Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File:                     LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier:          4Xyks/CO0GPRymKQTymEQXSCWFFXWFCot2F8Q3z2gWY=
Subject key identifier:   29:72:0A:43:BE:A2:28:DC:E1:B4:AD:29:14:E6:67:39:3E:F3:F1:9B
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       01A0C14386F0442FE4EC55B0A54865D34972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number:          1712
Signing time:             Mon 21 Sep 2026 00:00:23 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:23 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:23 +0000
Files and hashes:         1: 4C8f5FARcG-ZhuB-vuYks_uFiSM.asa (hash: W61wROGokL5bWdXjsmKXsKb3BR0ZpNI0VLQdgkpNYOY=)
                          2: 7zX_66DzWbNab47LnWkuxaI2ZeU.roa (hash: wy9qem7nqDqqjQsxYwFug1iQNRjmqIRNbrnoyYQEvNU=)
                          3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: b57EOwYpt0qA2CBYW+4/JBcgU6p3Ca31sLrsq0aBcRM=)
                          4: _Cfy9cb-oQbNsdjFWpTXAp0vykM.roa (hash: hIou1rSmsH9WYXgyvdfhrYuo3Ds/LLT4qC/64LFji2o=)
                          5: c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa (hash: 9NIofwcdGz5zeO6bax5mK7skNIAnSwQhXhWa+mJ1VWs=)
                          6: ddfQyL5mhD7mpFJJqGaZ3w97HDk.roa (hash: MOdMZ39n6c+DnqvSWvmRktnMqoezzAOZSZFQGziSyik=)
                          7: upplO1vsJUxfE9a6L-gXM6q4wxw.roa (hash: YDn3jYv0iMQlWNcNP2DzaLyq8GD8cqRsMXLAgOSsLHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:86:f0:44:2f:e4:ec:55:b0:a5:48:65:d3:49:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Sep 21 00:00:23 2026 GMT
            Not After : Sep 22 00:00:23 2026 GMT
        Subject: CN=29720a43bea228dce1b4ad2914e667393ef3f19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:e9:75:1c:89:d4:af:6d:4e:66:93:c2:e3:
                    2f:41:d8:c1:b8:31:a3:61:cd:99:07:b7:7e:47:e8:
                    e9:7f:2c:c0:41:70:ef:42:85:d7:58:57:e1:a0:db:
                    c2:7e:83:24:cd:6f:1c:26:07:39:17:3b:7d:0e:f1:
                    52:18:9b:e5:90:89:ea:3e:47:0c:0d:be:0c:c5:81:
                    34:29:05:e7:48:72:7f:09:42:a5:21:0b:9a:1b:aa:
                    18:c7:df:39:bb:01:fe:6c:98:db:44:66:1b:7f:68:
                    79:5f:79:73:d2:f1:c7:59:7a:e8:ce:63:cc:a5:85:
                    3f:fb:ca:0a:fb:63:7a:58:48:16:ad:30:fc:79:c7:
                    df:00:c2:c3:42:d8:3e:cf:bb:3c:72:dd:9f:77:cd:
                    66:2f:50:31:47:8e:4b:63:94:60:d7:4c:3a:d9:68:
                    0f:7d:8b:b4:34:b7:5d:82:f8:c0:6f:99:37:5d:1e:
                    a5:09:ad:80:44:9c:4f:f5:f9:90:b3:e2:b8:a1:5b:
                    48:eb:d3:57:84:84:93:14:90:69:74:52:79:65:0c:
                    20:b6:b4:32:c9:de:54:e6:81:25:f4:fc:9e:87:6d:
                    33:b9:0a:94:ac:00:3d:2f:fd:19:03:04:b3:75:d2:
                    4c:a4:73:8e:94:47:64:3c:96:28:77:e3:4b:fa:32:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:72:0A:43:BE:A2:28:DC:E1:B4:AD:29:14:E6:67:39:3E:F3:F1:9B
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:99:ae:46:ae:f4:87:4f:12:97:37:78:7f:06:37:97:db:59:
         86:93:aa:60:3f:16:41:36:c6:0e:1a:c0:ab:b8:3c:d3:ad:5b:
         82:aa:39:49:70:27:15:ed:a7:3e:88:17:47:3f:5d:6a:49:5a:
         0f:fb:77:7e:3c:15:85:db:8a:df:e9:42:33:f7:81:6f:22:3c:
         c3:b2:4d:e4:4f:d0:de:91:62:b0:dc:0f:92:e5:22:db:ba:d6:
         ae:ac:6d:6e:68:9a:f0:90:59:20:a8:b2:a0:db:93:6c:fc:22:
         b7:e0:a6:ef:20:5d:90:a6:ad:02:d7:a9:0b:dc:2f:23:b4:5b:
         f9:39:9e:16:b5:ca:65:1a:5f:4e:58:2e:b9:53:7e:52:5b:f8:
         76:9f:42:ad:a5:c0:6d:ed:96:93:64:1c:ff:56:40:f4:9c:b2:
         7f:7a:91:73:f7:25:59:a1:98:7a:3e:e3:dc:6f:57:88:5a:b4:
         c3:fd:22:ec:ac:81:21:c5:9a:f8:c6:b4:dc:90:e3:3a:b4:f3:
         57:15:90:3f:5f:52:16:4d:f5:69:fb:3b:ef:98:c6:21:fa:db:
         d6:d9:1b:cd:8d:ad:72:73:f4:93:c8:c5:91:8e:f3:5d:55:5a:
         91:17:8b:8b:3c:60:b5:90:aa:66:21:95:17:c9:82:25:b0:0a:
         16:de:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:25:57 2026 by rpki-client