Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          /aLUfwfIYVKynec3KVMOHZLpbMEkyKrPQmDNzsmijoI=
Subject key identifier:   C8:D0:74:48:CD:D7:45:6A:52:84:8F:EE:9B:9A:A7:41:46:B8:93:12
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       01A0CA0F910E0578BC18D7E7C7241695F849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 17:00:12 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:12 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:12 +0000
Files and hashes:         1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
                          2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: mF03gfIhM/QrF8PY8VlkjEvnGJfuHoz5iaQ56/EmIak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:91:0e:05:78:bc:18:d7:e7:c7:24:16:95:f8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Sep 22 17:00:12 2026 GMT
            Not After : Sep 23 17:00:12 2026 GMT
        Subject: CN=c8d07448cdd7456a52848fee9b9aa74146b89312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:08:34:36:1e:17:e3:1a:5c:f3:29:eb:3f:
                    42:f6:ed:0f:a3:89:af:c3:e4:6a:5e:df:ab:24:90:
                    25:9f:92:ce:76:38:29:b3:bd:6f:08:fd:5b:2f:c9:
                    e8:d6:14:f7:d6:e6:b4:d1:f9:3c:8d:58:8c:7c:ec:
                    7b:6f:7f:2d:44:4b:ba:15:59:38:91:35:af:b5:4f:
                    0e:d3:85:eb:c4:04:0f:ab:85:53:9f:3a:44:95:d4:
                    c4:4c:54:f9:74:c7:22:78:0e:9a:55:0f:c1:8b:0f:
                    84:3a:6a:05:c4:f0:82:19:c1:79:a8:b3:a8:62:99:
                    7d:08:70:11:3e:b4:b0:19:57:e8:5b:ac:1c:56:fd:
                    60:94:2f:cc:a8:79:6f:8f:b7:53:a8:08:4f:d8:18:
                    fc:d1:ee:7b:a1:c0:27:9d:47:ac:be:22:96:e3:86:
                    f0:79:5b:9e:81:00:5e:0e:78:be:2e:2e:7f:33:b0:
                    ce:b2:8c:80:64:a0:8f:ba:66:e9:c3:70:a6:ef:4a:
                    d3:18:bf:96:26:86:31:b9:8e:77:e2:ef:d8:ca:34:
                    3d:4a:8d:75:ca:6a:69:bc:92:56:a3:73:51:f5:92:
                    df:4c:06:39:29:7a:ae:03:55:2b:fe:c3:3e:d5:3d:
                    da:d8:b0:23:f4:d0:d2:c5:36:ec:eb:c3:b0:81:00:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:74:48:CD:D7:45:6A:52:84:8F:EE:9B:9A:A7:41:46:B8:93:12
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6d:1a:89:ea:c6:2f:8d:02:3b:d7:9b:17:fe:02:aa:59:d2:
         e7:da:a8:b3:97:0c:c2:d8:da:b0:98:c1:36:95:37:9f:d8:6d:
         b3:6d:59:39:92:93:d7:27:19:84:ea:08:ad:2d:94:87:12:d5:
         7d:27:6c:2b:b0:57:65:e7:98:13:ab:9d:0e:2f:e8:cd:02:a7:
         57:0d:f0:98:87:84:ba:98:d5:f4:87:37:31:9d:0b:54:37:17:
         f1:11:93:15:d2:c3:d6:08:a8:d3:64:e0:6c:c5:44:ba:32:6a:
         da:5a:65:14:4e:8f:cc:d5:90:86:d4:f2:7b:69:63:52:9d:92:
         18:03:8b:99:e2:20:c1:d2:81:76:a6:db:67:0c:b4:a7:a8:85:
         b1:73:a0:11:13:ee:3f:f8:2b:ef:eb:dc:5d:86:8f:9b:a1:da:
         26:25:ab:f3:a3:7d:a3:7a:20:7e:3f:30:2e:e4:a1:6e:63:a5:
         14:07:cb:cd:10:16:7a:2e:20:06:b4:d0:ef:7f:83:3c:30:11:
         12:52:92:04:78:df:a6:a6:31:37:e2:5e:8d:84:d8:db:a8:2a:
         9b:af:76:df:38:c9:56:41:bc:b6:e5:b4:43:40:86:e7:68:e2:
         96:06:2c:27:e6:6c:63:6f:23:36:7c:6b:81:b9:2c:e9:89:b3:
         41:b5:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:56 2026 by rpki-client