Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File:                     L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier:          fppyl/M+TzCGxaNYdUEpwnWM+WBSvxBtHATnmsCbsRk=
Subject key identifier:   68:C0:E4:B9:C9:16:A4:50:23:3D:DA:36:B2:74:46:57:D2:B0:2D:67
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       01A0BFFA17EB1ED7A4EC92648CEB7D9F3589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number:          1AB2
Signing time:             Sun 20 Sep 2026 18:00:33 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:33 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:33 +0000
Files and hashes:         1: 1trGtYwQIfgKe-NMvZ_3L-OEiwI.asa (hash: cyg4byY89k9M+dKyRxrNqSKtUSke7l4RnAZku93H+zw=)
                          2: 2BKAXtln8KzReY8_THzqrmmiyM4.asa (hash: Sc3aPkbPjVsQ6j/oD90t2utIy322EBG1ZVdIGT6gJ+c=)
                          3: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: ayN7LUPLC0px2gS5VIKSOHZcF6ZR+0zHRiHKaXS5eAo=)
                          4: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
                          5: vgZTkNH9EhrtEt7Ls7ZQVtiF_EA.roa (hash: 2+LYx0b1ohhezJYmEr08X78XCAC8VVPktKsrgYtWVpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:fa:17:eb:1e:d7:a4:ec:92:64:8c:eb:7d:9f:35:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Sep 20 18:00:33 2026 GMT
            Not After : Sep 21 18:00:33 2026 GMT
        Subject: CN=68c0e4b9c916a450233dda36b2744657d2b02d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:39:c9:74:ea:0d:af:90:f6:ab:37:5c:45:
                    a4:2b:9d:72:92:10:aa:7e:fd:3d:e5:92:26:a2:8e:
                    04:f3:3c:9c:e8:c9:61:f1:69:1a:2b:d7:ab:ac:6e:
                    a0:8e:4c:9a:b8:4e:e5:14:cc:38:52:08:8e:ef:02:
                    66:1f:e2:65:df:18:d1:ed:fb:9b:7a:93:8b:b5:7f:
                    7f:8b:f8:d3:45:de:08:46:e6:5a:c6:62:c1:df:71:
                    9b:cd:d3:69:98:1c:81:76:4f:35:3a:7d:14:0e:36:
                    f4:ff:ea:27:0f:01:bf:f4:d1:6d:6c:4b:48:43:90:
                    9c:d4:a4:87:df:28:5d:8d:78:05:6d:97:ba:b3:c9:
                    92:21:d3:ce:e5:12:79:ce:26:7b:f8:38:01:96:1a:
                    3f:d5:3e:32:0f:a1:c1:fa:fd:0f:2f:6d:68:92:65:
                    aa:b3:93:5a:71:7c:1e:15:4f:ce:6a:fb:82:1c:8d:
                    27:25:ee:25:ae:1f:e8:fc:cc:be:06:dc:f2:a2:b8:
                    1b:5d:3b:4f:a7:89:52:4e:89:0c:6a:61:f5:16:bc:
                    fb:83:cb:76:a9:20:e2:3b:13:13:c1:a4:3b:90:15:
                    44:b8:8f:64:5e:9a:ef:4e:fd:cd:1e:61:e4:78:fd:
                    23:e2:17:b2:b1:bf:7c:2e:f8:ff:89:c0:dc:2b:17:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C0:E4:B9:C9:16:A4:50:23:3D:DA:36:B2:74:46:57:D2:B0:2D:67
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:6e:69:08:99:2b:af:aa:ab:10:ef:48:1d:c8:96:a9:a6:
         6f:18:28:f0:6f:c6:42:7f:ce:06:be:af:51:61:cf:6e:57:f5:
         aa:a7:82:eb:1e:65:45:6c:32:69:26:2e:2a:15:aa:33:7e:55:
         44:fb:bc:2d:4b:e4:c4:52:96:08:cd:c8:1a:ee:fe:42:2f:16:
         19:bf:c5:e5:80:7b:2c:d4:d4:40:e3:83:cf:46:2d:14:11:1b:
         3f:be:02:a6:4d:f8:e3:91:29:a8:4d:98:44:d7:25:18:51:ca:
         42:76:35:ff:9d:b2:98:a6:b8:bc:4e:d9:bc:6f:4f:3e:38:76:
         5c:7d:3c:e5:63:9f:7d:37:51:f1:85:01:8d:a3:2c:69:eb:64:
         40:78:8d:f0:cf:dd:ec:45:b8:0e:07:86:df:25:d8:a6:8d:82:
         4b:f6:a8:58:a7:0d:35:a4:36:28:af:9f:d8:c0:01:4a:c1:18:
         73:aa:4b:ac:ff:75:38:01:b2:ab:12:c4:12:8b:d6:16:f3:7b:
         95:21:93:43:47:d7:32:46:1a:ef:6f:70:5c:d9:06:d5:4a:8b:
         f8:b1:ab:ed:94:36:f9:b8:20:fd:68:32:0e:6d:20:35:f3:b5:
         57:75:79:2b:12:5e:40:8e:3c:52:ce:97:cc:8c:96:84:10:0e:
         30:c1:02:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/+hfrHtek7JJkjOt9nzWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjYwOTIwMTgwMDMzWhcNMjYwOTIxMTgwMDMzWjAzMTEwLwYDVQQD
Eyg2OGMwZTRiOWM5MTZhNDUwMjMzZGRhMzZiMjc0NDY1N2QyYjAyZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskM5yXTqDa+Q9qs3XEWkK51ykhCq
fv095ZImoo4E8zyc6Mlh8WkaK9errG6gjkyauE7lFMw4UgiO7wJmH+Jl3xjR7fub
epOLtX9/i/jTRd4IRuZaxmLB33GbzdNpmByBdk81On0UDjb0/+onDwG/9NFtbEtI
Q5Cc1KSH3yhdjXgFbZe6s8mSIdPO5RJ5ziZ7+DgBlho/1T4yD6HB+v0PL21okmWq
s5NacXweFU/OavuCHI0nJe4lrh/o/My+BtzyorgbXTtPp4lSTokMamH1Frz7g8t2
qSDiOxMTwaQ7kBVEuI9kXprvTv3NHmHkeP0j4heysb98Lvj/icDcKxdVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjA5LnJFqRQIz3aNrJ0RlfSsC1nMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaFuaQiZ
K6+qqxDvSB3Ilqmmbxgo8G/GQn/OBr6vUWHPblf1qqeC6x5lRWwyaSYuKhWqM35V
RPu8LUvkxFKWCM3IGu7+Qi8WGb/F5YB7LNTUQOODz0YtFBEbP74Cpk3445EpqE2Y
RNclGFHKQnY1/52ymKa4vE7ZvG9PPjh2XH085WOffTdR8YUBjaMsaetkQHiN8M/d
7EW4DgeG3yXYpo2CS/aoWKcNNaQ2KK+f2MABSsEYc6pLrP91OAGyqxLEEovWFvN7
lSGTQ0fXMkYa729wXNkG1UqL+LGr7ZQ2+bgg/WgyDm0gNfO1V3V5KxJeQI48Us6X
zIyWhBAOMMECUg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:17:37 2026 by rpki-client