Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
File:                     lICKbds0DQqKISfGTaKNdw7t3pM.mft (raw, json)
Hash identifier:          7TMtyYMD/tPX9SfYs1HDNnojYrLp7u4kp27FFgFy9Gw=
Subject key identifier:   DA:2F:87:74:BE:BC:5A:01:A8:B2:76:A3:20:FC:E8:A3:77:F3:06:21
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Certificate issuer:       /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial:       01A0C6A0EF58E104D75E61A08E66264EF826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 01:00:30 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:30 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:30 +0000
Files and hashes:         1: 0_aFekBMdFqNOphj1MEzPKVtmT0.roa (hash: YB/bN3AAooYOfmHTAnQ/FECmO0TWzvsn8QhVsoUQzUY=)
                          2: 64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa (hash: BeGDi5VESth0C9pJC6qZlN6Zb8k5M9gWJV+LnTk4B3Y=)
                          3: Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa (hash: jyeskLTbwVPBESh5W51wXjNVOuucTxX63WTMSQq/zQk=)
                          4: PdHeaDywJi7J-a3zuc6-1mdUfSM.roa (hash: l+ho2GKXOZvF0KZ6/PCYPC090Oshz6jifmJBVRB6i5c=)
                          5: VGNTVsc9nejbVwiuI2nbOHrhT4A.roa (hash: wG2E1ysGhVBc57CqY90n2KOFbOVGCHFK1WJuuKwNSso=)
                          6: lICKbds0DQqKISfGTaKNdw7t3pM.crl (hash: RSXp34fqtL9u0PC4lggpky+HLL4rj3UyRwuGri6wnGQ=)
                          7: oThXb4QmTGdzVtthRGYRVzspjNY.roa (hash: vrCmZWsAWrsHQ4ME8ZX38nmpmr/rd33lideKndjp8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a0:ef:58:e1:04:d7:5e:61:a0:8e:66:26:4e:f8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
        Validity
            Not Before: Sep 22 01:00:30 2026 GMT
            Not After : Sep 23 01:00:30 2026 GMT
        Subject: CN=da2f8774bebc5a01a8b276a320fce8a377f30621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:8d:dc:cf:1b:c6:d8:20:e4:2c:62:a6:3b:
                    b7:98:b2:1c:13:f6:82:6c:be:f8:5a:4e:1f:10:95:
                    6b:de:e6:91:dd:fa:3d:88:7f:8e:71:c8:e9:b0:aa:
                    9f:93:63:3f:b0:71:49:8f:78:15:26:9a:aa:a8:50:
                    90:f5:c0:6c:67:9c:8f:c0:e8:3f:d5:26:cd:41:f8:
                    12:0c:a1:dc:ab:aa:d3:99:96:51:34:b8:43:42:1a:
                    d9:3e:01:71:cc:f3:84:12:7a:de:b4:7f:51:8d:59:
                    a9:19:f6:9c:a8:9e:8b:68:14:00:44:82:6a:a7:1e:
                    aa:82:58:42:96:93:25:78:6e:9e:6a:fb:94:4f:a1:
                    00:3d:5f:cc:9b:70:e6:20:e1:56:b6:db:da:cb:23:
                    27:26:d6:de:e6:2e:68:d5:0a:38:8b:49:a0:dd:03:
                    ed:18:44:0d:cc:d2:64:2e:e1:67:76:b1:2e:de:cb:
                    37:fa:b7:f2:6d:d7:e7:e3:4d:ef:1f:a8:22:ce:64:
                    eb:d0:12:f1:84:52:84:47:4e:91:78:3d:b0:e5:e1:
                    00:aa:8b:ce:17:f2:ff:f1:a4:b1:60:98:0e:86:2c:
                    19:70:74:1f:b3:20:bb:c2:43:fa:cc:4c:36:68:f2:
                    c2:9d:28:23:bf:bc:57:39:ef:38:39:dc:96:4d:bb:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:87:74:BE:BC:5A:01:A8:B2:76:A3:20:FC:E8:A3:77:F3:06:21
            X509v3 Authority Key Identifier:
                keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2a:c0:0a:36:69:ac:2f:dc:c2:ae:6e:1f:e9:9e:78:d8:97:
         3f:b0:77:e2:61:93:5f:77:42:1c:d3:11:f9:5e:be:2c:7c:73:
         e4:dd:63:f8:2e:88:d6:6b:9e:88:ae:a6:c9:cf:15:9d:59:7c:
         e0:33:11:06:5a:ff:3c:3a:12:47:1b:b5:0a:f0:bf:bd:7d:e4:
         e7:f0:cd:82:08:73:02:82:2f:a9:f7:07:6d:af:77:64:ef:66:
         a8:09:75:45:76:ea:0e:fd:01:44:62:4a:f4:33:e6:68:b6:c5:
         39:31:ba:53:e7:54:9c:06:f3:2d:e5:04:65:d7:31:dd:98:68:
         b3:fc:a1:9c:93:33:6b:8a:62:59:49:f8:aa:a1:f4:72:4e:a5:
         53:d2:26:a4:e3:24:d1:4e:d3:e7:18:76:23:1f:7a:ee:a3:dd:
         d5:89:e0:83:72:18:d1:d6:28:bb:7f:ed:28:26:54:79:e0:56:
         5a:0c:cf:61:81:6f:e8:08:f6:07:68:06:fc:9f:e8:ff:e7:c6:
         e3:56:70:e5:a8:78:fb:f1:f1:7e:6e:40:80:c9:68:9c:f0:ba:
         5d:cc:2e:e1:eb:21:03:9d:62:e6:f1:d3:78:1e:c4:aa:d8:f2:
         0d:9a:dc:e9:8a:6a:e2:ac:87:bc:ff:57:5e:4e:e1:90:f1:d1:
         7d:58:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:19 2026 by rpki-client