Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
File:                     lYM0pMEu57_TbL84WQfAQhA0NsY.mft (raw, json)
Hash identifier:          IMwWLkPFekkhfavoXIU7xYmjP10p4QjOqIp95hE/BBc=
Subject key identifier:   B3:BF:92:B5:3F:82:9D:9F:6E:22:3F:51:F1:B8:EE:A8:F4:CB:45:3D
Authority key identifier: 95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
Certificate issuer:       /CN=958334a4c12ee7bfd36cbf385907c042103436c6
Certificate serial:       01A00394B180A09B85088B20966845502522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
Manifest number:          01A8
Signing time:             Sat 15 Aug 2026 04:01:11 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:11 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:11 +0000
Files and hashes:         1: MrVUIQjfWhMeAygcTn_kB8nchao.roa (hash: CoX55bP+8UcP/V9NHXcXKWX+Bw+cYWaam37t88M/puk=)
                          2: lYM0pMEu57_TbL84WQfAQhA0NsY.crl (hash: tf8EdDHR1uAKQD+mUOZl/uovpknv41yp9plwdDJmlUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:b1:80:a0:9b:85:08:8b:20:96:68:45:50:25:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958334a4c12ee7bfd36cbf385907c042103436c6
        Validity
            Not Before: Aug 15 04:01:11 2026 GMT
            Not After : Aug 16 04:01:11 2026 GMT
        Subject: CN=b3bf92b53f829d9f6e223f51f1b8eea8f4cb453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:80:90:a8:5c:b4:e1:7c:33:51:00:87:a3:
                    cc:4a:5e:e1:42:52:87:08:58:f5:2b:63:d4:b3:7e:
                    2c:d6:6c:d3:29:7a:19:99:16:17:31:88:8f:be:0c:
                    54:5e:64:f2:98:9d:59:3b:b3:23:f5:be:02:92:2d:
                    be:0f:cd:9c:e2:79:0b:ad:9e:c6:68:bc:31:40:c6:
                    26:4a:f3:c3:83:36:ce:38:0e:51:66:44:75:33:75:
                    10:55:0d:12:e2:53:29:10:c3:a6:f2:fb:ab:32:da:
                    64:62:07:0c:f4:3d:8a:81:7e:b7:71:1e:9f:57:11:
                    e5:15:20:ff:3f:94:c3:c2:e5:ad:9b:18:36:0b:53:
                    32:39:20:93:c5:eb:b4:41:d5:5b:e0:77:a7:7c:8e:
                    d7:5e:a9:66:32:7e:97:8e:d5:c1:f4:ee:65:34:21:
                    2f:1a:48:9a:9a:3a:16:13:28:9b:2a:4b:c6:96:96:
                    42:2c:0d:de:80:52:f7:8e:43:45:3d:3e:19:07:ae:
                    fc:80:80:bf:c4:35:9b:83:15:f7:3c:74:99:73:d2:
                    13:d0:c3:b8:af:fa:21:28:32:2d:79:d5:35:63:75:
                    0f:96:85:00:03:b3:9b:f0:cb:79:dd:51:b1:25:a5:
                    a0:e9:36:2b:a9:aa:a6:0c:54:99:6b:cb:43:df:b1:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:92:B5:3F:82:9D:9F:6E:22:3F:51:F1:B8:EE:A8:F4:CB:45:3D
            X509v3 Authority Key Identifier:
                keyid:95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:11:ab:38:99:d0:74:f4:a0:2a:dc:1b:7a:c8:5c:e2:44:34:
         45:df:f2:99:a9:1d:1b:20:13:4b:be:a0:c9:e3:72:a6:78:f0:
         8e:ac:9c:2a:21:55:15:d2:67:54:3e:7a:ec:2e:5a:0d:d5:bb:
         5d:59:1f:4e:1b:54:59:a4:47:44:81:dd:88:cc:34:7a:b4:19:
         75:ad:14:29:30:c4:e5:19:68:ed:eb:b3:b5:5a:95:af:6d:5b:
         dd:c8:eb:3d:2c:a9:c7:1b:73:a7:c7:1d:fb:81:b7:5d:d9:d8:
         1b:53:f6:35:f5:fe:4b:32:7a:f4:b1:76:7c:60:6c:12:aa:50:
         82:cc:cf:96:6e:29:c0:2b:6c:b2:55:6e:35:6d:b2:dd:97:46:
         e2:f2:72:ba:8b:d5:e4:c1:4f:09:13:ae:90:e4:2a:1b:49:a2:
         a9:6d:4b:4f:71:16:fb:c8:48:58:47:aa:c1:1e:48:ad:36:e6:
         0f:d5:1d:68:c1:0d:3b:0f:b3:28:00:b2:86:67:df:04:4d:cf:
         65:d8:5c:fa:d7:42:63:b6:bc:cd:2e:f4:3f:1a:23:f4:11:2b:
         c6:e3:20:9d:ae:d9:c8:9d:d0:3e:d9:c4:14:be:83:0a:cc:00:
         e6:90:fe:e8:4b:73:cb:60:e9:94:1c:a1:32:d2:32:44:a2:39:
         f4:6f:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:48 2026 by rpki-client