Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          WDfTzcPh0qDvGVdrSi8TsJu64zhl0AbYlq2kVohjNd4=
Subject key identifier:   97:C1:9D:48:9B:3B:67:7A:B2:7E:7E:58:BF:EE:A9:FD:79:64:80:F4
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       01A06E70EE814871D4B94956E93E83044033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          1A3C
Signing time:             Fri 04 Sep 2026 22:01:29 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:29 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:29 +0000
Files and hashes:         1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
                          2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: +oDxbGnCy9D1NX89euwqj0LYiSVDUBeSChBzKvbEbXQ=)
                          4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:ee:81:48:71:d4:b9:49:56:e9:3e:83:04:40:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Sep  4 22:01:29 2026 GMT
            Not After : Sep  5 22:01:29 2026 GMT
        Subject: CN=97c19d489b3b677ab27e7e58bfeea9fd796480f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:e9:77:a1:34:1b:ea:60:91:d3:f3:30:42:
                    0e:72:56:c1:58:fa:e6:96:34:0b:f9:1f:b2:91:b1:
                    61:a2:f8:c1:8c:dd:cc:3d:9b:ac:e2:91:01:56:2f:
                    b2:9e:c7:2e:31:46:27:41:93:de:59:3b:ad:14:27:
                    3d:b2:d2:0a:3d:19:f7:fe:e3:f2:4b:1c:0c:9a:b7:
                    bc:d9:f2:81:86:5f:af:61:f8:b2:45:99:61:11:51:
                    f8:79:ba:c6:9b:3b:f1:ea:c3:14:c6:b4:17:5c:3a:
                    ae:12:0e:63:d2:f5:2e:28:8b:63:69:13:98:95:7a:
                    a1:6f:33:54:a0:99:b4:32:51:03:94:36:48:03:bc:
                    bf:5a:bc:05:fa:50:0f:44:f4:af:7d:b6:28:9d:11:
                    f9:84:d6:50:a2:d0:09:d3:21:28:7b:02:f4:02:5b:
                    ef:5f:f1:2a:52:1c:9a:6f:d8:4d:a7:77:03:35:b2:
                    c7:c9:c6:4f:3d:f6:8a:66:f8:2b:43:c4:b0:33:b7:
                    c3:36:5c:99:cd:5b:ac:89:39:8a:c7:02:88:95:41:
                    6f:a0:5d:49:21:23:cb:19:60:ce:f9:8b:2d:3d:da:
                    c3:76:38:e4:2b:cf:54:7e:06:82:f6:4c:3d:fb:77:
                    c7:df:0f:49:0b:5d:b5:5f:40:05:2a:a8:f7:de:32:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:9D:48:9B:3B:67:7A:B2:7E:7E:58:BF:EE:A9:FD:79:64:80:F4
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:d2:9c:9d:0a:f0:c1:04:09:8b:31:06:90:47:7b:fc:cf:
         70:26:ca:9e:48:3a:ad:2f:37:71:81:ea:e8:48:4d:7c:3a:1a:
         8b:d9:a7:2e:d8:ad:bc:59:03:00:49:c0:4a:3f:1a:c8:4c:2c:
         c9:d9:ec:81:58:c9:33:4c:00:3d:16:2c:05:19:33:cd:0b:d8:
         1e:fb:fe:28:67:0c:6b:7c:3b:91:b0:61:89:a8:de:09:73:d7:
         0b:ad:69:cf:9e:49:85:9f:62:74:ab:1d:d5:bf:84:68:03:d7:
         c9:e5:3b:db:e4:b5:46:04:6f:23:69:88:8c:30:2a:7d:6f:ad:
         81:af:da:ca:c6:7a:84:27:2f:ef:76:1a:ab:9e:0d:e0:78:6d:
         78:2b:a2:b9:3a:e8:76:f6:77:2b:2a:cf:b0:22:5d:63:75:7f:
         82:4c:16:ab:cc:bb:79:67:89:39:27:8c:fc:3f:d4:ce:68:de:
         d9:d1:d2:38:e3:4a:18:9c:26:63:1d:0f:65:ac:93:bd:8d:9f:
         e7:18:3b:5d:66:5a:1f:22:78:91:11:4f:e2:e6:dd:2a:06:1a:
         73:2a:68:19:89:97:93:de:3e:71:f6:98:14:cc:1d:00:3c:2b:
         74:7e:39:e2:b2:72:bf:6c:12:2c:46:7f:74:a1:92:3e:e1:4f:
         4a:6b:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:44:35 2026 by rpki-client