Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
File:                     lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json)
Hash identifier:          Y08l0xCI44Eabv8IdBYNxJYhaSah7UpY/8M/S21N2qY=
Subject key identifier:   02:7D:96:32:F9:88:F0:E2:1E:10:6A:46:E4:77:58:55:54:E2:C2:74
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Certificate issuer:       /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial:       01A0C66AD13CE7FE13EA90E937487109DA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:01:23 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:23 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:23 +0000
Files and hashes:         1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=)
                          2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=)
                          3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=)
                          4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=)
                          5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=)
                          6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=)
                          7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=)
                          8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=)
                          9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=)
                          10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=)
                          11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=)
                          12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=)
                          13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=)
                          14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=)
                          15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=)
                          16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: NUxAi6pPjq/WT+DExTag6ylRymEvSwiPkvPL2O+sBkw=)
                          17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=)
                          18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=)
                          19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=)
                          20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=)
                          21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=)
                          22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=)
                          23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:d1:3c:e7:fe:13:ea:90:e9:37:48:71:09:da:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
        Validity
            Not Before: Sep 22 00:01:23 2026 GMT
            Not After : Sep 23 00:01:23 2026 GMT
        Subject: CN=027d9632f988f0e21e106a46e477585554e2c274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:26:a3:39:aa:b7:9e:37:c4:71:22:ec:b0:
                    e9:44:88:d8:d3:db:80:4d:e2:d4:94:2c:ea:2a:30:
                    c7:3f:3d:2d:03:35:31:9d:a2:5b:1d:fc:85:98:bc:
                    74:53:fc:85:a9:06:d5:11:73:dc:57:84:0e:4b:14:
                    50:5e:b8:89:79:2b:a7:ad:e0:15:0d:aa:a3:be:11:
                    38:da:39:4c:23:f3:08:7b:9a:ec:0a:96:e2:28:cb:
                    3e:26:44:90:36:13:d9:9a:d4:1e:88:2f:45:0f:50:
                    f2:c9:b4:4f:f2:20:c7:c5:c7:16:a2:4f:ab:44:45:
                    23:7e:31:fc:cc:8a:aa:ab:47:e1:25:a7:92:ed:a4:
                    e1:25:d5:43:6c:6c:81:f1:76:3b:fd:5e:71:68:08:
                    2f:37:11:20:c6:d6:fe:23:8b:e7:0e:5e:df:7a:45:
                    8f:db:b6:9b:77:89:fd:ef:ab:a3:ac:3a:48:9a:fb:
                    23:8b:bf:11:b1:24:be:f8:7c:44:e0:7b:88:a1:75:
                    59:0f:41:96:76:20:91:35:78:bc:ff:e5:9f:74:65:
                    01:43:bc:81:ff:d5:50:c9:ae:b6:4a:72:7d:e5:b9:
                    d8:26:ab:dd:1e:76:e8:d2:16:a1:4f:32:88:8a:94:
                    f5:db:01:8f:a5:5e:6e:83:1d:36:59:62:00:7b:3d:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:96:32:F9:88:F0:E2:1E:10:6A:46:E4:77:58:55:54:E2:C2:74
            X509v3 Authority Key Identifier:
                keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:a6:1d:2f:04:b7:e7:28:0f:7d:a9:a9:e0:0c:c3:83:94:
         8c:58:d2:0f:9a:94:9d:a5:94:85:2a:51:0e:46:15:ae:e1:2f:
         79:ed:40:35:18:85:38:98:74:b6:a0:62:f0:da:2a:d4:88:3f:
         0d:8a:cc:3d:1e:0f:0c:c2:cb:10:15:8b:59:31:5f:04:26:37:
         bc:65:e1:43:44:63:11:57:5a:a2:b5:df:da:e0:00:2c:da:40:
         5b:ad:bb:ff:bb:0b:47:90:4a:db:34:1b:f9:93:2e:20:21:a0:
         5a:5f:4a:cd:bc:22:45:63:7e:a5:92:de:48:43:37:7b:79:0c:
         a4:5c:a5:0d:48:5b:3d:f9:ec:f0:e9:e2:af:4e:5e:80:bf:56:
         3d:70:36:96:7c:3e:df:f6:a7:33:b9:08:59:de:a4:97:b6:76:
         b3:3a:66:ad:b2:a0:2d:af:3a:32:4c:be:e9:e5:99:80:28:46:
         5a:aa:91:c9:1b:4c:8b:1a:b9:72:f4:7c:9d:1a:85:9e:a3:0e:
         6b:4f:c4:33:81:f4:55:ce:41:f0:4d:47:43:85:e4:4e:bc:45:
         b5:3b:dd:61:53:d4:e6:1d:66:24:a1:ea:f0:3c:b4:22:2f:87:
         53:8a:a3:ea:83:97:64:35:04:11:bb:29:dd:f1:29:5f:6a:06:
         5c:37:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:18:05 2026 by rpki-client