Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          NeFdMOhF1ddrSE/1exhbw3qKXVWPETrpU0nJcAZ9ZjQ=
Subject key identifier:   19:16:47:92:5F:F6:AF:3A:D0:65:AA:46:48:D2:B8:1E:82:E6:80:05
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       01A0C858FC75D1B8A66BE420D6F194289E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          0883
Signing time:             Tue 22 Sep 2026 09:01:09 +0000
Manifest this update:     Tue 22 Sep 2026 09:01:09 +0000
Manifest next update:     Wed 23 Sep 2026 09:01:09 +0000
Files and hashes:         1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
                          2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: BFRZRgSJciUjgE0Hc/T3zeTUtPF99k9Ykdj6j81silc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:fc:75:d1:b8:a6:6b:e4:20:d6:f1:94:28:9e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Sep 22 09:01:09 2026 GMT
            Not After : Sep 23 09:01:09 2026 GMT
        Subject: CN=191647925ff6af3ad065aa4648d2b81e82e68005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:af:3c:0e:fb:a9:af:96:63:75:3c:4e:fa:
                    87:63:c1:76:f1:f6:c0:23:8a:b8:7c:d5:5e:3d:0e:
                    ba:aa:4b:ad:a3:52:e6:69:9a:18:56:11:08:87:8f:
                    93:c4:11:f5:8e:96:dd:01:4c:23:a6:e6:7c:31:55:
                    9c:f4:4f:fc:6e:77:14:9a:3f:2d:88:b4:e2:5f:91:
                    16:fe:98:8f:d8:42:a3:86:05:0d:8e:7c:46:db:0e:
                    c0:9d:98:44:be:f9:e2:53:a2:06:9b:45:fb:8e:c4:
                    ef:e4:69:89:05:5e:e2:82:eb:67:b8:fc:b3:12:03:
                    77:a6:d6:68:08:6f:37:3f:76:3d:4f:44:a0:44:79:
                    90:a4:29:3f:38:09:2d:ae:65:69:12:a7:dd:6e:79:
                    8e:44:e0:f9:f1:e8:82:08:0b:d2:57:f8:d6:6f:26:
                    25:51:b6:d1:f2:9a:01:45:d7:1d:ea:f7:47:68:8f:
                    b7:f9:f6:f6:06:25:ff:c0:3a:2a:a4:a3:4a:c9:73:
                    41:fa:2b:87:80:ea:c2:b3:5b:d2:07:6a:8e:40:3e:
                    c3:84:ca:31:40:e6:b8:0b:24:39:59:ce:a8:9f:e8:
                    12:ac:a6:0b:f7:9e:24:70:8c:77:06:6a:7c:7d:57:
                    52:a5:a3:33:e3:83:22:a5:96:57:b4:29:6f:c7:e1:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:47:92:5F:F6:AF:3A:D0:65:AA:46:48:D2:B8:1E:82:E6:80:05
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:32:e2:93:51:cd:99:f2:ed:59:5e:81:26:ac:04:93:72:
         bc:1b:b1:b7:b3:6e:d2:d3:c3:88:88:b1:a5:34:dc:17:21:fd:
         42:2e:bd:2d:0c:e1:83:10:11:c8:df:47:ad:30:c8:53:b2:f4:
         6e:05:dc:13:11:8a:fd:f0:cd:5a:c3:13:6b:21:3a:9a:ed:da:
         28:9b:c2:68:06:2e:62:ea:10:e7:35:39:a6:f8:f5:28:ab:b9:
         b1:b1:8f:af:3b:d5:e4:22:c4:16:59:66:9a:87:01:c9:a4:62:
         3f:21:02:6d:dd:74:e7:7d:0a:82:7d:ef:7d:4e:b4:2d:1e:85:
         70:68:9d:d7:87:af:bb:4d:ce:ee:90:42:e3:78:95:99:73:80:
         2e:97:03:fa:04:14:7b:eb:80:c4:84:f9:b2:14:17:8b:6f:d4:
         d7:97:f6:ae:76:63:f0:d0:73:69:1e:fa:43:46:e2:1c:2f:eb:
         4a:2c:2d:3b:10:d5:dc:d6:6a:3c:69:24:56:68:cf:62:ba:6d:
         0c:7e:43:15:2f:20:7e:48:0a:62:4b:0b:dc:27:55:ac:6d:0e:
         5a:44:e2:25:0e:6f:5c:89:cc:63:97:2f:ba:e2:1a:86:a1:ba:
         8e:aa:a1:cb:83:3e:fe:12:44:9a:a9:21:1e:ae:72:de:fb:00:
         62:81:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:12 2026 by rpki-client