Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
File:                     LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft (raw, json)
Hash identifier:          ahAH5vaE05HqbDL5kNqkkkbeM3WwzxgcNcBdMK6E6sA=
Subject key identifier:   E7:3F:9F:2E:D6:B4:B7:43:E2:8C:D1:70:91:B1:5C:DC:EC:8F:06:B3
Authority key identifier: 2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
Certificate issuer:       /CN=2d5036357fbc3ca30866ade063262ad0d440b660
Certificate serial:       01A0BD9E2FB64BA6289D3CA6E663833EBF3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
Manifest number:          0175
Signing time:             Sun 20 Sep 2026 07:00:55 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:55 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:55 +0000
Files and hashes:         1: LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl (hash: l/WsLv4rymtygFyvFDAft0sY0B2uYFVHwCDcCnNYdZg=)
                          2: Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa (hash: Z7pDSRPHr8DmCaGGeQ16hWhefhTjEYXfJeW0Mr0f2Qs=)
                          3: wDbeUy5vMGU92nZCGMGGt4_gvPU.asa (hash: izW7X2u98Zh+LrJ8/PtYNnVCPiYS+v78ooSttWUx0mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9e:2f:b6:4b:a6:28:9d:3c:a6:e6:63:83:3e:bf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5036357fbc3ca30866ade063262ad0d440b660
        Validity
            Not Before: Sep 20 07:00:55 2026 GMT
            Not After : Sep 21 07:00:55 2026 GMT
        Subject: CN=e73f9f2ed6b4b743e28cd17091b15cdcec8f06b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:d9:db:3e:e5:b7:0a:6b:78:29:2e:62:10:
                    ab:75:86:15:61:b7:36:19:01:b3:4c:10:e3:c9:64:
                    dc:86:66:a6:9a:4b:87:fd:16:dd:88:7e:50:a2:06:
                    32:b4:aa:48:aa:5a:4d:aa:74:5d:0c:5c:6d:8f:44:
                    b9:f0:8f:2d:cd:ca:12:4b:d9:27:98:74:67:41:5a:
                    8b:06:23:e1:b1:02:cb:a5:d7:a8:bd:ef:10:b1:d4:
                    43:4e:12:3e:fc:61:be:de:30:09:bf:2c:be:6c:07:
                    14:15:72:e6:7b:5e:c7:2c:51:3f:e2:26:b2:6a:b1:
                    75:3b:6e:f0:79:c3:d6:e1:32:68:35:e0:8b:90:81:
                    68:16:ba:71:61:06:02:3c:c4:38:ad:95:d3:4e:96:
                    dd:4d:26:c1:6c:08:2d:be:43:d5:ec:66:67:f2:6a:
                    fd:64:28:35:14:2f:64:0b:59:fa:d9:a7:ef:81:90:
                    88:52:2b:d7:fb:0b:4f:0c:60:69:a2:1d:15:fd:ae:
                    92:c7:ea:38:1c:f0:d2:72:2a:41:01:8f:ee:f8:27:
                    3e:09:0e:b3:cd:8a:cf:2f:0d:a1:6c:49:4f:e2:be:
                    90:47:4f:d2:71:30:e7:87:7b:b7:db:3e:45:84:7f:
                    18:e9:24:86:7c:58:a7:0d:1c:18:30:98:83:93:03:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:9F:2E:D6:B4:B7:43:E2:8C:D1:70:91:B1:5C:DC:EC:8F:06:B3
            X509v3 Authority Key Identifier:
                keyid:2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:67:28:5b:5a:7e:dd:29:77:db:3f:07:19:3d:8b:56:8b:
         58:d2:58:ee:ac:d3:2d:33:f2:ce:a4:7c:c1:69:fa:96:f0:c5:
         d5:f2:fd:b9:6a:19:fa:b2:5d:52:dd:d8:09:e2:78:e9:c9:39:
         59:6a:39:2b:7e:7f:fc:57:c7:ba:7a:64:ab:ef:6e:96:f9:ac:
         b5:e9:da:06:fa:30:07:59:88:2c:e0:ed:31:f7:3d:5f:27:39:
         b2:63:30:d4:bc:32:e4:1c:c1:d7:15:16:d5:35:c3:f6:f0:31:
         74:fc:50:ba:2c:3c:3c:71:59:e2:64:e9:04:5e:b6:19:51:52:
         5b:8a:5e:86:da:aa:29:73:b8:ae:28:5d:1e:ef:07:f0:67:ee:
         32:a1:47:89:df:22:1b:6d:55:eb:90:fe:72:34:55:39:d8:91:
         ad:37:b4:ba:0a:fb:8e:d9:18:26:1b:8b:bc:2d:68:e7:16:8a:
         f1:c5:6a:d9:1f:01:50:04:d1:f8:0a:b0:ef:37:0a:da:57:e0:
         4d:a4:ed:fe:ab:f0:ef:bf:32:0f:20:8d:d5:d5:cb:36:c1:19:
         5e:68:83:83:c1:4c:24:eb:44:4e:b8:a2:4c:aa:61:9f:d4:b7:
         9e:80:c6:50:d6:94:ce:00:7d:55:79:15:3c:57:89:cb:a3:c6:
         aa:3d:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:05:26 2026 by rpki-client