Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File:                     lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier:          1eiBdfCjz+R1u4Y5SxdP9P4YdqZqbdDuNXLeIEEPvmY=
Subject key identifier:   1A:72:83:E5:3F:E9:F6:F5:0D:25:85:C3:88:AD:D2:3D:BE:E7:30:46
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer:       /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial:       01A0C77C81954600E7CDF4A4AE9CB7C8AC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number:          0787
Signing time:             Tue 22 Sep 2026 05:00:20 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:20 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:20 +0000
Files and hashes:         1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
                          2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
                          3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
                          4: RArElwhZ2L2Zlj0l8O2N8bOSric.roa (hash: 4r5JtsLOAT3pIVx8q/4/irh2e8gGrH4iwTU+5S/pCGo=)
                          5: kcCZM38l6ytFTSCCRGE4xZmb_5M.roa (hash: vdyTwvLkPGrGBvR3sd98RK3Nag8A+19y2RgUseY1tS8=)
                          6: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: V2euXdx/FKxoncmQMmQiAOhHTaZps38QOHp8KiQWB+g=)
                          7: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:81:95:46:00:e7:cd:f4:a4:ae:9c:b7:c8:ac:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
        Validity
            Not Before: Sep 22 05:00:20 2026 GMT
            Not After : Sep 23 05:00:20 2026 GMT
        Subject: CN=1a7283e53fe9f6f50d2585c388add23dbee73046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:cc:b8:ba:2e:92:cc:f5:31:05:0f:7d:a3:
                    06:66:a9:08:68:13:13:ae:1a:ec:f6:84:ae:5d:ec:
                    4b:ec:76:d0:12:4f:45:44:74:fa:d0:5b:4e:dc:41:
                    6a:94:2d:30:92:69:df:29:c9:a2:6f:b6:44:f9:aa:
                    f3:af:7b:76:ee:94:b6:61:d9:80:da:4c:34:22:66:
                    aa:dc:4e:df:98:86:b4:e3:43:90:9c:55:07:8c:8d:
                    bb:e5:0f:0e:42:f9:12:14:ad:5b:1e:ec:5a:12:22:
                    fe:71:5b:e0:0e:0d:ce:2e:9c:1f:25:7b:a7:c4:6e:
                    20:37:3e:02:07:eb:4d:0d:d2:d0:5e:b4:c8:8c:cb:
                    a4:39:60:f3:d0:67:72:54:a6:e2:1f:8a:29:95:0b:
                    cd:38:7a:69:f3:e1:29:44:b0:b7:b5:33:49:23:d8:
                    67:db:65:39:8d:d1:55:ae:fa:82:17:25:68:cb:3f:
                    3b:ac:79:f6:97:ed:98:d6:be:35:7e:1a:80:87:d3:
                    fe:f9:b9:27:27:2d:81:ce:6b:30:e8:a6:01:5f:00:
                    fb:48:97:1b:0b:12:ab:66:f2:db:d5:6e:bc:c9:64:
                    7c:c2:75:95:c1:de:57:9c:d5:8f:ad:dd:26:13:a4:
                    78:81:3e:de:c5:3a:30:c0:9c:07:ef:df:32:8b:56:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:83:E5:3F:E9:F6:F5:0D:25:85:C3:88:AD:D2:3D:BE:E7:30:46
            X509v3 Authority Key Identifier:
                keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:07:66:eb:b6:f5:98:89:69:3a:7f:e4:28:63:d8:cf:70:
         62:8e:0e:c1:da:ab:dc:af:38:5d:0e:2c:3d:c2:dc:ea:46:34:
         97:05:40:99:95:e8:1d:01:75:00:fb:af:a3:8c:77:d8:93:c2:
         11:fb:73:21:1f:56:a7:e8:16:47:4f:d6:ac:df:be:ae:07:4e:
         06:30:95:04:05:c3:39:aa:c7:f7:1e:9b:00:c3:26:0e:2c:b3:
         4c:0c:1d:d3:00:95:ad:be:69:7b:41:52:b2:08:2b:4a:d1:05:
         c2:cd:10:1e:2a:4a:8a:43:54:90:2a:e7:2d:20:52:cb:02:d1:
         d4:ea:b7:fe:84:75:89:91:66:c6:ad:45:92:2e:15:0c:f4:a4:
         52:3a:f7:28:6b:f3:a1:3c:55:0c:c8:62:42:cc:b3:bd:04:c6:
         91:01:01:6a:63:12:90:d7:67:13:2f:6e:3a:ea:57:9c:89:04:
         19:04:51:24:8b:ae:4b:0e:85:4c:95:92:3d:a2:43:ee:e0:a0:
         1b:9f:6c:41:06:3c:e8:0c:48:23:c3:6c:ea:36:25:a5:53:a0:
         fc:51:fa:ea:30:15:16:66:a0:d9:36:14:dd:f0:1e:2c:ab:74:
         f3:43:85:da:3f:5c:bb:b0:b6:34:a6:2b:70:de:97:e5:f3:5c:
         f1:be:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:00:49 2026 by rpki-client