8:eb:03:84:97:1b:9e:09:42:
                    1a:db:cd:53:90:07:51:67:a2:c5:c0:ab:93:2f:3d:
                    ef:97:b8:0d:fa:24:0a:5e:41:1a:2e:ec:de:e8:1d:
                    8e:8e:81:36:ca:34:a5:c4:43:b0:bc:3e:ff:69:bf:
                    38:15:65:38:38:9b:b6:e6:0e:e7:9d:3f:7b:9d:ea:
                    1f:82:c3:ba:fc:00:ef:a8:2c:1c:95:40:11:b7:01:
                    29:65:6c:4c:dd:5f:a6:9f:b5:80:ab:d2:6b:e8:b5:
                    bf:33:4f:03:1b:91:77:bc:31:92:21:fc:54:0c:45:
                    d2:b3:5a:da:d8:53:2f:27:8c:d2:70:b4:b5:a7:96:
                    a1:fc:f7:df:5c:c0:94:0b:d4:82:14:1b:8f:c7:cb:
                    e1:2a:e7:5b:fb:e7:ec:bb:e0:48:a6:38:ce:e6:ca:
                    0e:bf:44:1f:5f:c0:06:ad:4e:df:76:03:c4:4b:04:
                    29:6f:a3:6c:19:4d:11:f9:b6:b2:40:3a:07:62:3d:
                    79:eb:e8:92:ba:4e:b7:5f:c6:2b:ae:19:4c:5c:58:
                    1d:41:bf:4e:f7:ef:ef:ba:2f:3a:51:5b:bc:9d:8e:
                    23:36:0a:0c:82:eb:8a:79:1a:3f:18:28:c0:a7:cf:
                    4b:f3:a2:21:3d:02:b9:03:8a:e2:ed:9b:97:cd:bb:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B0:30:15:F7:36:8E:DB:05:83:F3:FF:0D:0E:F0:9B:0F:62:03:4E
            X509v3 Authority Key Identifier:
                keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5c:84:9d:93:53:57:37:2f:39:ae:cc:82:69:92:29:be:d3:
         25:51:8f:45:f2:84:5d:de:9b:b5:dd:e1:b7:d3:4f:27:8d:e5:
         64:cb:b3:42:e3:89:1d:37:2d:50:a2:b1:96:58:b8:ae:81:98:
         1b:61:36:b3:68:ee:a6:65:2a:45:8d:18:dd:ce:6d:e9:5e:d1:
         da:86:6f:01:80:ba:a5:84:80:a1:73:d3:84:20:14:de:28:f9:
         37:bf:e2:5a:ec:aa:88:1a:43:2c:c7:62:4d:73:af:56:e6:05:
         8f:b9:cc:3c:ad:0b:7f:67:a3:84:05:3a:f8:60:f7:22:27:3a:
         d0:f1:96:82:62:91:bc:3a:f2:38:8d:d1:01:dd:52:5c:a4:d5:
         8f:ed:5f:0d:72:7b:48:b5:ab:90:96:87:b3:72:24:57:ab:56:
         34:10:b0:8e:16:17:eb:88:34:a1:e4:0c:4e:3e:b0:cb:b0:75:
         14:3e:42:e9:54:bb:a9:6a:4d:24:01:80:a0:69:ec:8b:1d:9a:
         98:fd:8a:b9:79:0a:e8:ec:a2:98:e7:00:c0:69:03:3f:31:2a:
         dc:40:59:4d:0f:41:20:04:06:be:0e:ce:c5:3e:3d:32:37:a2:
         1d:98:79:ba:b9:83:0e:fa:81:57:17:3c:cb:f5:72:4a:b1:d0:
         2c:12:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:53 2026 by rpki-client