Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
File:                     lWCHIpBdg1KkDKpGoGES6mpEYA4.mft (raw, json)
Hash identifier:          Ce2ejrVtPkxWM7uNJP9mUSBYlelr+myTyQwF8FLSeeg=
Subject key identifier:   76:50:6F:3A:B1:09:7D:E0:7D:29:68:2F:DA:DB:14:0F:98:EC:D5:B9
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Certificate issuer:       /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial:       01A0C47CACB86F80D380857E87501111D89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 15:01:40 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:40 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:40 +0000
Files and hashes:         1: 6gfsbp70NcwcNxJT8XMgqV4g908.asa (hash: Di3Vjzbs6+arwrS0sNW5XttvE64t8QV4IW+z0/vEuPw=)
                          2: 7z7bFp40wPTbt5RvIZtTppWl7AM.roa (hash: lwNSwOHOkunLWIvv4A5ENj1DeD3yKEj+lVowF+Ei8vY=)
                          3: KDCDR5HMfski0xwt6UzkMSAG708.roa (hash: V7yjpYjttVxBzbdwJHm85I1dbdth+qcfBSlmVeGdWlY=)
                          4: KH370sNYu21avkL8lpe4CVDI6IQ.roa (hash: DzzaFBH+1mwllU7379SPzlQjcpZBkQqIzj2ch2xa5ec=)
                          5: OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa (hash: oD26JJOT6DwdR4GxVKpP9CnRulkt+gNmlzlwVyBAeto=)
                          6: lWCHIpBdg1KkDKpGoGES6mpEYA4.crl (hash: uocilF7VeBTmDQHELoPaKYVE+p7BE+s8eLelN9ySB1k=)
                          7: vcJsXSmebygkiO1u98sDd5yvTS4.roa (hash: E+7qJmCAiPJjSB0MZl/CtlkcxsQXp3zBWufxUli/XlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:ac:b8:6f:80:d3:80:85:7e:87:50:11:11:d8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
        Validity
            Not Before: Sep 21 15:01:40 2026 GMT
            Not After : Sep 22 15:01:40 2026 GMT
        Subject: CN=76506f3ab1097de07d29682fdadb140f98ecd5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:df:41:2b:bd:ab:9a:59:e0:35:07:16:0f:
                    5d:a4:3b:9f:fd:11:a9:a9:b3:02:a3:8b:d5:c4:16:
                    06:25:e3:c2:20:d4:8b:60:2c:88:be:d3:fb:39:9c:
                    f4:5a:44:0c:31:f2:52:bc:ee:be:56:77:17:3f:5a:
                    32:93:6c:84:8f:ce:15:94:72:82:91:8c:15:a1:e7:
                    f4:20:c2:e1:48:2f:7f:db:2d:55:f7:70:6f:a6:0c:
                    cf:86:97:40:be:0a:1e:61:e0:fa:5c:67:3d:eb:1b:
                    c8:5e:9e:fb:43:2b:49:a3:63:65:bf:ef:19:d8:6a:
                    70:00:3a:02:6c:89:1b:a6:9b:6e:9e:b9:e9:9c:fc:
                    63:ba:ca:4a:96:ad:ae:60:2c:79:e4:19:5c:d5:3e:
                    05:08:16:d8:97:ec:3c:7d:c3:c1:10:13:d4:11:bb:
                    9a:60:a6:03:69:94:40:e6:56:4f:cb:4b:64:a0:de:
                    1a:61:41:59:97:9e:f5:37:bf:42:25:64:4b:90:0c:
                    f3:65:44:bf:27:92:5a:53:3c:3d:fd:af:f6:a5:c2:
                    b9:75:58:b0:74:d6:87:07:02:0c:8a:c1:74:a0:2f:
                    8a:90:f2:69:fa:81:a1:bb:21:74:75:d6:8f:e5:a3:
                    5c:86:a2:87:71:5a:54:df:c5:2a:7d:a4:31:d7:36:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:50:6F:3A:B1:09:7D:E0:7D:29:68:2F:DA:DB:14:0F:98:EC:D5:B9
            X509v3 Authority Key Identifier:
                keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:28:15:6f:1a:15:6d:a1:89:cb:59:2c:5e:b0:77:61:66:3c:
         1b:25:1f:b7:b7:ac:58:b8:8b:2a:8e:bd:0a:1f:cb:14:69:a9:
         d3:19:2f:e8:e5:d1:4d:18:5e:7a:cb:e2:1e:bf:eb:80:38:a3:
         06:f7:dd:96:04:c1:19:be:7d:59:11:63:9e:78:e1:41:92:ba:
         17:be:c9:a7:b6:6f:d9:4d:9c:c4:5e:2e:96:b3:96:e6:93:61:
         dc:f0:85:1a:86:44:54:6d:7d:9c:e5:21:68:4b:b1:c4:6e:ab:
         66:0c:48:c6:ab:4b:b3:9c:dd:68:9f:8c:01:9a:5d:78:61:e3:
         a3:03:96:32:b3:ae:69:0f:f8:6e:6f:30:9f:dd:95:49:8b:6a:
         4c:78:93:a4:39:6e:88:9e:94:f0:37:2a:13:8d:1e:86:12:60:
         a3:10:5e:52:cd:74:6b:2c:6d:71:ca:20:22:b9:fe:c0:9b:5e:
         4c:e4:c5:81:44:88:d9:ae:ca:98:5f:77:fe:70:a7:71:dd:8f:
         25:40:d3:69:09:f8:ce:a6:0d:d1:de:ed:f6:99:86:d9:ed:dd:
         5a:0d:4b:25:60:7b:cc:ac:2e:8e:89:64:e1:e9:64:b3:f5:23:
         6e:53:8b:75:2c:4e:cc:21:66:b1:01:60:67:6e:61:b5:30:bd:
         c1:c8:4f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfKy4b4DTgIV+h1AREdiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjA4NzIyOTA1ZDgzNTJhNDBjYWE0NmEwNjExMmVhNmE0
NDYwMGUwHhcNMjYwOTIxMTUwMTQwWhcNMjYwOTIyMTUwMTQwWjAzMTEwLwYDVQQD
Eyg3NjUwNmYzYWIxMDk3ZGUwN2QyOTY4MmZkYWRiMTQwZjk4ZWNkNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWffQSu9q5pZ4DUHFg9dpDuf/RGp
qbMCo4vVxBYGJePCINSLYCyIvtP7OZz0WkQMMfJSvO6+VncXP1oyk2yEj84VlHKC
kYwVoef0IMLhSC9/2y1V93BvpgzPhpdAvgoeYeD6XGc96xvIXp77QytJo2Nlv+8Z
2GpwADoCbIkbpptunrnpnPxjuspKlq2uYCx55Blc1T4FCBbYl+w8fcPBEBPUEbua
YKYDaZRA5lZPy0tkoN4aYUFZl571N79CJWRLkAzzZUS/J5JaUzw9/a/2pcK5dViw
dNaHBwIMisF0oC+KkPJp+oGhuyF0ddaP5aNchqKHcVpU38UqfaQx1zblUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZQbzqxCX3gfSloL9rbFA+Y7NW5MB8GA1UdIwQY
MBaAFJVghyKQXYNSpAyqRqBhEupqRGAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdDSElwQmRnMUtrREtwR29HRVM2bXBFWUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt
Y2I1NmVkM2VhN2ZhLzEvbFdDSElwQmRnMUtrREtwR29HRVM2bXBFWUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh
LzEvbFdDSElwQmRnMUtrREtwR29HRVM2bXBFWUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxigVbxoV
baGJy1ksXrB3YWY8GyUft7esWLiLKo69Ch/LFGmp0xkv6OXRTRheesviHr/rgDij
BvfdlgTBGb59WRFjnnjhQZK6F77Jp7Zv2U2cxF4ulrOW5pNh3PCFGoZEVG19nOUh
aEuxxG6rZgxIxqtLs5zdaJ+MAZpdeGHjowOWMrOuaQ/4bm8wn92VSYtqTHiTpDlu
iJ6U8DcqE40ehhJgoxBeUs10ayxtccogIrn+wJteTOTFgUSI2a7KmF93/nCncd2P
JUDTaQn4zqYN0d7t9pmG2e3dWg1LJWB7zKwujolk4elks/UjblOLdSxOzCFmsQFg
Z25htTC9wchPyQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:20 2026 by rpki-client