Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File:                     leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier:          jgA+kQbPS1f+hOTxcFswQrrUeCaXCo+djhWb8qM1LlY=
Subject key identifier:   88:E5:14:F7:B7:B7:31:AC:0E:AB:A5:A1:66:7F:BA:50:B5:9B:CF:CB
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer:       /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial:       019CA9B3AEF6AB74D4C036F21DFCB35D6FA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number:          0C54
Signing time:             Sun 01 Mar 2026 14:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:51 +0000
Files and hashes:         1: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: gz56opdrjKOoV8IRXGT4/SVuuuqgfD3B/ybtitRLLqQ=)
                          2: y8oZ66nLHzO58eQvPIRpmWAPl7c.roa (hash: L/V2Ozu3PD9MBYyFc1nynxKrWqd8IdYQzQ81hC8pp8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:ae:f6:ab:74:d4:c0:36:f2:1d:fc:b3:5d:6f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
        Validity
            Not Before: Mar  1 14:00:51 2026 GMT
            Not After : Mar  2 14:00:51 2026 GMT
        Subject: CN=88e514f7b7b731ac0eaba5a1667fba50b59bcfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:45:78:79:03:76:13:be:9a:56:ac:ae:56:
                    e6:8e:67:49:8b:3b:81:61:0b:84:49:c4:be:d7:fa:
                    52:2e:94:03:44:0b:ad:fa:1e:8c:ba:cf:10:36:4f:
                    ed:17:94:74:36:b6:9c:23:fa:b7:76:91:2f:ce:80:
                    eb:29:6b:34:0b:fa:d3:08:66:19:93:a2:8f:d0:46:
                    2d:63:20:5a:0e:20:39:f3:e0:84:a0:03:84:0a:f1:
                    ee:ad:90:0e:a5:16:dd:3c:aa:65:86:93:c4:6a:75:
                    6f:33:3c:6d:18:f4:a6:a2:85:fa:50:f3:cb:b9:f1:
                    36:25:78:d9:3d:db:7d:f5:e2:6e:eb:b3:f0:f8:23:
                    4a:20:0b:f3:67:6f:90:ba:47:0d:c9:73:2c:16:e4:
                    e9:a6:fa:08:f2:64:7d:17:a4:0e:2b:0a:36:92:32:
                    ae:8c:c2:55:b0:69:2f:c2:ed:1f:de:82:24:37:bc:
                    5d:a4:0b:bc:69:2d:2d:b6:6c:d3:e8:a6:98:dc:8a:
                    db:55:92:95:40:8f:2f:05:0e:59:a4:78:e6:41:b6:
                    ca:a0:5f:07:76:6d:a3:c4:e3:e0:d4:ce:4a:eb:be:
                    12:f4:26:36:b4:4a:d9:17:67:91:bb:35:9e:af:1b:
                    d8:3a:70:de:3f:af:8e:5b:92:80:a0:76:6a:2a:39:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:14:F7:B7:B7:31:AC:0E:AB:A5:A1:66:7F:BA:50:B5:9B:CF:CB
            X509v3 Authority Key Identifier:
                keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:a4:b1:23:a1:51:3c:70:aa:93:3c:6a:2f:f1:68:5c:45:
         27:f2:97:63:0d:1c:02:41:82:03:4d:7f:52:22:6a:2d:11:4a:
         1c:39:bb:a1:b0:95:a5:27:0c:5b:da:0f:b1:92:94:ff:14:55:
         0b:19:c6:28:d4:3f:98:e1:41:0c:4a:f1:1e:ea:8b:fa:03:63:
         84:04:df:fc:5f:2c:b9:3b:61:f1:6b:aa:9a:3c:f4:ae:48:0d:
         86:66:20:be:b9:38:d7:2d:92:58:10:38:43:c2:8a:32:e5:78:
         1e:d3:f0:c1:f5:10:b0:23:8c:4e:04:35:46:b1:49:3b:27:d4:
         e4:62:5f:3c:83:28:64:e6:12:9e:e8:2f:11:a2:b1:f8:48:13:
         60:76:34:85:da:a9:52:21:1e:73:21:c8:f1:64:ec:76:20:5d:
         80:73:7c:2d:a9:23:c9:be:43:85:2a:14:c6:f6:13:a6:14:0a:
         96:70:24:45:d6:1f:f2:0b:05:7c:bd:d8:ed:b9:0f:92:01:29:
         08:d8:05:ea:ac:41:f0:6c:bd:41:d9:6e:ec:95:9a:7d:e8:cf:
         01:1a:19:ed:f9:0d:a5:88:e4:13:00:77:a8:f2:cd:a2:3a:ac:
         61:d0:97:5d:cc:e2:e5:13:fc:cc:d7:5f:1a:ad:62:88:62:cf:
         ff:86:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:29 2026 by rpki-client