Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
File:                     LAe_O3M6XDpx2cqMNiaUjfcScFs.mft (raw, json)
Hash identifier:          73viStn6LTCrxUe61rJl19PVOcUIhR/WZxMPT8lJPC4=
Subject key identifier:   7A:00:83:10:6A:1D:5E:70:C6:A2:7F:7F:11:E4:4C:BB:C2:46:A3:37
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Certificate issuer:       /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial:       019D0E8D9A5C421E0F0C8569A34366D9947B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
Manifest number:          A8
Signing time:             Sat 21 Mar 2026 04:00:54 +0000
Manifest this update:     Sat 21 Mar 2026 04:00:54 +0000
Manifest next update:     Sun 22 Mar 2026 04:00:54 +0000
Files and hashes:         1: 7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa (hash: r2glHg/T+YpYXCIT8+l4YxupOX2jMrXd200bHTuRVAA=)
                          2: LAe_O3M6XDpx2cqMNiaUjfcScFs.crl (hash: 37S+pCNYeooqQA7P3t7IRUdPUtcUNgtV+/bj0N+0qzI=)
                          3: SXH057UJKzS7rHzBDJcA4ENrOvM.roa (hash: xcKm9OrMnT6THeGkJMgEPYfZ1pZ8IIDbrRlbFdC0Bww=)
                          4: ajjWFLhMNU-QuF21tZ1GMQOJmmo.roa (hash: HwQXBdSljqHyOy0pToc7H06Y8W7GqL4m3uBiGpV22c4=)
                          5: gIa0siDHBQUIVJC-h9wzZHsz_wo.roa (hash: Q05EkkWFRXXj0iriIUfeqc3S/RvQaY5kNMIte9Ex2Us=)
                          6: p2oqcrVTplHu4mo_lRPqrhkXin0.roa (hash: HnueGy98kJdrZiLw6MwMnbOvXwxCTg0BkoU4RdrjPQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:8d:9a:5c:42:1e:0f:0c:85:69:a3:43:66:d9:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
        Validity
            Not Before: Mar 21 04:00:54 2026 GMT
            Not After : Mar 22 04:00:54 2026 GMT
        Subject: CN=7a0083106a1d5e70c6a27f7f11e44cbbc246a337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:6c:f0:22:41:28:1d:2c:77:68:c2:ad:20:
                    cb:b1:97:e0:4d:4c:63:37:82:fe:40:69:11:33:5c:
                    a0:6c:e2:93:4f:6e:d4:1d:00:40:5a:a7:7a:2a:c4:
                    3b:f9:f7:a1:4f:fe:95:6e:cf:46:e5:d8:1e:8b:f5:
                    76:e1:0b:79:2a:31:16:81:0e:44:b8:71:2c:f6:7d:
                    35:07:80:08:44:6d:99:c6:79:c2:3d:8b:55:f8:ca:
                    f8:6d:9a:2b:14:f9:bf:50:cf:d1:71:05:ad:2d:ea:
                    81:23:24:a9:c9:23:c1:f6:f8:12:43:b5:95:3a:ee:
                    a7:14:72:70:9f:85:1a:9e:ef:ff:52:92:e2:80:3f:
                    67:d6:a3:33:3d:fe:f7:28:01:c4:e2:c8:b8:95:06:
                    86:03:5b:a1:ba:a8:2d:8a:fa:06:09:31:4c:90:38:
                    12:d2:8d:12:17:dd:d4:31:b4:63:5c:0e:c5:18:80:
                    94:de:55:93:fa:b0:9e:ea:85:b4:5d:f7:bb:20:65:
                    ef:74:09:00:71:fc:91:ea:b2:cd:e5:04:5a:c9:17:
                    b0:35:4c:82:06:4c:fc:13:65:96:6c:d0:88:5d:4d:
                    5e:be:9d:69:0c:34:86:41:9e:e9:12:38:af:2b:9f:
                    be:1b:ac:24:e5:d9:40:54:48:c5:1e:09:b2:78:79:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:00:83:10:6A:1D:5E:70:C6:A2:7F:7F:11:E4:4C:BB:C2:46:A3:37
            X509v3 Authority Key Identifier:
                keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:6d:52:04:56:b9:07:69:5c:29:75:17:f4:a9:61:e4:30:
         ec:49:92:f5:ac:c3:2e:48:46:5d:72:5b:71:1b:a5:78:7f:10:
         c5:71:f2:2e:80:49:21:af:e8:e5:aa:a5:c3:57:04:49:6c:1f:
         65:83:d1:3b:5e:be:37:8d:85:b6:be:f6:24:8e:46:95:4e:6f:
         bb:f6:c6:f9:4a:2e:cd:29:41:19:11:e4:11:a8:16:cc:a6:43:
         45:a4:3e:6f:91:50:19:e3:69:bc:8a:ce:6c:76:bd:49:9f:03:
         5e:85:90:2f:ce:56:b1:66:fc:cd:5e:44:2c:46:31:e4:0f:c1:
         b8:a1:98:5f:db:ab:f4:c1:9b:66:89:0f:08:c4:d4:4b:94:0f:
         40:6d:1d:f6:11:2b:5a:8e:42:6e:70:85:8a:e1:c8:3c:5f:c5:
         fc:59:2a:6e:9f:fa:06:95:f5:63:b9:e8:88:75:bf:30:51:5c:
         d0:a9:8f:6b:12:5c:54:e3:3c:88:fd:90:bd:af:80:1f:74:67:
         d3:58:88:82:3c:ae:18:31:16:86:2d:62:1e:1b:47:0b:83:df:
         53:7d:57:c9:3e:93:73:dc:45:20:9a:45:03:32:8f:fa:b7:cc:
         9f:4a:11:bb:ba:ef:59:39:ff:f2:cb:c4:81:7c:6a:4f:99:be:
         83:05:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:41:05 2026 by rpki-client