Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File:                     stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier:          LjFq29vedFv9pAnIE1TZP2tqRvy+3IFl+wzTTT85//M=
Subject key identifier:   E1:84:AC:5A:1D:A0:FE:F7:2B:3A:40:26:B7:FF:6E:0A:08:5F:39:9A
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer:       /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial:       01A0D08068F4EFF69C642CDB3201A7CBBF3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number:          0407
Signing time:             Wed 23 Sep 2026 23:01:11 +0000
Manifest this update:     Wed 23 Sep 2026 23:01:11 +0000
Manifest next update:     Thu 24 Sep 2026 23:01:11 +0000
Files and hashes:         1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
                          2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: mfcaCp2FnoH1Lzz+jNq+0KmBpto1FIzCyeJsWAF9VaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:68:f4:ef:f6:9c:64:2c:db:32:01:a7:cb:bf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
        Validity
            Not Before: Sep 23 23:01:11 2026 GMT
            Not After : Sep 24 23:01:11 2026 GMT
        Subject: CN=e184ac5a1da0fef72b3a4026b7ff6e0a085f399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:5e:2e:88:3f:22:68:cf:f3:a0:1d:26:52:
                    e3:04:ae:b6:fc:a0:6b:48:3c:26:60:7c:5f:dd:2f:
                    c2:8b:26:66:31:18:66:a0:ba:47:c7:1a:94:84:6c:
                    e8:cb:c5:29:b9:db:c0:cb:7a:76:c5:52:eb:24:3e:
                    1b:3f:82:9e:a0:dc:bb:dc:97:fa:be:a2:6c:2d:b2:
                    87:59:fd:6a:bb:14:9f:39:53:49:49:8a:d7:1e:d7:
                    1d:87:fa:d7:c5:58:d8:2c:02:cf:15:0f:43:68:57:
                    53:f4:e8:aa:97:d3:73:4f:85:e4:6e:8b:83:fa:1b:
                    12:0f:71:32:70:be:76:0e:7a:a3:28:d2:66:b9:1d:
                    ae:02:74:27:08:d6:4f:cf:a1:48:ca:da:7f:de:ab:
                    b0:da:9e:e1:8a:cc:55:51:85:1a:f2:25:2f:f8:fe:
                    7a:b4:27:c7:96:72:d0:70:0f:dc:7b:96:a5:92:ec:
                    b5:af:02:4e:e0:6b:f2:7d:2a:2d:0d:2d:2f:73:b1:
                    a4:b2:98:1f:d0:03:15:e3:94:7a:cb:9c:f5:33:97:
                    c9:c1:60:b5:73:ef:ba:c9:66:73:7b:70:20:25:72:
                    74:79:1e:94:7f:61:0b:9b:68:9f:75:d1:a5:82:a7:
                    08:4d:a8:1d:7e:45:a5:4a:9f:7d:0c:cd:09:f0:6d:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:AC:5A:1D:A0:FE:F7:2B:3A:40:26:B7:FF:6E:0A:08:5F:39:9A
            X509v3 Authority Key Identifier:
                keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:56:c0:5a:4c:39:46:31:42:1b:79:82:f9:13:a3:5c:c3:
         41:20:95:e5:a6:88:39:59:2d:ed:89:92:e6:98:93:ea:ea:96:
         89:c7:fc:be:36:99:be:23:ce:0c:20:03:36:38:5d:e6:a4:ec:
         56:ea:95:d5:2f:ec:83:40:eb:f3:5b:db:61:02:61:54:de:d6:
         47:93:d4:07:d0:d7:91:b5:be:60:9a:92:01:76:72:01:b7:46:
         5d:c0:01:ee:87:57:61:e7:5c:c4:13:b1:ca:42:80:a3:9a:a2:
         c6:64:43:fd:61:c6:d9:5b:78:18:ab:50:51:f1:e9:32:9d:0d:
         bf:f9:69:bf:d9:5b:15:77:62:19:91:61:a1:65:0d:2f:3e:75:
         aa:ee:39:ab:6c:5c:38:3d:70:4d:76:fb:9e:66:aa:76:67:86:
         85:81:6a:da:2d:25:77:26:99:b9:09:85:9b:86:eb:4e:4f:4d:
         3a:2b:24:c4:82:bf:97:e1:7b:cb:31:4b:72:96:79:6a:b6:64:
         32:b9:b9:f2:ae:91:8d:ee:77:b3:65:c6:d3:5c:84:b3:42:eb:
         3e:96:e5:fb:e1:63:97:48:ae:cf:4f:f1:2a:77:5e:f2:30:eb:
         62:29:37:cc:39:6d:04:57:61:a3:ae:bc:e6:b8:35:01:36:10:
         f7:b3:3d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgGj07/acZCzbMgGny787MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDJjMTFhZmYwNzJiZWMzN2E1ODI2MjExNGUxYzA2YmVk
YjQ5NDIwHhcNMjYwOTIzMjMwMTExWhcNMjYwOTI0MjMwMTExWjAzMTEwLwYDVQQD
EyhlMTg0YWM1YTFkYTBmZWY3MmIzYTQwMjZiN2ZmNmUwYTA4NWYzOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMBeLog/ImjP86AdJlLjBK62/KBr
SDwmYHxf3S/CiyZmMRhmoLpHxxqUhGzoy8UpudvAy3p2xVLrJD4bP4KeoNy73Jf6
vqJsLbKHWf1quxSfOVNJSYrXHtcdh/rXxVjYLALPFQ9DaFdT9Oiql9NzT4XkbouD
+hsSD3EycL52DnqjKNJmuR2uAnQnCNZPz6FIytp/3quw2p7hisxVUYUa8iUv+P56
tCfHlnLQcA/ce5alkuy1rwJO4GvyfSotDS0vc7Gkspgf0AMV45R6y5z1M5fJwWC1
c++6yWZze3AgJXJ0eR6Uf2ELm2ifddGlgqcITagdfkWlSp99DM0J8G1oJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGErFodoP73KzpAJrf/bgoIXzmaMB8GA1UdIwQY
MBaAFLLSwRr/ByvsN6WCYhFOHAa+20lCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yODNkMzItMzgwYS00ZTZlLWE5NTct
YzViYWVhM2YxNzI5LzEvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yODNkMzItMzgwYS00ZTZlLWE5NTctYzViYWVhM2YxNzI5
LzEvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyxWwFpM
OUYxQht5gvkTo1zDQSCV5aaIOVkt7YmS5piT6uqWicf8vjaZviPODCADNjhd5qTs
VuqV1S/sg0Dr81vbYQJhVN7WR5PUB9DXkbW+YJqSAXZyAbdGXcAB7odXYedcxBOx
ykKAo5qixmRD/WHG2Vt4GKtQUfHpMp0Nv/lpv9lbFXdiGZFhoWUNLz51qu45q2xc
OD1wTXb7nmaqdmeGhYFq2i0ldyaZuQmFm4brTk9NOiskxIK/l+F7yzFLcpZ5arZk
Mrm58q6Rje53s2XG01yEs0LrPpbl++Fjl0iuz0/xKnde8jDrYik3zDltBFdho668
5rg1ATYQ97M9qg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:12:51 2026 by rpki-client