Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File:                     lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier:          VNEc7yAlRZ4GWhdOLe+e6B8DkcUfp/o508IvdPPnOfg=
Subject key identifier:   0E:66:17:03:4D:A2:40:7C:01:B7:F9:49:91:EE:CD:8F:BF:31:9C:7D
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer:       /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial:       01A0CA7D87E7291EECA2BD0C7580D8B6C494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number:          1915
Signing time:             Tue 22 Sep 2026 19:00:19 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:19 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:19 +0000
Files and hashes:         1: X52z7I8LU_F06bTG6wIq551tUBA.asa (hash: tPwUMb96PRYOGL7U42nGY4e6LgAf5Gbmjk9QWMHzIqY=)
                          2: Xq3SuMnZU62smroRMp98U4xq9mc.roa (hash: XEObqeJ3NLPZAeeZJznW5UF99OAYc4+AxleAkXeNlyo=)
                          3: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: wqqC1IHBdJvRkM/VQxnCOrRckp7GfnldYCl2n6dJ81Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:87:e7:29:1e:ec:a2:bd:0c:75:80:d8:b6:c4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
        Validity
            Not Before: Sep 22 19:00:19 2026 GMT
            Not After : Sep 23 19:00:19 2026 GMT
        Subject: CN=0e6617034da2407c01b7f94991eecd8fbf319c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:ab:eb:88:7c:67:fd:b8:ff:58:82:9e:4b:
                    40:81:92:f6:1c:a8:9c:f9:e9:1e:0c:de:de:1a:32:
                    49:75:56:43:2a:0f:53:9a:97:a9:2e:7f:41:51:11:
                    d3:b5:3e:41:77:6c:23:e9:ad:71:a8:e4:51:f0:22:
                    1b:81:06:a5:4f:57:3d:55:11:40:ca:a2:4b:77:61:
                    81:5f:db:3b:5f:68:0f:08:0c:ea:60:e2:a0:b5:15:
                    93:bb:e3:24:1b:f1:0e:2d:d8:11:81:5a:14:fc:3a:
                    fc:8a:4f:7c:d0:9e:d1:5f:4f:a4:8d:5e:26:18:e7:
                    1c:8a:f9:36:3f:f4:83:eb:4d:d9:7a:d7:65:19:b0:
                    4d:22:ec:af:61:21:29:cb:91:79:5a:6a:c1:d1:84:
                    37:88:ca:25:75:53:20:3d:e6:c3:7e:61:81:55:19:
                    73:03:6d:d8:73:c2:7d:0c:5b:0e:7a:d1:a9:20:e1:
                    a8:90:09:ec:00:17:63:75:34:5f:e2:57:d1:3c:56:
                    7d:a1:bd:d3:f5:ea:06:28:8a:65:6c:11:59:16:6b:
                    3f:0e:ba:f6:e1:8e:5c:fb:d1:ea:cc:d6:8e:53:fd:
                    f0:4d:7d:aa:e2:55:d2:06:35:ea:69:ad:da:81:22:
                    43:16:62:96:2a:75:7f:3a:f6:cb:28:66:9b:92:d6:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:66:17:03:4D:A2:40:7C:01:B7:F9:49:91:EE:CD:8F:BF:31:9C:7D
            X509v3 Authority Key Identifier:
                keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:9d:fc:3a:ad:11:c4:6b:8d:f0:6b:ae:e3:61:fb:4d:12:
         62:00:06:d5:f7:a4:5a:68:18:02:3a:ae:93:8f:a5:82:f4:fb:
         15:5d:53:6a:6f:c7:20:b0:84:dd:b4:ad:4b:2b:9f:51:05:01:
         3b:71:b7:78:24:ad:8a:47:4e:c2:ad:3a:1a:0f:35:91:08:a6:
         e4:08:34:e2:ce:f0:78:cc:9d:93:3f:ba:3e:04:64:0b:9a:25:
         6d:95:79:7c:f4:bd:f6:9e:26:7a:41:7b:4a:45:7f:60:e6:d9:
         8e:be:d4:de:43:ed:52:42:c4:86:ce:22:d1:26:48:60:f3:1f:
         a6:58:ab:9a:6b:5c:a0:3d:c8:76:5a:1e:97:22:31:cd:1c:11:
         e2:b5:9a:d8:ce:6b:0c:18:d2:34:a3:4b:62:07:f1:c4:15:7e:
         22:7f:b3:5e:a6:16:68:ba:ca:80:c1:4c:38:d2:11:1d:11:fc:
         1c:d9:d7:07:a8:94:14:64:1c:52:15:48:9c:e1:4a:2d:f4:13:
         6d:76:1e:fe:41:d3:90:b6:40:98:82:85:35:8a:3e:15:be:96:
         a6:b8:c0:b6:10:4a:fc:d0:6c:da:cd:96:c8:fb:c8:6e:27:62:
         9d:fa:53:10:fd:24:73:17:9f:e2:d7:f3:2f:5e:26:f3:68:a8:
         b8:42:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:38:31 2026 by rpki-client