Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File:                     LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier:          udADNwCn6FfTKbroaoC/av8yHdqc+S4M3kkllZYYqvE=
Subject key identifier:   59:E9:FA:CD:17:9C:91:37:77:D1:E8:DA:52:5C:96:35:00:61:C5:52
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer:       /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial:       01A0E09879E9CC9642608D0601C0211F1F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number:          1A75
Signing time:             Sun 27 Sep 2026 02:01:24 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:24 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:24 +0000
Files and hashes:         1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: v/eJD4NH7oakYhU13mhTJCQDfbdQCoIDje7BfzOijUE=)
                          2: z82FEt3pcMufgW4WCxzJHceETKc.roa (hash: 5ZwxV3wn8Z4Xkli1EfsKloCex1LXSENEzKtm05iJtlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:79:e9:cc:96:42:60:8d:06:01:c0:21:1f:1f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
        Validity
            Not Before: Sep 27 02:01:24 2026 GMT
            Not After : Sep 28 02:01:24 2026 GMT
        Subject: CN=59e9facd179c913777d1e8da525c96350061c552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:4a:dc:45:7a:d2:ce:4f:dd:ac:2a:38:5d:
                    f1:64:57:96:2b:20:84:87:ae:55:a2:2c:e2:a2:63:
                    76:bd:15:03:09:8a:be:21:fb:44:62:6e:53:14:8f:
                    04:82:75:9e:fb:e8:78:32:28:b2:1a:95:23:1a:ba:
                    ea:b5:0a:df:d0:09:be:19:a6:76:b9:46:c9:ab:d9:
                    0c:04:16:f8:bb:83:01:2c:54:8e:31:e2:b5:67:3c:
                    49:15:16:2b:30:4d:0e:a4:0a:a6:74:e2:d8:e5:4e:
                    9c:d8:8a:03:c7:8c:4f:06:9b:79:0e:46:38:a4:c3:
                    1d:43:1f:ab:12:3c:97:85:11:26:a9:2b:7a:73:1e:
                    98:ef:f1:e5:b7:ed:e4:7d:32:a9:2b:e9:e6:26:ff:
                    3f:c2:85:ff:d5:68:c2:bf:fa:4f:fb:15:7b:1b:be:
                    af:17:2b:7c:69:5a:a4:40:b0:fc:23:d0:fa:c4:0e:
                    36:19:f5:60:f6:11:6e:75:63:fa:e3:58:2f:ca:ae:
                    7e:95:69:00:9a:e8:23:3b:2e:5d:ca:9c:88:55:e8:
                    ae:21:d0:40:3e:ad:0f:3e:3d:27:a6:81:dc:c0:d2:
                    75:83:33:44:2f:31:09:10:f6:09:51:45:2e:08:af:
                    02:21:76:a1:dc:17:26:2a:92:a3:2c:ca:64:e3:ab:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E9:FA:CD:17:9C:91:37:77:D1:E8:DA:52:5C:96:35:00:61:C5:52
            X509v3 Authority Key Identifier:
                keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:d3:4d:3d:83:41:71:95:96:1b:10:ad:2d:91:25:1a:9d:
         0a:c9:6a:3f:1e:c0:3a:68:d4:4e:26:bd:90:2e:47:51:c4:b3:
         48:a4:43:d3:4a:bd:26:3d:93:b3:e5:55:cc:31:96:c4:88:e7:
         0b:c4:d2:a1:06:99:3c:45:47:6a:66:7a:22:7b:f5:7a:b3:ea:
         02:a2:6c:90:3b:1b:53:70:db:4e:db:9e:6a:6f:d3:ce:89:9f:
         d0:de:c2:23:66:ce:e9:07:b4:11:bd:d8:a2:f2:a7:e4:6d:0f:
         db:b2:31:90:fc:d6:3a:2f:f0:5a:d7:c4:d8:ef:cc:29:81:24:
         e3:fc:98:99:8d:fb:2a:5e:33:0d:ca:71:77:94:41:81:58:d3:
         41:cb:a7:18:51:c4:c4:c6:b8:96:5d:49:9c:d2:59:cb:96:72:
         4f:26:a0:81:82:f6:d3:9f:e2:d4:5a:6b:08:f2:90:dd:45:a2:
         1f:da:d5:c4:b7:63:bb:b6:80:e8:b0:6c:1c:b0:b9:f5:1e:8a:
         e9:69:d9:0a:1b:7e:d2:e0:0a:42:44:cf:82:d9:1d:28:c6:2a:
         2a:ed:8f:68:d7:f2:b0:5e:ee:39:fd:7f:ba:45:17:96:38:3e:
         0d:ae:23:7b:85:3c:86:91:c1:79:c4:51:36:82:48:01:d1:c2:
         66:ee:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:03:47 2026 by rpki-client