Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File:                     1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier:          Wrz197AxETJc9ZtdYnq4DZPpRibOMhbghVnVcmhr8AU=
Subject key identifier:   13:C4:6B:1C:1A:9F:91:C5:A3:0B:21:CE:42:E6:0A:21:FA:11:6D:59
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer:       /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial:       01A0024AA920EB66DEE6041AF0E220963498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number:          1994
Signing time:             Fri 14 Aug 2026 22:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:42 +0000
Files and hashes:         1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: yMZMWeNwG5p0Hqc4AWl5A+7Sk8tOe3ce6fIGZO67aUU=)
                          2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:a9:20:eb:66:de:e6:04:1a:f0:e2:20:96:34:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
        Validity
            Not Before: Aug 14 22:00:42 2026 GMT
            Not After : Aug 15 22:00:42 2026 GMT
        Subject: CN=13c46b1c1a9f91c5a30b21ce42e60a21fa116d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:9a:d8:b6:c3:e9:6e:0a:d1:85:8f:0a:e9:
                    14:b8:59:07:85:fd:90:9b:33:ed:7e:ae:cd:0f:d0:
                    f3:c3:7e:57:67:1f:63:70:af:f8:01:d3:6e:85:af:
                    15:fa:74:aa:f7:8d:a5:0c:f6:f3:36:e5:9e:0e:9d:
                    a1:f9:72:26:65:37:b4:4a:2c:d6:2c:05:e7:bd:ee:
                    f2:23:d0:5d:87:7e:b7:37:28:de:11:b8:53:a2:26:
                    f0:e4:ae:8d:76:6a:96:fd:4a:79:fc:0b:2b:48:57:
                    04:75:85:61:b1:ef:77:14:81:00:09:48:7b:e9:37:
                    11:9b:7a:ad:8a:60:26:8a:2b:26:79:ac:25:a2:81:
                    64:33:3e:44:ae:8a:67:59:4f:45:05:29:ee:8c:a7:
                    6b:30:6e:d8:4a:3b:be:7c:13:84:19:af:a5:3d:cd:
                    83:d2:fb:5a:92:13:89:d8:53:77:2f:6b:43:ef:eb:
                    5a:a3:fd:a2:af:81:e7:7a:ea:46:82:52:79:d1:03:
                    c5:a6:31:19:3e:c4:78:bf:01:09:78:92:4b:36:c2:
                    13:35:88:79:c4:5a:91:1e:1d:83:7f:7a:14:58:82:
                    75:5e:09:7b:c1:e8:b9:2a:6e:d5:37:36:83:dc:16:
                    42:45:1f:8e:9d:11:41:a9:3a:80:62:9f:ef:9e:a4:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:6B:1C:1A:9F:91:C5:A3:0B:21:CE:42:E6:0A:21:FA:11:6D:59
            X509v3 Authority Key Identifier:
                keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:c8:8e:ad:db:a0:c2:9d:6d:0d:09:3e:a9:b0:3a:b1:d6:
         e3:67:c7:33:3a:f7:7a:e1:55:bc:81:fb:91:9b:cd:82:9e:8a:
         23:a4:85:64:2f:e7:4b:4a:cd:3d:c8:4c:fc:37:25:11:59:d9:
         77:b7:6b:9f:54:7b:c5:29:f9:2a:36:52:b2:68:cf:bb:bf:37:
         f7:30:15:d7:46:eb:f1:69:34:be:ab:a4:d7:1f:88:e8:5b:5a:
         16:4b:31:ec:b1:0e:f9:63:07:72:75:1b:58:44:a5:9c:2c:9f:
         2f:35:8f:7c:1c:ee:95:de:8b:09:84:92:fd:06:6c:6a:81:cf:
         b5:96:54:09:de:b3:20:6c:48:01:55:9f:f5:5a:ee:46:e3:29:
         f8:87:50:21:38:5f:0c:b4:56:1d:c0:04:c6:67:c9:79:46:71:
         b5:46:8c:7f:b5:b4:5b:96:8c:f5:4b:32:ce:ca:7a:58:51:16:
         37:f4:20:c5:be:c3:33:fa:12:14:bc:9d:fa:33:93:58:50:5f:
         cd:d9:e3:c8:b7:12:a9:da:b8:e0:33:b7:ed:34:c0:d9:0a:af:
         c0:a0:0f:ce:dc:ec:b6:1d:2c:97:23:bb:9a:40:04:ff:d5:21:
         e1:d8:53:17:11:c4:8a:5e:a2:41:53:a5:8d:a6:78:e9:67:e3:
         b1:37:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:54 2026 by rpki-client