Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File:                     lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier:          JDudPbo2BiuQSV2Gv9N5pRSFQ2hMpp7Qr6bRjvT5D3M=
Subject key identifier:   D5:77:1D:21:8A:53:E2:EC:00:4B:30:51:92:17:95:5D:FF:01:12:2F
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer:       /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial:       01A002EFE87B1A8DD7C2B2FA8A8CD3181DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number:          03EC
Signing time:             Sat 15 Aug 2026 01:01:12 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:12 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:12 +0000
Files and hashes:         1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
                          2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: q3jHb8XFcmxHnYT9FC81/LfwgD3v753osI4b8bEG6+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:e8:7b:1a:8d:d7:c2:b2:fa:8a:8c:d3:18:1d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
        Validity
            Not Before: Aug 15 01:01:12 2026 GMT
            Not After : Aug 16 01:01:12 2026 GMT
        Subject: CN=d5771d218a53e2ec004b30519217955dff01122f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:9b:8d:0d:85:b8:2e:c0:af:40:4c:2c:dc:
                    a8:70:19:a9:4e:10:58:06:e4:ff:5d:b8:cf:77:36:
                    34:ee:61:b5:2b:3f:b4:54:60:94:da:4b:9f:2f:e6:
                    0e:fe:7f:31:4f:02:75:f6:16:6e:b6:2f:34:70:5c:
                    ae:a8:fd:4b:f4:61:fd:89:ce:45:60:2a:32:29:df:
                    33:60:08:cd:1e:a0:80:f1:07:ce:4f:85:e3:1c:0e:
                    1d:b0:c7:04:6a:55:f4:b1:96:e0:45:f8:78:65:08:
                    93:98:09:e0:9a:0f:7f:3d:73:19:3d:02:f5:70:e2:
                    44:53:eb:8f:c9:04:77:9f:89:28:9e:5d:a4:f5:9b:
                    0d:39:e3:94:c6:82:d3:df:ff:48:81:f6:6f:12:40:
                    ef:18:ef:e2:be:64:6f:c8:52:a7:3c:04:2e:c0:93:
                    25:5a:fb:74:34:3f:08:28:24:7e:4c:2d:60:2f:41:
                    ef:76:99:57:7d:d5:b2:1c:c1:20:03:45:45:08:7f:
                    20:9a:42:d9:66:a1:be:ee:1b:23:84:1c:33:e1:0d:
                    d8:1c:b9:3a:54:be:ba:e2:ca:4b:bf:b4:a6:8c:62:
                    6c:57:89:16:a7:56:d0:f7:70:40:48:c7:b4:fe:aa:
                    07:13:fd:fc:a7:4a:1a:3b:40:17:88:90:4b:52:1c:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:1D:21:8A:53:E2:EC:00:4B:30:51:92:17:95:5D:FF:01:12:2F
            X509v3 Authority Key Identifier:
                keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9c:ff:40:25:ed:92:02:ab:ba:96:24:a1:17:07:73:6a:5e:
         58:89:e3:c6:4e:af:e8:cb:07:bb:7f:9a:67:75:79:73:dd:9e:
         7e:d3:84:13:ff:0b:6f:e9:76:7e:7c:c7:9a:b8:e0:61:87:db:
         6b:b9:5c:a0:b8:ec:79:0c:07:3d:3a:87:7a:e2:26:be:ed:12:
         41:8d:32:dc:7a:1e:55:ed:26:a2:2e:2e:13:e5:6a:51:fd:70:
         7b:80:a6:d1:ac:2a:f0:b8:e1:4b:d7:7d:85:73:8d:90:37:ef:
         96:15:21:48:a4:a9:f9:15:c8:c0:65:8f:0a:3a:0c:94:9e:ee:
         64:fd:54:7e:84:ba:79:ea:0f:23:bb:ab:27:4e:ce:ef:77:7e:
         1b:cd:10:55:ea:02:c2:f7:85:37:cf:e4:4a:d0:ed:c1:f7:9e:
         26:de:fc:b9:5b:59:c9:f0:c7:f2:3f:9c:b0:77:b4:f5:1a:c6:
         cc:51:80:2a:6a:76:c0:e6:4f:00:f0:86:55:b8:49:9b:24:9c:
         8e:2e:80:bd:07:c9:74:ec:5a:ca:26:20:9c:29:f8:13:28:83:
         48:b0:02:54:ee:b6:dd:b1:0f:aa:36:31:77:06:aa:12:41:84:
         d4:c2:d7:93:a4:a2:e8:59:87:c6:5c:0d:36:54:ee:77:bf:44:
         ff:41:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:28 2026 by rpki-client