Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
File:                     Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft (raw, json)
Hash identifier:          zW3Ep0AiMQhPJLygiLFIZDXvZNvXHNGVe6fEHwlIiHM=
Subject key identifier:   E1:F1:6D:68:48:7B:5C:70:AC:C8:27:87:73:9C:26:B1:4B:88:03:F4
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Certificate issuer:       /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial:       01A0C368C7026D49CB9686DBE44BB4832FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
Manifest number:          019A
Signing time:             Mon 21 Sep 2026 10:00:18 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:18 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:18 +0000
Files and hashes:         1: GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa (hash: nP0lDARBEATLaWhYMKJWCgHhBeTpVKHXhkLXZPpWw+o=)
                          2: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl (hash: MMoD98Y8MibzsUviR/XQmMk8FjRivyW9l4IjJtbgma0=)
                          3: Uny2MgmTOohOF4BGAwFHFYH0KJs.roa (hash: Hdl7jGTsKmTRUmRObQs3XRCDB7iUF6evKCo5QMlo1+g=)
                          4: ru7hTHED5bacQX5NiNWyNtNkE6E.roa (hash: Kxyrq99WXIYtPAR/nabYKrZwHSHfCnBmfTWCGs/Kt3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:c7:02:6d:49:cb:96:86:db:e4:4b:b4:83:2f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
        Validity
            Not Before: Sep 21 10:00:18 2026 GMT
            Not After : Sep 22 10:00:18 2026 GMT
        Subject: CN=e1f16d68487b5c70acc82787739c26b14b8803f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:36:91:53:23:ec:15:d8:ac:b3:36:8e:9c:
                    20:e0:ec:77:9c:b3:aa:fd:a6:25:2c:87:a2:d5:f6:
                    75:de:17:57:1a:3a:cb:38:d7:9c:3d:de:7f:8a:e5:
                    c0:53:a6:52:44:16:17:3d:f8:78:6b:51:ab:b9:47:
                    61:46:22:bb:17:17:ea:ab:bb:8e:be:b2:0b:c8:ea:
                    22:f7:54:d5:2f:b3:4c:20:5b:01:e0:9e:69:de:3c:
                    e5:b2:d8:9a:e3:de:e5:28:54:c6:91:4c:3c:bd:ab:
                    29:85:4b:8f:31:7d:b1:5f:6b:6b:50:b6:dd:d7:0e:
                    21:09:25:58:45:ab:6f:19:bc:ae:3c:f9:4c:fd:d7:
                    63:71:12:42:55:12:8a:38:fc:92:c9:a6:67:85:0d:
                    6b:13:30:9d:b7:e3:d2:1e:b6:41:53:98:ff:db:09:
                    27:b6:d8:ae:60:e2:bb:ee:ee:7a:19:96:83:d4:7a:
                    29:62:5c:b5:d0:79:ec:11:41:a2:67:33:8a:68:15:
                    91:a3:02:29:9b:8b:d5:59:58:e0:e5:1f:7a:10:9d:
                    2f:c5:2d:49:c3:4d:1d:67:0d:16:a9:27:88:ef:c4:
                    80:13:22:1a:2e:b0:de:96:6c:63:56:ee:1e:fb:0a:
                    2d:c4:49:95:6a:bf:5f:71:1d:1e:c1:6a:7f:97:23:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F1:6D:68:48:7B:5C:70:AC:C8:27:87:73:9C:26:B1:4B:88:03:F4
            X509v3 Authority Key Identifier:
                keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b9:13:bd:d9:51:07:3b:56:33:3c:d7:d2:f1:18:fb:b5:bb:
         b2:06:38:93:6c:6d:eb:d1:e1:ed:92:23:20:1a:a8:96:50:87:
         e5:c6:21:29:d7:21:d1:b1:3d:5c:b1:17:5e:9d:96:e1:4f:7b:
         78:dc:a2:da:cd:90:20:ea:6f:7e:9f:a6:b0:55:8d:64:a1:a1:
         9e:ee:5a:c6:08:c2:49:6c:cd:94:8e:7e:d4:4a:5c:a6:89:0e:
         a9:c2:5d:e9:0e:b3:49:c6:40:d0:35:8c:c1:10:fd:8f:81:c9:
         96:3f:33:6e:fd:7a:8b:b2:ee:23:9d:ba:57:92:5a:38:a5:df:
         6d:37:dc:ca:b3:e4:04:4d:cb:86:93:7b:fa:85:84:8e:60:28:
         46:9f:e7:49:d6:8c:27:59:c6:cb:ad:19:d9:7c:b0:ab:cf:91:
         bc:bb:ff:79:3f:6c:09:35:6d:1b:78:b6:84:00:2f:0e:36:df:
         55:bf:a8:cf:77:04:d4:76:a8:b7:18:fb:14:5d:c1:e5:ca:f4:
         f8:98:41:c9:c9:08:41:2d:e5:54:a0:a2:3e:e0:73:35:dd:0f:
         ed:80:d0:71:89:ff:b7:c3:a0:c4:0f:de:6d:87:a8:5a:79:bc:
         e0:c9:21:72:ac:9d:82:03:9e:75:b3:5a:cd:8f:56:ac:0b:06:
         09:c2:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:36:40 2026 by rpki-client