Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          gF5bRFBkw9lLtcyII0TO/IICWxNedShyCBLtHGZUsIQ=
Subject key identifier:   B7:31:28:7F:AD:58:8E:6E:5A:53:35:A7:3D:C6:9A:AF:5A:51:9E:01
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       01A12B7B07C4948C9243B941CAFACA4EB478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          19F1
Signing time:             Sun 11 Oct 2026 15:00:45 +0000
Manifest this update:     Sun 11 Oct 2026 15:00:45 +0000
Manifest next update:     Mon 12 Oct 2026 15:00:45 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: 30OTitP3ku58yOKlixPAnB9bWwLHc6BFEGN4XwXFpoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:07:c4:94:8c:92:43:b9:41:ca:fa:ca:4e:b4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Oct 11 15:00:45 2026 GMT
            Not After : Oct 12 15:00:45 2026 GMT
        Subject: CN=b731287fad588e6e5a5335a73dc69aaf5a519e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:05:42:70:ab:9a:f2:21:da:70:bc:74:04:
                    a5:fa:3a:db:a2:ce:56:6e:74:a0:e3:72:3e:32:1a:
                    ba:a4:7b:c0:a2:d6:5c:e2:e5:b5:33:49:66:26:a7:
                    55:6c:4c:86:bd:b6:a5:a3:7a:fb:ed:53:d9:60:68:
                    e0:32:6d:20:d3:9d:ce:6d:b2:b2:ec:86:6e:bc:b9:
                    7d:38:06:ad:a8:2a:02:b8:0c:1b:09:6a:93:66:23:
                    36:cb:5f:18:fd:79:b3:e9:1d:3e:2e:cd:f7:a9:fa:
                    4f:aa:4a:79:80:c0:81:51:bd:c2:64:36:06:4e:18:
                    9e:11:9d:14:b4:da:ee:27:a3:d7:ac:cc:ab:04:5f:
                    f0:1f:79:1a:59:f2:79:a2:4f:44:2b:6a:29:db:10:
                    5b:c7:e4:35:e7:17:ba:4f:5d:39:25:bc:1e:db:5d:
                    1f:57:bd:7c:ed:c9:fe:57:0f:24:10:ff:4f:80:d3:
                    1b:39:0d:15:20:79:5e:8b:78:4f:1c:2f:70:9f:a0:
                    47:cf:78:5a:42:4d:8f:72:79:55:a0:1e:3e:49:2d:
                    28:94:7a:65:26:ec:5d:7a:5b:c7:24:1f:1a:ec:5e:
                    e4:7c:61:59:9f:f9:70:05:46:a5:c8:fd:74:58:52:
                    ed:07:5d:f8:3c:45:3d:04:bd:89:c7:bf:60:97:14:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:31:28:7F:AD:58:8E:6E:5A:53:35:A7:3D:C6:9A:AF:5A:51:9E:01
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:96:01:1c:02:7a:16:6b:ec:ee:79:56:02:fa:06:cc:fc:2f:
         20:6a:6f:fd:53:72:16:16:69:bc:e3:07:6f:a1:b3:dd:46:fa:
         44:86:fc:42:57:51:16:ce:53:ab:5b:01:87:fb:73:95:a8:fd:
         86:10:ca:11:65:51:6d:08:a9:5e:1a:f5:26:62:83:e8:55:29:
         dc:95:d0:66:ac:7c:de:5e:0f:96:30:e5:af:97:23:83:48:9b:
         5a:ac:8a:e8:a3:cb:e3:26:99:a1:5e:63:ee:ac:62:37:09:6d:
         80:cb:01:89:02:56:91:7d:d2:fd:83:da:21:ba:c5:e2:a2:ab:
         df:b4:21:8c:df:cf:8c:ad:10:4a:ae:4a:52:7b:89:13:f2:b1:
         1e:89:73:c0:75:ee:07:48:b4:f5:25:47:ba:a6:14:9a:af:67:
         ca:af:c8:6d:00:37:c0:ff:99:57:b4:ea:35:6d:bc:c2:2d:f8:
         58:c8:fb:f8:f8:30:79:14:93:02:58:0b:7f:28:39:42:ad:ab:
         90:1f:16:a3:f8:e7:ba:b9:b8:b7:d2:3a:bc:f4:ac:01:e8:e4:
         e0:76:fd:f3:cb:05:36:70:40:8d:52:50:76:cd:7c:65:2d:7a:
         d4:9a:dd:50:1d:37:35:fa:80:1c:13:36:02:56:49:41:b8:74:
         57:3a:6c:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErewfElIySQ7lByvrKTrR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjI3NjEzNjI1NDgzMGJiNDkwN2U5OGMyNThlNDkzYjQy
YWFhM2EwHhcNMjYxMDExMTUwMDQ1WhcNMjYxMDEyMTUwMDQ1WjAzMTEwLwYDVQQD
EyhiNzMxMjg3ZmFkNTg4ZTZlNWE1MzM1YTczZGM2OWFhZjVhNTE5ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApboFQnCrmvIh2nC8dASl+jrbos5W
bnSg43I+Mhq6pHvAotZc4uW1M0lmJqdVbEyGvbalo3r77VPZYGjgMm0g053ObbKy
7IZuvLl9OAatqCoCuAwbCWqTZiM2y18Y/Xmz6R0+Ls33qfpPqkp5gMCBUb3CZDYG
ThieEZ0UtNruJ6PXrMyrBF/wH3kaWfJ5ok9EK2op2xBbx+Q15xe6T105Jbwe210f
V7187cn+Vw8kEP9PgNMbOQ0VIHlei3hPHC9wn6BHz3haQk2PcnlVoB4+SS0olHpl
JuxdelvHJB8a7F7kfGFZn/lwBUalyP10WFLtB134PEU9BL2Jx79glxThcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcxKH+tWI5uWlM1pz3Gmq9aUZ4BMB8GA1UdIwQY
MBaAFC5idhNiVIMLtJB+mMJY5JO0Kqo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMt
OTNiOTE0NzAxNDcwLzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMtOTNiOTE0NzAxNDcw
LzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJYBHAJ6
Fmvs7nlWAvoGzPwvIGpv/VNyFhZpvOMHb6Gz3Ub6RIb8QldRFs5Tq1sBh/tzlaj9
hhDKEWVRbQipXhr1JmKD6FUp3JXQZqx83l4PljDlr5cjg0ibWqyK6KPL4yaZoV5j
7qxiNwltgMsBiQJWkX3S/YPaIbrF4qKr37QhjN/PjK0QSq5KUnuJE/KxHolzwHXu
B0i09SVHuqYUmq9nyq/IbQA3wP+ZV7TqNW28wi34WMj7+PgweRSTAlgLfyg5Qq2r
kB8Wo/jnurm4t9I6vPSsAejk4Hb988sFNnBAjVJQds18ZS161JrdUB03NfqAHBM2
AlZJQbh0VzpsbA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:18:23 2026 by rpki-client