Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
File:                     lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft (raw, json)
Hash identifier:          hNCpJA5gMz37BAnF1lz4DL+rRNW+0qL4Zw6FMCJXU0M=
Subject key identifier:   91:72:E0:5D:00:B3:1A:1B:7C:7C:F7:88:C1:5E:F1:6E:C6:A6:92:2D
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Certificate issuer:       /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial:       01A0DD96FE3D9538F76CD3E59DE32E2E599A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 12:00:55 +0000
Manifest this update:     Sat 26 Sep 2026 12:00:55 +0000
Manifest next update:     Sun 27 Sep 2026 12:00:55 +0000
Files and hashes:         1: ItN4mW12iVyH6BrYFKfPQy7lr08.roa (hash: /6ILhaZ9nnrQCe2x3LhpJcOwVGQyxXtUIIDXznVVDPA=)
                          2: lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl (hash: p33i3f78fWhhzDXRUHv4FAQPlZuuE1484aQ1wnjBpG0=)
                          3: qSB-Fr5on66jEvQLa_-E0yx5agQ.roa (hash: /d6onL0LuXW1jRb8TBZIzkovZYA/Bhrij6W7usA00vo=)
                          4: yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa (hash: QiANg/lT9BhVA0Gyjnvg/6FNpwOrRHBchB0Jd5cbcxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:96:fe:3d:95:38:f7:6c:d3:e5:9d:e3:2e:2e:59:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
        Validity
            Not Before: Sep 26 12:00:55 2026 GMT
            Not After : Sep 27 12:00:55 2026 GMT
        Subject: CN=9172e05d00b31a1b7c7cf788c15ef16ec6a6922d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:91:a1:62:c0:d8:4b:aa:eb:4e:aa:8b:03:
                    8a:7c:e2:4f:4c:8e:cc:fb:e0:65:b2:60:ee:9f:3d:
                    bb:7d:ed:e0:fe:04:8e:3c:ab:f0:4e:2e:33:49:1f:
                    0e:54:a3:f5:50:c1:26:33:d3:5f:3f:a5:18:5c:63:
                    03:e6:41:2e:33:08:c0:15:f7:ae:ec:be:26:c2:bf:
                    0f:77:c0:cc:62:09:c6:d3:9f:3d:ba:64:be:25:38:
                    3a:7c:0d:b2:b8:e5:9d:03:51:a2:7e:ae:e4:8b:57:
                    f5:ab:c2:e8:2f:44:62:73:d5:fb:3c:0d:32:d7:ce:
                    a6:24:85:90:ed:56:07:5d:a7:03:58:d1:1b:ef:0f:
                    0d:7d:d6:af:d0:c5:64:1d:20:b6:17:81:72:67:01:
                    02:f1:75:51:52:31:83:c9:a4:f0:77:53:05:54:30:
                    09:29:d2:6c:d3:cb:b1:f8:d2:0d:9f:e6:86:b4:7b:
                    55:92:79:20:75:3b:b9:45:9c:3b:a1:45:ac:35:d3:
                    82:85:7e:43:b8:95:30:dd:f6:cc:18:cf:2f:b6:aa:
                    bc:f2:5d:da:85:46:61:80:a0:1a:c1:fd:4c:ed:6f:
                    dd:a7:41:72:69:82:5e:f7:85:bb:b2:c3:db:9c:fe:
                    a5:cf:55:b6:58:1e:bb:cb:d2:f7:eb:54:30:dd:82:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:72:E0:5D:00:B3:1A:1B:7C:7C:F7:88:C1:5E:F1:6E:C6:A6:92:2D
            X509v3 Authority Key Identifier:
                keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:df:da:43:1b:c5:40:24:82:8d:e6:b7:de:e9:fe:7b:43:
         e3:a5:14:ec:a9:59:ce:8c:c3:d0:4b:8e:ed:87:59:45:52:c3:
         9c:af:ae:33:28:99:b5:36:94:9d:b9:2f:99:0b:c3:95:2c:a5:
         60:b8:46:45:59:76:9e:b6:a9:1b:87:f9:98:3b:09:80:b7:76:
         98:d2:0f:a0:1e:4b:e7:48:63:60:f2:52:6e:57:36:cd:27:3c:
         f6:3c:77:cc:09:69:a3:50:39:e6:ab:9c:35:e1:01:b8:0b:48:
         5c:d5:45:de:f3:d5:46:23:3e:ac:2a:9f:01:77:49:70:b0:9a:
         fa:0b:16:15:5f:63:12:62:20:a9:f6:61:30:57:1b:96:ae:5a:
         4d:db:b2:a4:f5:f6:26:af:a7:a5:b4:ae:2c:18:4b:61:9f:2c:
         0a:d2:32:d8:c5:4e:d5:97:4c:64:f8:bc:81:ad:84:53:19:f8:
         29:f1:4a:19:6a:be:31:c0:c3:95:09:25:a4:f7:41:00:4a:06:
         77:09:4b:64:10:6e:81:55:4f:e7:f7:17:e4:20:83:95:89:4c:
         01:b9:47:eb:e2:72:7a:90:44:99:df:9f:52:61:aa:8f:97:dc:
         de:a2:ae:f5:ce:40:94:7b:da:85:d4:c8:71:98:3d:f6:78:58:
         40:98:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:44:39 2026 by rpki-client