Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
File:                     2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft (raw, json)
Hash identifier:          WY0G+mzmAjb3b9L2DsoSgiqm6Qleb418KSlGgxFKlb0=
Subject key identifier:   0B:B3:9C:65:AD:19:94:BF:11:94:4F:42:3E:8E:CA:E6:5C:4D:2B:CB
Authority key identifier: D8:B5:4E:91:21:9D:6C:A7:64:03:F8:B1:07:F6:56:29:61:39:F2:B5
Certificate issuer:       /CN=d8b54e91219d6ca76403f8b107f656296139f2b5
Certificate serial:       01A0ACAAB64432443F8EA41B0AA01B656CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
Manifest number:          018D
Signing time:             Thu 17 Sep 2026 00:01:03 +0000
Manifest this update:     Thu 17 Sep 2026 00:01:03 +0000
Manifest next update:     Fri 18 Sep 2026 00:01:03 +0000
Files and hashes:         1: 2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl (hash: /7XWYWJ3BgVjqYBOoyJLGwnftN4ZWJHjqfhJXKwcX8w=)
                          2: azJk3jbM95gw45DMayjfbSC1DVc.asa (hash: f78br46llF1nPC5ot0D8hFrl68chpf+BcLtFLar8IO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ac:aa:b6:44:32:44:3f:8e:a4:1b:0a:a0:1b:65:6c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b54e91219d6ca76403f8b107f656296139f2b5
        Validity
            Not Before: Sep 17 00:01:03 2026 GMT
            Not After : Sep 18 00:01:03 2026 GMT
        Subject: CN=0bb39c65ad1994bf11944f423e8ecae65c4d2bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:77:5b:08:9f:8c:ff:13:86:e1:39:79:62:
                    a6:90:67:fc:e5:b2:32:7e:8e:d3:d8:9a:eb:a8:29:
                    fb:70:f3:b4:57:53:3c:24:1d:1d:0d:0b:b8:6c:07:
                    50:cd:20:7e:72:95:3c:98:d2:5c:39:df:85:c1:0a:
                    3c:7e:96:c1:b5:ad:c4:39:73:b5:ae:16:fb:a7:68:
                    5a:31:3d:55:0f:8f:1c:40:e3:ad:64:95:26:d7:e8:
                    f8:9e:32:32:99:d4:b1:90:97:08:c4:ba:88:7f:92:
                    b4:92:47:f0:26:23:77:a8:a2:78:c4:f1:0c:41:2d:
                    ef:85:63:e6:70:a6:b1:8c:33:cf:3a:41:55:a3:5d:
                    8a:ed:4c:e0:fd:78:0f:65:46:cf:d3:85:1f:7b:3e:
                    ca:e7:b9:9e:b0:af:a8:47:52:a0:09:75:e8:40:b9:
                    a3:93:7c:71:57:45:27:6e:72:68:ee:b1:97:0a:85:
                    9b:d6:58:f3:ed:e5:6c:68:37:c2:95:d3:ab:cd:85:
                    57:4b:71:78:4b:75:d3:f4:37:54:c2:16:a4:85:48:
                    16:25:7c:9b:b5:6c:07:7c:10:47:7c:1f:dd:0a:09:
                    dc:51:9d:1d:67:5b:a7:d2:68:dc:34:0f:1c:28:47:
                    cd:45:aa:85:f4:38:db:b3:dd:46:ff:86:88:5e:e4:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:9C:65:AD:19:94:BF:11:94:4F:42:3E:8E:CA:E6:5C:4D:2B:CB
            X509v3 Authority Key Identifier:
                keyid:D8:B5:4E:91:21:9D:6C:A7:64:03:F8:B1:07:F6:56:29:61:39:F2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:1e:22:4a:fe:5a:46:60:2b:ad:2c:a1:64:95:e8:92:30:e9:
         8f:21:93:84:37:28:a3:4b:8b:7e:2d:86:b3:15:e5:e1:3a:b9:
         d0:23:f1:30:28:49:01:8f:29:61:c4:c3:f2:e3:98:b9:b4:4a:
         bf:e2:8d:30:04:36:83:c9:f0:da:39:ae:3d:57:8b:5c:80:a0:
         af:9f:45:34:c4:10:aa:a2:89:b0:da:88:dd:7b:11:fd:56:a6:
         fa:64:07:ce:a0:03:38:19:47:66:88:bf:eb:64:75:11:c4:98:
         3e:64:4e:50:87:cf:8b:a6:2e:39:5e:c8:fb:fb:45:ee:3d:98:
         98:31:c7:17:9b:61:5d:fe:fe:d1:e8:8e:f8:a3:c8:de:ec:1e:
         57:71:44:62:06:74:9f:6c:9d:8f:f7:ad:6b:1c:ed:80:6e:58:
         f8:e6:69:76:2b:c3:5e:88:8f:3c:50:70:6d:32:0c:62:76:d8:
         7a:16:a9:3c:f0:ab:90:96:23:2a:d2:8f:f3:74:87:36:e4:8b:
         ca:a9:85:59:6a:e2:4f:0f:9b:a1:76:13:72:25:84:c2:22:9e:
         58:6c:75:f2:8f:44:92:48:89:53:a9:3d:eb:84:27:76:a9:2c:
         a4:dd:b9:cb:c6:de:bf:e0:2f:96:b7:64:66:d8:b7:69:c5:07:
         4b:66:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:42:34 2026 by rpki-client