Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          iqEaQNfiwMgaflJRQsjHJ3lY2FEMAQg3kYXzoj1IvEc=
Subject key identifier:   E8:5D:75:62:70:EF:21:7F:08:16:6A:33:32:56:BA:BC:99:CC:28:6D
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       01A0C33250C23130E0F8ED6174533EE68264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1A77
Signing time:             Mon 21 Sep 2026 09:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:49 +0000
Files and hashes:         1: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (hash: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M=)
                          2: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: BIjbgFP/H8TmgUAl8K9i70lyJaUsxNFaofUc5GXrCCE=)
                          3: MtlNPbOiQrDPq9JzI5yqmhqIeu0.roa (hash: jVaCEGYVnh9jmEuUNesf3uuQIlhN1CzzAG7BWnlcSmA=)
                          4: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (hash: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ=)
                          5: _tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa (hash: sG2gr2VibfwBBWqITc4yDuS8f9cCBW1DEngPZoKQfNg=)
                          6: gGIqjOk7g2PlsS-LqhKTvWucpIY.roa (hash: W502vrehV9CtMQIyWcS05BwV8XiwYtXO1sMXV5IcC2E=)
                          7: q4XekdpB8TJEjFPDt8ccc_PZPoY.roa (hash: PjKWv/0KNDEM4pTyCe/55FuN+l88tsgTGIft6oTHhlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:50:c2:31:30:e0:f8:ed:61:74:53:3e:e6:82:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Sep 21 09:00:49 2026 GMT
            Not After : Sep 22 09:00:49 2026 GMT
        Subject: CN=e85d756270ef217f08166a333256babc99cc286d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:f0:95:31:a6:d8:4d:0a:3b:42:98:32:4e:
                    b4:d6:68:a0:8f:97:67:96:65:99:eb:55:ee:d4:67:
                    26:e9:9e:cf:89:aa:fc:90:13:52:2a:d5:08:ed:43:
                    94:9b:4f:cc:36:0e:02:8e:8e:52:b1:98:8d:d8:fd:
                    82:20:26:39:52:09:ee:65:7a:2a:e0:13:b5:25:e6:
                    6f:9b:d4:d3:41:af:ea:e5:b2:5b:7f:68:20:9f:9e:
                    2a:7e:d7:23:03:81:83:47:9f:4d:75:7e:51:61:1f:
                    9b:91:a8:c9:1a:0c:45:ab:6a:a3:c3:73:18:b6:98:
                    0d:13:5f:41:8c:91:32:f7:7f:73:6e:7e:e3:c4:91:
                    08:12:35:74:33:31:97:25:97:b8:79:cb:28:c3:9f:
                    37:15:bd:a7:b4:ac:7a:8d:b8:ce:82:ef:49:25:52:
                    ba:f6:e8:a9:19:9c:d0:68:f5:6f:d2:c4:cd:a2:10:
                    a7:7e:94:c3:96:df:d3:fd:47:5a:a5:7a:02:7a:3d:
                    02:5c:9f:f9:bc:04:ae:9f:57:ef:f5:f4:13:52:e9:
                    f7:bb:dd:01:7b:ed:be:9d:92:08:2a:3d:be:96:e0:
                    fc:c3:a5:4d:7c:d5:8a:21:c2:6f:ab:39:bc:41:bf:
                    06:9a:9b:1d:98:1c:41:6a:fa:a6:8a:3d:4b:d2:ed:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:75:62:70:EF:21:7F:08:16:6A:33:32:56:BA:BC:99:CC:28:6D
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:14:a4:d3:6a:11:40:dc:06:ac:75:9d:88:02:2e:86:ce:
         07:11:b0:65:15:09:a3:50:8a:1c:f2:06:6a:8a:04:28:46:c7:
         af:50:d6:cc:e6:03:10:ee:c8:d5:29:75:d6:12:61:a7:6e:9a:
         1d:49:71:ed:d7:08:b8:1a:ef:d0:e5:21:7d:38:c3:e6:46:9a:
         37:7a:6a:82:c6:ba:22:03:6e:75:fa:9f:15:d2:d2:ad:a4:3c:
         2e:ca:28:51:8b:fe:7f:c4:db:cb:d8:49:59:ea:71:c9:4d:a7:
         5d:c3:77:1c:19:64:ca:01:18:67:27:87:6f:2c:2f:b7:fd:60:
         42:5d:3e:a5:c8:e2:cb:6f:bc:00:05:51:ab:89:f8:4e:41:c2:
         30:c1:1c:10:15:c7:6d:69:b0:f7:a5:fc:40:45:19:f2:6f:bf:
         df:b6:ed:bf:28:5a:92:1a:6a:d5:f5:40:12:a4:4a:86:45:e0:
         1a:f0:d8:bc:4e:b0:fe:b7:dd:43:2b:19:54:f5:83:62:06:1c:
         57:16:2d:ed:dc:8f:c5:44:d3:f5:48:e2:7e:a4:ac:39:b6:0e:
         15:f5:c5:8b:61:14:f7:b3:2f:98:3b:ce:d6:75:9b:d8:24:0c:
         fb:01:90:a2:0c:33:86:97:e3:5c:8d:05:5d:e1:4e:67:ac:f3:
         ab:02:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:24:07 2026 by rpki-client