Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
File:                     lYs6eEkk73mV168fvRdniKbCt1Q.mft (raw, json)
Hash identifier:          HsSOQw9UYE4C919DNHk3FwRIH9vHBnB79cfROn/cBSI=
Subject key identifier:   AB:91:63:50:17:AB:81:EA:BE:D1:D8:13:CC:B2:2E:BE:EE:E8:DB:B8
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Certificate issuer:       /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial:       01A0F2D662ACC971091C0FCDA13650B64BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
Manifest number:          F7
Signing time:             Wed 30 Sep 2026 15:02:11 +0000
Manifest this update:     Wed 30 Sep 2026 15:02:11 +0000
Manifest next update:     Thu 01 Oct 2026 15:02:11 +0000
Files and hashes:         1: BPt6RAa7ENrJmkVCFGkolciZ5ow.roa (hash: Qu8fUjGy1xxsRwZtDqrZ7qwLZ/hB6gVPADzDVKSoBIk=)
                          2: CuVc4PF5d3AMtHwH59bi3KpoEcU.roa (hash: YY5JT2rh1l3bec5cvOqTSnBQtzBt2nClBilF97d7XCU=)
                          3: aRQ9uwskWeFhYTdPjO7Okig-UjE.roa (hash: BkfwV9uzeeugOlyi0Sysa2EHfE+nO+JpIDCMPMrtqUc=)
                          4: lYs6eEkk73mV168fvRdniKbCt1Q.crl (hash: MmxvurG/pZh4XiqzGbcrelnHFZDNBUKse5/caDzB8/I=)
                          5: liKRFliJG9HmzqpkhjZr0nxWozg.roa (hash: /xPWEbs1m0lm+Et8vhC1fCxdl4sfLjj/5sEcemF1W1k=)
                          6: ytZvKlFnz1qSthhK5jm3iOrymuU.roa (hash: SEmRdwSemsDohtKTnRpE/p/H3uUMSjqwrsy6C4xgDao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:d6:62:ac:c9:71:09:1c:0f:cd:a1:36:50:b6:4b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
        Validity
            Not Before: Sep 30 15:02:11 2026 GMT
            Not After : Oct  1 15:02:11 2026 GMT
        Subject: CN=ab91635017ab81eabed1d813ccb22ebeeee8dbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:69:51:17:48:f1:c6:56:82:37:c6:8b:96:
                    e0:63:80:a0:c2:75:e1:fc:a0:15:a9:d1:ce:e5:e3:
                    99:15:a6:1e:fd:93:ec:fa:07:5d:8c:84:91:35:32:
                    8b:39:0e:d8:6a:0d:9b:3c:da:93:a3:77:fa:ba:06:
                    2b:a3:e3:74:83:8c:46:9d:52:14:e9:5a:26:67:bb:
                    91:0b:0b:49:93:2d:5c:2d:f6:d9:96:bf:f0:1b:a1:
                    82:75:aa:6d:b4:55:29:ee:c0:8c:db:a6:c2:5d:d6:
                    36:c2:83:99:e2:fb:70:f6:77:3b:3e:04:53:43:62:
                    1a:f6:10:1a:7e:a8:8a:9e:55:fb:cf:de:16:83:e4:
                    41:94:90:a2:d8:77:17:02:88:2e:2a:84:9d:05:d8:
                    a7:98:cd:91:2b:bd:d3:25:ae:8d:aa:21:02:77:39:
                    c7:c1:e2:00:9e:ed:3f:11:35:de:e4:88:90:14:1d:
                    10:cf:76:ad:7b:4c:3f:a2:16:f4:39:45:bc:75:d0:
                    f7:43:ff:a0:0c:a8:ad:95:bf:e2:9a:cb:18:af:ae:
                    85:9b:52:61:e5:82:1c:bb:d8:90:3d:77:94:de:a2:
                    60:46:6f:13:a4:8f:e1:52:03:96:9f:af:d8:c3:43:
                    d2:d1:16:52:a6:c4:f1:ab:4d:b7:f3:e0:c8:3c:32:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:91:63:50:17:AB:81:EA:BE:D1:D8:13:CC:B2:2E:BE:EE:E8:DB:B8
            X509v3 Authority Key Identifier:
                keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:51:69:f5:88:02:6f:a1:7f:d5:be:37:17:c5:bc:30:ee:
         9f:8c:3b:e0:45:32:38:66:f0:98:a3:2c:69:49:06:ed:18:13:
         03:d5:d8:68:98:53:97:ce:fb:f8:37:cf:c4:ae:09:f8:6b:c4:
         ce:a9:1c:83:c5:75:c9:d0:a4:f0:ab:8e:c5:89:b3:b6:07:34:
         1d:ca:5b:12:da:bf:b3:a6:b2:1e:07:c4:8b:72:07:b2:1a:fa:
         69:bf:1a:e9:9a:bc:88:6e:98:e9:ad:37:6a:80:f5:09:4b:72:
         cf:2f:d4:bc:fc:44:f8:ba:b9:58:ac:5a:de:c3:bb:ca:84:2a:
         fd:11:a6:31:65:cc:f5:4f:72:08:48:79:80:83:85:84:38:19:
         f8:87:49:11:dc:6f:03:fe:4e:52:2f:4a:6c:4b:aa:ac:fc:30:
         07:0d:de:1a:8b:5b:f7:2a:a5:4e:1e:a2:86:a7:e9:1d:85:b0:
         0c:9f:a3:a2:0c:b9:fa:25:ca:3b:be:85:89:0d:28:84:7b:c1:
         89:3a:7f:90:a0:c3:39:65:bf:0e:31:5e:bc:4e:31:87:72:cb:
         19:b0:8d:9e:13:ba:3f:db:1b:26:25:14:c4:21:03:2c:5a:7b:
         9a:03:56:1c:5a:0b:3b:92:d5:49:d5:7c:84:34:0e:43:4f:ec:
         c1:b7:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:06:03 2026 by rpki-client