Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File:                     lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier:          3nkCFAgZ1e2a+ZclCzZNDEqzJopLLAa7rz++rtcaK8k=
Subject key identifier:   E0:1F:22:AD:B3:4B:6B:1E:BB:01:58:A1:B9:98:BC:C5:E5:AD:AA:44
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer:       /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial:       019CAC4771B1AC161EC7DFCBC34F688C7E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number:          08BE
Signing time:             Mon 02 Mar 2026 02:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:29 +0000
Files and hashes:         1: ICqVIuqnGDQ2U9fP3d1W-e4TDf8.roa (hash: 60NTvkE84gguHU2fFEBFq8qOMCvmzn8pCex8KwPB/e0=)
                          2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: N224t2fvF3whoXs0F4cE0HzAUWGY2Cf9ytJI19KQOH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:71:b1:ac:16:1e:c7:df:cb:c3:4f:68:8c:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
        Validity
            Not Before: Mar  2 02:01:29 2026 GMT
            Not After : Mar  3 02:01:29 2026 GMT
        Subject: CN=e01f22adb34b6b1ebb0158a1b998bcc5e5adaa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:e5:20:70:43:f3:a5:f1:8a:74:3a:27:e4:
                    fa:34:3c:f5:ee:65:52:f7:53:d6:5b:1b:95:44:d6:
                    7b:9a:56:91:b0:e9:e0:75:b0:55:64:15:00:1d:9d:
                    1e:31:9e:87:09:9d:1a:8f:86:55:09:00:58:77:45:
                    b1:bc:16:fe:dd:96:28:b1:29:58:77:3e:da:9f:ac:
                    25:46:cf:06:c9:b4:1a:93:62:52:83:e2:1d:90:71:
                    bc:17:ec:d9:e5:3b:6c:a8:fe:23:ee:03:49:7d:f7:
                    c0:56:e3:76:9b:69:2f:b5:f6:f0:36:cf:a2:88:f1:
                    bd:29:c9:2a:be:79:45:3f:08:7e:00:9a:66:aa:b4:
                    6b:29:c3:91:c0:98:5e:89:aa:90:84:81:a1:c8:ba:
                    4d:8f:dc:e4:4b:89:1a:7c:5a:4f:61:e6:60:fb:1a:
                    f0:80:9f:1b:c0:70:93:ef:00:68:49:b2:92:45:a9:
                    c6:3e:0a:0a:59:b5:46:67:9d:a7:9f:33:e7:1e:33:
                    d9:db:f4:29:56:ea:9b:a2:57:24:80:04:66:7e:3e:
                    43:a6:6d:08:30:8d:82:91:3d:60:b8:61:7a:55:6b:
                    a1:7c:24:ef:16:ac:39:01:81:27:b3:b5:59:1b:c6:
                    05:57:ba:2e:ac:95:7d:97:f5:e2:a8:bc:9a:f1:f2:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:22:AD:B3:4B:6B:1E:BB:01:58:A1:B9:98:BC:C5:E5:AD:AA:44
            X509v3 Authority Key Identifier:
                keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:d7:ad:9f:1b:87:19:ef:3f:23:58:fe:4d:65:fb:e1:bb:
         34:79:2d:19:00:ac:42:1a:41:3c:80:37:45:80:d7:2d:70:28:
         60:48:bc:18:00:11:46:4e:5e:9c:cb:25:aa:d3:64:17:c9:63:
         e4:c5:53:69:cd:a2:f0:9a:3e:fd:d2:ce:22:c1:c0:75:92:29:
         7d:ac:48:c6:00:13:cf:77:e2:3e:9c:77:57:b6:a6:04:26:2f:
         ae:47:d0:e0:83:1b:f5:71:69:89:bd:25:3b:28:56:ed:b6:58:
         35:b0:f4:17:c5:c0:87:08:45:fc:b3:27:03:b8:90:9d:2f:de:
         7b:9e:2e:95:0c:ec:48:f9:24:19:21:d8:b7:7e:5b:2b:74:03:
         1f:27:06:91:4d:da:bc:8b:6b:1d:15:96:5e:30:7b:ad:1c:6b:
         4e:68:7a:bf:f9:f5:c9:92:81:f8:53:7e:d8:f4:24:4e:91:08:
         5b:ca:7c:a3:79:5b:fe:9a:90:31:ef:da:ac:b1:db:f5:79:c0:
         a7:d8:25:5f:5b:cb:57:62:ea:ea:1d:7a:8f:cc:7e:3b:fd:e9:
         0c:97:0b:80:b7:a2:a0:cc:7d:43:11:12:81:05:11:f8:e3:33:
         cd:ef:98:d5:ca:05:7b:ca:9f:16:57:1a:60:6d:b4:33:72:8c:
         c2:93:23:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3GxrBYex9/Lw09ojH5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3
ZjgzZTcwHhcNMjYwMzAyMDIwMTI5WhcNMjYwMzAzMDIwMTI5WjAzMTEwLwYDVQQD
EyhlMDFmMjJhZGIzNGI2YjFlYmIwMTU4YTFiOTk4YmNjNWU1YWRhYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRnlIHBD86XxinQ6J+T6NDz17mVS
91PWWxuVRNZ7mlaRsOngdbBVZBUAHZ0eMZ6HCZ0aj4ZVCQBYd0WxvBb+3ZYosSlY
dz7an6wlRs8GybQak2JSg+IdkHG8F+zZ5TtsqP4j7gNJfffAVuN2m2kvtfbwNs+i
iPG9KckqvnlFPwh+AJpmqrRrKcORwJheiaqQhIGhyLpNj9zkS4kafFpPYeZg+xrw
gJ8bwHCT7wBoSbKSRanGPgoKWbVGZ52nnzPnHjPZ2/QpVuqbolckgARmfj5Dpm0I
MI2CkT1guGF6VWuhfCTvFqw5AYEns7VZG8YFV7ourJV9l/XiqLya8fL72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAfIq2zS2seuwFYobmYvMXlrapEMB8GA1UdIwQY
MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt
MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0
LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5LXrZ8b
hxnvPyNY/k1l++G7NHktGQCsQhpBPIA3RYDXLXAoYEi8GAARRk5enMslqtNkF8lj
5MVTac2i8Jo+/dLOIsHAdZIpfaxIxgATz3fiPpx3V7amBCYvrkfQ4IMb9XFpib0l
OyhW7bZYNbD0F8XAhwhF/LMnA7iQnS/ee54ulQzsSPkkGSHYt35bK3QDHycGkU3a
vItrHRWWXjB7rRxrTmh6v/n1yZKB+FN+2PQkTpEIW8p8o3lb/pqQMe/arLHb9XnA
p9glX1vLV2Lq6h16j8x+O/3pDJcLgLeioMx9QxESgQUR+OMzze+Y1coFe8qfFlca
YG20M3KMwpMjHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:58 2026 by rpki-client