Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File:                     LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier:          98MriAOhGEfclzRnN0aOYd2SjgUqQXAne9Tgb1vr9I8=
Subject key identifier:   B0:C0:E0:92:0A:CC:36:97:74:5A:FF:70:F5:D5:A0:C1:05:32:65:FE
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer:       /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial:       019FF7FEF7B13ABBA22EE60AF72FD4B4684E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number:          0164
Signing time:             Wed 12 Aug 2026 22:01:49 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:49 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:49 +0000
Files and hashes:         1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
                          2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: g1y4DRoDTWzS4fgrMbUbdojthjT+HFoXSDzzY6Tq+AQ=)
                          3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:f7:b1:3a:bb:a2:2e:e6:0a:f7:2f:d4:b4:68:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
        Validity
            Not Before: Aug 12 22:01:49 2026 GMT
            Not After : Aug 13 22:01:49 2026 GMT
        Subject: CN=b0c0e0920acc3697745aff70f5d5a0c1053265fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:b0:d9:1b:6c:04:a7:2e:a6:36:01:21:af:
                    77:0a:06:b6:c9:c7:4f:0c:39:c9:f9:0a:dc:17:a1:
                    f3:53:8c:ef:67:3b:27:f8:7d:c0:18:be:28:1d:62:
                    eb:53:7c:d2:27:2d:c4:43:fe:2b:bb:74:09:98:00:
                    4b:2c:76:93:91:c4:b7:e3:c2:0d:e8:e6:28:ac:1e:
                    1c:45:8e:17:90:2e:57:82:cf:0e:6f:07:49:2b:5d:
                    2a:d5:76:77:f6:06:3f:4e:2f:a1:c8:b6:21:dc:a6:
                    1f:af:6f:0a:ac:b7:ce:50:8a:b7:c7:37:f7:f4:e3:
                    89:a7:a6:1a:9f:32:30:ab:a2:d5:e1:a8:c6:5e:a1:
                    27:64:82:0c:3f:ab:0d:1d:73:1a:47:8d:23:ed:e5:
                    ad:31:37:c9:fb:df:4a:c1:4a:3d:39:4a:6a:7c:09:
                    ab:9c:90:a1:49:77:d8:51:0f:c3:43:17:b4:e9:28:
                    2c:6d:63:ff:df:87:ba:11:20:e3:1c:c6:71:50:75:
                    2f:0d:ed:44:0b:9b:e9:92:9f:0e:9a:7f:b8:ff:18:
                    fa:1e:ba:2d:57:a9:2c:98:58:96:89:54:9f:9e:6a:
                    e0:0e:66:d6:99:69:db:98:95:9a:12:35:b0:d3:b7:
                    e5:ae:c5:da:11:0d:06:d6:de:7f:21:5d:90:77:94:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:E0:92:0A:CC:36:97:74:5A:FF:70:F5:D5:A0:C1:05:32:65:FE
            X509v3 Authority Key Identifier:
                keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:60:ab:0a:29:83:0e:c3:75:23:ab:e2:ab:f9:74:f0:94:
         98:7d:4f:fa:94:46:48:9a:f4:a3:00:d9:78:14:d0:e0:fc:4d:
         4b:7e:e9:f4:e7:90:4b:c0:48:b6:e2:9e:b4:f3:b9:bf:0e:69:
         73:59:30:9c:13:54:02:3d:98:98:1a:a1:85:f8:7f:a5:80:9c:
         80:c6:ba:8c:a2:cc:05:8f:5c:c8:2e:c6:09:3e:c2:01:7f:c1:
         59:5f:cd:a5:8b:45:2d:df:11:f2:ae:39:f5:69:44:2c:b6:21:
         1c:43:29:85:cb:f1:09:1a:6c:eb:ae:75:56:d7:d4:54:13:5e:
         d0:2a:94:0b:24:9b:e7:8b:ce:d9:c2:b5:cb:79:d3:45:68:4e:
         90:18:d2:e3:42:2b:6b:68:9c:18:07:08:d4:fc:84:cd:ca:fe:
         f2:cd:db:b4:3b:38:2e:e2:1a:03:b0:78:6e:96:95:1b:d7:22:
         aa:33:05:ce:86:86:01:7b:72:ca:ed:64:92:8b:0a:04:75:5e:
         5e:93:ca:36:d8:af:dc:bf:e9:5d:db:8c:ff:27:b3:b0:e1:73:
         9d:e2:ee:dc:f8:d9:6c:ee:8f:5f:16:25:f5:8e:24:e7:d9:ff:
         d0:e3:87:18:88:92:ce:f5:29:19:8a:d5:18:ea:fb:9e:fe:e2:
         82:2e:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:43 2026 by rpki-client