Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File:                     lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier:          DckUG38vAbhWfaqhD5sBx8P70c8i5BocbD2aWx8gcuQ=
Subject key identifier:   19:B3:7D:D3:BC:F4:14:42:35:C3:6A:28:A2:D6:D7:22:A3:FD:0E:39
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer:       /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial:       01A0CF363EDAD131335D7F44D4877336E9BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number:          025D
Signing time:             Wed 23 Sep 2026 17:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:33 +0000
Files and hashes:         1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
                          2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: xM5qGg8+eEYb4t1j7zy2h+cKP2JxM+VaqbdNtB2OBC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:3e:da:d1:31:33:5d:7f:44:d4:87:73:36:e9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
        Validity
            Not Before: Sep 23 17:00:33 2026 GMT
            Not After : Sep 24 17:00:33 2026 GMT
        Subject: CN=19b37dd3bcf4144235c36a28a2d6d722a3fd0e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:8e:72:54:ae:7c:32:88:93:d1:4b:67:e7:
                    be:81:e8:8f:a7:f9:b5:86:c2:33:8a:26:09:9e:8e:
                    40:81:2f:05:60:b8:4f:cc:53:82:f1:75:b2:a2:74:
                    95:1b:b0:20:49:f8:60:4e:2b:45:51:0d:9b:6a:ed:
                    66:fd:cd:64:1e:78:46:65:bb:5c:79:ee:fc:b2:dd:
                    73:c7:8d:9d:19:ff:7d:7a:db:09:9d:96:c6:4c:53:
                    32:ec:fe:8b:d2:64:4b:f4:b0:a9:b4:9f:b2:b5:c2:
                    be:eb:eb:3c:73:7a:22:e0:32:78:1b:d2:82:b5:bf:
                    a3:44:13:ab:53:ec:a4:6d:d4:3b:da:63:0c:7d:9d:
                    91:3a:f6:9c:2c:6f:0d:6f:aa:80:2e:de:19:39:97:
                    b4:b0:8b:f5:9e:ed:ce:f7:d9:a5:be:bb:dd:8c:20:
                    3b:da:18:8f:5e:70:a0:3b:1b:d8:c5:9f:1b:ae:1c:
                    71:0d:09:73:e7:fa:dc:9d:29:63:41:5d:16:5e:cc:
                    d6:f6:5f:f8:0c:f2:a8:dc:8a:4b:bc:5d:15:59:9e:
                    ed:8d:ab:62:8f:ac:04:8d:33:36:29:56:ee:87:f1:
                    57:93:04:49:81:64:60:d9:69:9a:20:12:81:e8:fa:
                    18:fb:4d:9d:90:bb:3c:f8:ba:60:c2:e5:54:d1:d6:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B3:7D:D3:BC:F4:14:42:35:C3:6A:28:A2:D6:D7:22:A3:FD:0E:39
            X509v3 Authority Key Identifier:
                keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:f4:d0:bd:93:a6:da:2e:e0:d0:1f:15:3c:18:ca:e1:cc:
         0c:c0:c9:14:87:e2:a2:a0:10:5a:b4:6a:7e:5f:85:5b:88:b1:
         80:a0:d5:bb:66:8f:54:86:ac:0e:e1:76:3f:f6:5b:4a:6a:0d:
         14:60:96:c2:1a:99:17:8c:48:90:b0:b6:e5:a9:76:3c:61:80:
         d9:ba:08:c2:8b:cb:56:7d:ca:60:bd:11:a0:ed:b0:9b:e5:42:
         76:14:5c:cd:2c:bf:c1:8e:e3:97:a4:f8:fd:33:34:93:84:a0:
         f0:92:e1:e3:d9:1f:e6:df:dd:89:f5:85:b7:78:7f:e5:f7:a7:
         be:9f:aa:7d:b9:1d:59:f5:23:ef:9c:2c:a6:43:fd:d5:ef:21:
         60:3f:8b:d2:9e:6d:7a:7f:28:86:e4:55:f1:d1:ea:55:ab:7e:
         cf:b0:b6:04:c8:cc:e2:70:0c:82:4d:79:31:9d:c7:7b:ed:cb:
         71:06:64:a3:cd:67:00:90:04:0c:04:52:aa:d6:32:28:ba:18:
         68:48:61:79:2f:fd:e1:92:06:b1:df:b2:f6:47:4b:d3:f4:e4:
         2a:99:e8:af:57:4d:28:d8:f9:e2:d2:4d:2e:ad:c2:c9:8f:b9:
         f2:46:0e:49:53:2b:ff:1b:49:f8:b2:8f:a1:e4:45:7d:7f:67:
         15:43:0d:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNj7a0TEzXX9E1IdzNum/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzBjMjczYWY5ZWI1NTY2NDMwODhlNDNiZWYzYTZhMTgx
Yzg3YzIwHhcNMjYwOTIzMTcwMDMzWhcNMjYwOTI0MTcwMDMzWjAzMTEwLwYDVQQD
EygxOWIzN2RkM2JjZjQxNDQyMzVjMzZhMjhhMmQ2ZDcyMmEzZmQwZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP+OclSufDKIk9FLZ+e+geiPp/m1
hsIziiYJno5AgS8FYLhPzFOC8XWyonSVG7AgSfhgTitFUQ2bau1m/c1kHnhGZbtc
ee78st1zx42dGf99etsJnZbGTFMy7P6L0mRL9LCptJ+ytcK+6+s8c3oi4DJ4G9KC
tb+jRBOrU+ykbdQ72mMMfZ2ROvacLG8Nb6qALt4ZOZe0sIv1nu3O99mlvrvdjCA7
2hiPXnCgOxvYxZ8brhxxDQlz5/rcnSljQV0WXszW9l/4DPKo3IpLvF0VWZ7tjati
j6wEjTM2KVbuh/FXkwRJgWRg2WmaIBKB6PoY+02dkLs8+LpgwuVU0dYV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmzfdO89BRCNcNqKKLW1yKj/Q45MB8GA1UdIwQY
MBaAFJcwwnOvnrVWZDCI5DvvOmoYHIfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAt
ZjJkNDBhZGUzYjliLzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAtZjJkNDBhZGUzYjli
LzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniH00L2T
ptou4NAfFTwYyuHMDMDJFIfioqAQWrRqfl+FW4ixgKDVu2aPVIasDuF2P/ZbSmoN
FGCWwhqZF4xIkLC25al2PGGA2boIwovLVn3KYL0RoO2wm+VCdhRczSy/wY7jl6T4
/TM0k4Sg8JLh49kf5t/difWFt3h/5fenvp+qfbkdWfUj75wspkP91e8hYD+L0p5t
en8ohuRV8dHqVat+z7C2BMjM4nAMgk15MZ3He+3LcQZko81nAJAEDARSqtYyKLoY
aEhheS/94ZIGsd+y9kdL0/TkKpnor1dNKNj54tJNLq3CyY+58kYOSVMr/xtJ+LKP
oeRFfX9nFUMNYQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:03:24 2026 by rpki-client