Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
File:                     LWHdlSWcJozW425VvLLLzFNbCog.mft (raw, json)
Hash identifier:          Sj3zP6+Kr41zFonOiGlx1jUYUYt6AWakQqJpIGiFIwU=
Subject key identifier:   2C:EF:78:1A:C8:EC:D4:EF:D8:14:EB:CB:CC:46:09:55:AF:99:BF:67
Authority key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Certificate issuer:       /CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Certificate serial:       01A08C7B405A693D358A8464162C9EA75872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 18:01:22 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:22 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:22 +0000
Files and hashes:         1: LWHdlSWcJozW425VvLLLzFNbCog.crl (hash: n09Cea8CDArvbT6xvMoskBXfEnU97bmRQMG7xM4JztQ=)
                          2: su82rcXot9m4Oy9K0FlOPXjQokA.roa (hash: NI3FeLiF5hrONml+ClMirVnRKzwaGy4tC2KGOZ7IoK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:40:5a:69:3d:35:8a:84:64:16:2c:9e:a7:58:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
        Validity
            Not Before: Sep 10 18:01:22 2026 GMT
            Not After : Sep 11 18:01:22 2026 GMT
        Subject: CN=2cef781ac8ecd4efd814ebcbcc460955af99bf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:43:d7:7c:3f:ae:2f:35:65:84:4c:2a:2c:
                    b5:c3:c8:35:57:e1:9b:5d:a2:40:84:ac:6c:94:ea:
                    42:9c:00:3f:ac:32:f0:b2:05:1f:81:41:b0:06:4d:
                    f7:e7:c5:46:bc:2c:99:67:6d:ab:e4:27:96:d0:3c:
                    4a:e9:23:e8:98:7a:da:a4:b0:db:0c:33:a3:59:a0:
                    90:1e:7f:21:35:2b:aa:70:99:4e:16:51:13:a2:a4:
                    97:a6:a5:8e:41:35:7e:de:37:d8:1a:86:e7:30:90:
                    ff:d9:fc:64:27:e3:38:0d:30:49:9e:f6:41:04:4f:
                    cb:9c:e5:02:a0:b6:6a:69:16:32:92:8a:02:cb:12:
                    09:e4:20:19:13:25:09:6f:53:b2:f3:23:56:a6:f7:
                    4c:71:ef:6a:8f:3a:ad:40:ba:4e:12:07:a5:d2:ea:
                    d0:64:8f:2f:0a:d5:07:4e:ba:b0:0e:89:ab:b9:dd:
                    aa:69:ad:55:04:ac:cc:f2:d4:6e:df:ec:de:e5:94:
                    5b:aa:57:ed:fd:6e:9e:50:7d:4e:70:86:67:66:4e:
                    c9:fd:a9:1d:61:8e:ea:9f:d7:db:b7:c0:5f:8c:ca:
                    95:1c:1a:22:dc:63:b6:8f:a8:fa:94:76:db:89:fe:
                    86:40:0a:b5:46:0d:29:5f:78:7a:93:4a:4a:1e:9c:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:78:1A:C8:EC:D4:EF:D8:14:EB:CB:CC:46:09:55:AF:99:BF:67
            X509v3 Authority Key Identifier:
                keyid:2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:29:11:8d:f2:68:7b:f8:ea:15:62:ed:ad:3a:ff:24:f2:
         e9:a3:3c:3b:1c:44:6e:65:68:a2:3d:36:2a:f2:e1:c6:44:4b:
         84:0a:85:eb:6c:47:86:59:05:3c:8e:58:63:4a:02:cf:e0:95:
         a1:ba:81:5a:58:5e:59:b9:9b:29:d6:05:bb:f6:fe:b5:4c:5a:
         6a:9c:7c:50:2b:1f:c2:68:6e:0c:6d:df:f2:16:25:38:56:15:
         30:a6:95:53:73:43:c7:61:79:43:f6:d3:e8:4b:55:e8:f5:e5:
         71:63:91:e0:4b:47:94:50:c1:fe:a1:b5:11:13:46:16:30:63:
         75:06:e6:55:9d:6c:5e:bb:62:ce:38:6a:da:aa:79:90:c1:e0:
         1e:84:8a:0a:84:9b:7b:88:e2:ba:d8:3b:b3:33:f9:6f:21:a5:
         92:07:e2:2e:4b:b2:e6:8b:59:2a:3e:94:3f:65:97:25:79:a3:
         04:b3:59:03:ba:cf:d0:1e:bc:4a:8f:31:3e:d5:ac:81:7e:97:
         f1:f8:8b:1f:07:5f:de:14:af:4c:4c:d1:39:24:4e:d7:2c:21:
         7f:c5:1a:c4:2a:44:1a:51:b0:8e:6f:dc:5b:4e:91:d1:31:22:
         1f:a1:ca:56:fa:c8:1c:e7:45:0e:89:2d:21:5c:de:d9:9d:ec:
         8d:ca:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:50 2026 by rpki-client