Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File:                     lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier:          khonksxMSItrxnV9ASiwjQ93UVk/gHTitaS9rdM16jU=
Subject key identifier:   B5:4E:08:8B:FA:CF:84:C5:2E:F9:70:88:B8:0F:20:7B:4B:B8:49:5C
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer:       /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial:       01A0C5FC01753888DC5FCF34B1E8A4DA1930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number:          0451
Signing time:             Mon 21 Sep 2026 22:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:21 +0000
Files and hashes:         1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
                          2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: qyeKN29bbABvgt/E5kb2atFhvyQguxuOl2wGIb6KmMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:01:75:38:88:dc:5f:cf:34:b1:e8:a4:da:19:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
        Validity
            Not Before: Sep 21 22:00:21 2026 GMT
            Not After : Sep 22 22:00:21 2026 GMT
        Subject: CN=b54e088bfacf84c52ef97088b80f207b4bb8495c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:19:d7:7e:a8:b3:2c:90:12:2a:b2:50:6b:
                    89:89:2e:bb:05:99:b8:c6:90:6b:4c:29:d3:d0:8b:
                    62:1f:51:f6:5c:4a:27:b3:b6:c9:3c:22:ec:06:15:
                    f1:50:a8:e9:32:1d:bb:d2:0e:65:9d:cd:e6:71:85:
                    85:6e:1a:22:ca:20:2c:f9:29:42:ed:61:98:c3:fd:
                    15:de:47:d2:b0:73:ac:bc:9f:2f:bb:22:b6:6c:db:
                    1b:a8:eb:77:09:7a:a5:5d:1e:31:eb:e5:d6:6b:fb:
                    f0:d4:58:3b:67:4c:f4:ae:1d:e2:d6:28:c7:ae:ed:
                    91:c1:96:df:b9:e5:a8:1b:cc:2b:2a:17:f6:18:07:
                    81:fe:1b:cb:05:6a:e0:49:a0:4f:07:11:f9:a0:ec:
                    fd:1a:18:99:fb:aa:2a:50:ea:b3:0f:1f:23:ff:cf:
                    e6:04:cb:42:5d:fe:b5:54:c7:1c:5a:6d:ad:3e:81:
                    1b:79:8e:f6:74:18:60:2d:87:45:26:d4:fc:bf:12:
                    3a:ec:ec:7e:b2:bb:77:c6:20:9f:07:15:dc:a0:5c:
                    74:b4:b8:f0:49:ff:c5:b8:9d:fc:4e:c2:e5:d8:56:
                    26:e5:97:73:0b:a4:13:61:2f:69:f3:37:52:aa:99:
                    60:ad:d9:e0:c6:2c:9b:6f:28:4b:22:d8:73:75:df:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4E:08:8B:FA:CF:84:C5:2E:F9:70:88:B8:0F:20:7B:4B:B8:49:5C
            X509v3 Authority Key Identifier:
                keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:2e:ec:61:b2:35:26:9d:25:40:2f:57:9d:7b:33:cb:69:
         fd:69:db:dc:66:2b:63:60:d2:f5:61:ba:23:4d:62:25:a6:eb:
         e9:09:14:e1:93:da:10:2b:63:b2:57:ec:2d:c0:f1:21:32:ef:
         df:63:cc:dd:40:38:71:4a:3e:93:f6:d4:3d:f8:e1:e2:7f:c2:
         06:77:a7:72:c9:43:02:a9:dc:58:81:33:b7:45:4e:c0:50:9f:
         c2:be:d4:28:c5:67:dc:cd:69:8e:ac:98:96:ca:62:13:d3:51:
         3b:52:d8:0f:c4:68:a9:14:f2:3e:f6:a2:12:26:cf:0d:87:9b:
         5a:2e:13:dd:65:2b:39:05:78:5e:41:28:c9:c5:c4:d9:93:60:
         36:2b:ac:4f:a4:8b:43:30:5f:f1:e7:22:a9:66:32:85:0e:c3:
         ef:86:73:5c:66:95:df:15:8e:4d:03:6e:f2:95:f3:27:dc:3a:
         ec:00:3d:7d:32:31:af:98:74:1c:b9:ea:c1:0a:19:6c:a4:0c:
         15:d8:63:88:9a:02:9a:f6:82:c1:04:8a:0b:dd:02:ba:ec:b8:
         c0:81:8c:f2:7a:fa:d6:e2:48:0f:32:3c:e4:3b:3b:90:82:c0:
         12:53:a7:47:b9:04:40:6d:62:a0:1c:f5:c0:6e:23:21:0d:a4:
         5f:5e:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:51:56 2026 by rpki-client