Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File:                     Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier:          ZDnglucNl8mHxbxrYoE8Utwje1C0izyZH7fCDgBlJJw=
Subject key identifier:   07:6E:56:A4:9F:26:8E:53:47:6F:68:F7:C7:4C:CC:AE:25:B1:00:89
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer:       /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial:       01A0D192D5D62B3408BED0A2213AEA402FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number:          06E0
Signing time:             Thu 24 Sep 2026 04:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:56 +0000
Files and hashes:         1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: jwUrdSBwARNQD0SS86PbpbueAjKE5RYMYjkpcQZz8Y0=)
                          2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
                          3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
                          4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
                          5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:d5:d6:2b:34:08:be:d0:a2:21:3a:ea:40:2f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
        Validity
            Not Before: Sep 24 04:00:56 2026 GMT
            Not After : Sep 25 04:00:56 2026 GMT
        Subject: CN=076e56a49f268e53476f68f7c74cccae25b10089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:8f:08:c5:f7:3c:3a:c9:fb:68:23:e8:d1:
                    a8:4a:42:ad:39:89:82:cd:28:28:a4:bd:1c:0e:77:
                    70:7c:f3:31:ed:2d:89:65:69:3a:0e:13:17:27:cf:
                    71:7c:69:2c:86:a4:35:f4:da:35:7c:71:c2:12:2b:
                    84:99:d7:90:b7:b5:88:b9:d3:d6:37:c6:4a:36:e9:
                    e4:b6:32:e7:7b:ae:59:13:f8:80:5c:1c:b0:9b:7e:
                    18:53:cf:18:03:1b:30:3e:86:5b:5c:7b:5a:8f:35:
                    d7:87:61:f6:86:59:91:0e:e8:f7:6a:09:5c:a3:d9:
                    6e:67:6f:2d:22:c0:31:6a:dd:85:ba:4c:73:ac:9e:
                    b3:20:66:a2:a4:db:07:b9:81:9e:db:35:7d:38:7e:
                    b9:07:6f:06:9d:48:60:01:d4:39:61:b9:5a:19:4c:
                    4d:5f:9f:d7:8c:05:87:f3:28:ba:41:5d:2e:fe:c9:
                    cd:af:fa:4f:19:40:00:aa:a8:06:f3:f8:d0:5c:02:
                    9a:34:5d:6a:aa:41:7e:f9:5d:1e:e8:30:8d:c6:09:
                    1d:07:db:45:bb:52:5a:e3:a5:91:6e:d0:3b:7d:c9:
                    59:42:f7:dd:f9:f6:7f:4e:bc:d3:fb:2d:b5:78:5a:
                    1b:4d:bc:67:6a:3c:44:25:dd:a3:36:d9:36:19:8b:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6E:56:A4:9F:26:8E:53:47:6F:68:F7:C7:4C:CC:AE:25:B1:00:89
            X509v3 Authority Key Identifier:
                keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:e2:89:ce:2b:4b:4b:27:24:ee:5c:91:24:52:c3:fe:74:
         9f:da:62:1d:be:29:4b:01:cb:e8:58:d4:09:50:3e:6a:11:d1:
         33:59:b8:18:a4:52:23:78:77:9d:00:08:12:80:06:73:85:75:
         93:44:4d:37:2a:61:1f:b7:29:5d:6c:72:c2:ad:2f:21:57:a5:
         e5:ea:c4:28:d2:3b:73:87:c0:91:2d:40:c5:d2:a5:63:b0:27:
         ce:de:92:26:43:aa:a7:f7:2e:82:b5:8a:da:77:04:b4:9d:5c:
         c8:a1:80:bd:7f:e2:1e:d2:20:c6:28:8d:06:86:64:90:29:e6:
         97:1b:46:cf:84:4f:42:ec:1b:0b:af:47:7c:7f:2c:b7:1b:08:
         bf:d8:00:4d:02:d0:ff:25:2b:46:28:bb:43:15:6b:7f:21:1d:
         c0:ba:48:93:e4:05:bd:24:ce:a7:13:85:da:9d:19:83:ea:46:
         4b:e3:0d:90:35:a8:48:0e:a7:90:98:fe:fa:44:21:f7:c8:68:
         bd:1d:3c:ea:79:56:7b:14:dd:8e:d0:46:4d:72:62:e1:28:b4:
         15:e7:71:05:89:d8:5d:9c:b1:d8:fa:c1:64:86:cc:07:09:f8:
         2c:c4:77:65:17:b7:a8:34:15:ee:68:1a:22:0d:be:f9:7b:6d:
         19:e4:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:13:30 2026 by rpki-client