Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File:                     lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier:          VyTG5wu+dUqykgXflb+UjNIADzbK52QG09MTrrJtQVo=
Subject key identifier:   70:A1:A5:DA:AE:8E:51:2E:D7:82:BB:9F:2D:9E:75:07:96:1E:09:AA
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer:       /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial:       01A03FA9E8D198D0BEC507F19370F2688B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number:          1A37
Signing time:             Wed 26 Aug 2026 20:01:34 +0000
Manifest this update:     Wed 26 Aug 2026 20:01:34 +0000
Manifest next update:     Thu 27 Aug 2026 20:01:34 +0000
Files and hashes:         1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
                          2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
                          3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
                          4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
                          5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
                          6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
                          7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: xjMi7WAATQ0F3Rh5Am19K5HqB4xizBLNPm8rxPcErCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:e8:d1:98:d0:be:c5:07:f1:93:70:f2:68:8b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
        Validity
            Not Before: Aug 26 20:01:34 2026 GMT
            Not After : Aug 27 20:01:34 2026 GMT
        Subject: CN=70a1a5daae8e512ed782bb9f2d9e7507961e09aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:30:d2:78:43:16:f6:89:2d:fa:ad:af:be:
                    5e:dd:a0:eb:46:ac:1a:54:56:74:75:9b:f6:4f:47:
                    9c:b2:10:2c:c1:b6:1c:34:a4:5a:fd:38:9b:c5:d1:
                    69:31:ee:0e:ee:9b:e4:ed:80:ac:57:7a:08:74:2e:
                    2a:67:aa:b9:0e:54:c6:5e:34:5d:9d:f1:66:86:1b:
                    c0:5b:06:05:06:15:69:ed:73:c2:24:ec:4e:ea:e4:
                    31:ef:c0:01:27:e0:d1:58:40:e3:19:bf:59:ea:e9:
                    db:70:32:6d:3a:df:b9:61:0e:08:14:47:f3:46:37:
                    50:ce:fa:bb:42:72:94:ee:d9:a4:a5:12:44:b9:e8:
                    9d:38:48:9c:14:7f:d3:6e:dd:0c:ad:a1:0c:6e:af:
                    c5:97:fa:d9:96:e9:44:bd:fa:24:03:38:bb:b7:71:
                    82:48:f8:d0:95:82:6c:61:74:8d:a4:b5:e5:b7:22:
                    59:03:87:fb:5f:ec:7e:09:43:c8:f0:58:be:c3:5e:
                    92:0b:6e:6a:f4:4b:bf:01:b7:87:fe:c8:a6:05:e3:
                    46:0a:5c:f3:e9:a6:27:c3:49:1a:cd:2f:b4:59:9d:
                    e5:5b:0d:8b:d6:c7:b3:be:73:89:a6:8d:cc:17:49:
                    2a:95:4c:cd:a5:80:75:0d:d5:b6:df:ee:39:1f:15:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:A5:DA:AE:8E:51:2E:D7:82:BB:9F:2D:9E:75:07:96:1E:09:AA
            X509v3 Authority Key Identifier:
                keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:e1:05:a5:cb:39:cf:59:27:1e:ee:6e:73:4b:1c:70:fc:
         bf:a6:d0:1d:42:17:bd:79:bf:50:e2:b6:fa:4d:79:95:ff:9a:
         5a:41:80:23:10:72:dc:d7:07:05:9d:d2:b4:a1:e7:46:96:29:
         5d:41:57:fc:2e:28:0d:32:cc:3a:26:06:3b:24:66:aa:bc:ac:
         a4:95:e5:25:d9:a3:3d:2b:0b:51:d9:a8:b5:26:3f:77:d8:1d:
         b6:ae:9d:7e:7c:1b:e9:a9:42:4a:8d:1a:e9:06:e0:52:d5:dd:
         0a:06:2a:ed:cc:38:22:32:49:86:74:0b:bd:56:92:58:48:4c:
         7c:70:03:4e:d1:1f:a5:ac:ec:31:60:e7:72:db:e8:03:af:c4:
         fc:c1:16:46:61:b0:ed:5c:09:fc:40:70:69:c8:e2:ef:94:04:
         9b:ce:ee:27:b4:3f:af:c4:3a:68:44:d6:42:91:e2:03:0e:70:
         21:0f:6a:7c:cf:c9:da:ec:09:a3:f3:00:ee:f3:bd:52:a1:26:
         0a:d2:7d:9a:01:14:3a:40:df:38:58:2c:f9:f1:f7:b0:c0:5f:
         7f:fd:d0:98:83:62:ad:f3:45:e8:cd:81:f5:53:fb:b6:aa:53:
         ea:a1:9c:59:ba:8e:e2:7d:5d:7c:77:24:5d:93:53:65:46:f9:
         d0:49:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:36 2026 by rpki-client