Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File:                     Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier:          n6yVvB7MvLBE1jKX2fdddcTzG8Fi5X/ViSrvZS0xRDE=
Subject key identifier:   0A:3F:CB:16:EB:E2:58:D4:4F:20:F4:93:B0:C6:7A:79:85:D9:F5:9E
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer:       /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial:       01A0C030CE30839CFD62B6E23A408D49E12E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number:          06D7
Signing time:             Sun 20 Sep 2026 19:00:18 +0000
Manifest this update:     Sun 20 Sep 2026 19:00:18 +0000
Manifest next update:     Mon 21 Sep 2026 19:00:18 +0000
Files and hashes:         1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: Br6HmTKmqA8yGPhkM1Ly8S8NT0yVtVH2OAgx7UQill0=)
                          2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
                          3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
                          4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
                          5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:30:ce:30:83:9c:fd:62:b6:e2:3a:40:8d:49:e1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
        Validity
            Not Before: Sep 20 19:00:18 2026 GMT
            Not After : Sep 21 19:00:18 2026 GMT
        Subject: CN=0a3fcb16ebe258d44f20f493b0c67a7985d9f59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:82:8a:11:77:b7:1b:1f:c8:33:62:c5:66:
                    b1:6a:56:3b:0b:df:ac:fb:a9:09:50:1b:77:5a:d1:
                    c8:c9:d5:93:06:9d:0d:dd:a2:45:37:0d:3d:a6:16:
                    2d:b8:da:e0:1b:61:54:d1:38:7b:a8:8e:58:32:05:
                    27:d9:46:91:64:09:50:68:55:e0:9b:a9:c4:7a:6f:
                    2f:38:10:df:4f:ef:9e:c2:7f:44:d2:1e:c2:b2:fb:
                    a3:ca:b5:b9:af:b5:b0:b2:18:b9:10:c7:cc:c7:07:
                    51:a2:ac:a0:01:48:55:97:27:58:5e:78:0e:25:55:
                    e7:d7:65:52:f6:d3:1f:99:5c:a6:52:11:57:00:a2:
                    23:c1:cb:ea:02:1c:84:a4:e6:c2:4c:4c:24:2b:6c:
                    ec:dc:47:4d:31:16:1e:13:28:54:07:a7:0a:79:1c:
                    93:a7:02:5a:36:bc:52:90:a4:63:26:93:f3:11:2f:
                    d5:f8:9d:6f:7a:83:b3:82:06:44:2f:89:d3:92:71:
                    9f:96:82:ff:dc:2f:d1:d8:0f:48:7e:e1:ca:ee:8e:
                    14:87:1c:8d:62:04:00:47:b9:11:d4:9d:5d:b3:70:
                    e3:2e:a7:57:5b:1a:a7:c7:28:37:91:06:c9:80:51:
                    82:a0:6a:33:84:6d:4b:5f:0e:a6:12:04:0c:a7:33:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:CB:16:EB:E2:58:D4:4F:20:F4:93:B0:C6:7A:79:85:D9:F5:9E
            X509v3 Authority Key Identifier:
                keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:93:c6:4f:7d:71:a1:d3:fe:d0:37:79:03:40:6f:86:71:99:
         c0:40:1e:e3:7b:5a:62:92:29:cc:b6:12:3b:d4:fd:bb:1d:c8:
         2e:f6:36:74:e3:1e:d3:1a:2d:72:fc:fe:de:21:02:03:d8:2f:
         2e:89:0b:71:51:9f:40:d6:19:0e:9e:d5:15:a8:b8:f8:71:e8:
         bf:27:65:14:3f:3b:72:d8:1a:73:53:d8:be:6f:e5:b8:cb:6a:
         0f:c7:47:d2:f4:4f:3c:06:03:e9:f3:df:ee:f0:a4:e2:aa:a0:
         77:e8:16:05:96:94:e9:89:86:1b:82:5f:02:02:22:ac:90:a6:
         b9:2f:72:91:d1:c4:ff:15:d6:f7:c2:17:35:d9:63:a7:1c:76:
         1b:f1:8c:4b:f2:de:4d:e3:6a:4d:65:4c:da:65:1c:f9:18:7d:
         1e:43:e2:98:be:39:0e:97:d6:fa:86:42:ea:b6:2e:da:6d:ff:
         d1:df:ae:48:3c:0a:45:65:a7:9f:dc:74:24:00:05:61:4d:84:
         bc:27:ba:f0:e5:38:1c:d4:9e:38:66:be:05:5e:9b:27:31:06:
         53:74:ee:14:e4:c1:14:98:4c:2b:f8:97:60:ab:44:d9:91:8c:
         ac:50:0d:44:fa:36:6b:25:ca:c2:82:ad:ca:5e:09:5e:d2:27:
         be:33:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:06:42 2026 by rpki-client