Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File:                     LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier:          n3ADvMxraqyeAs3FekM6gjoEU+78NXlJTrWUlKfSdDc=
Subject key identifier:   F8:BD:C8:7B:CF:48:80:C5:45:FC:2D:E0:CE:2D:68:92:10:32:C6:C3
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer:       /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial:       01A0E4078941C0306F05A3C266CB872D2C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number:          1A79
Signing time:             Sun 27 Sep 2026 18:01:34 +0000
Manifest this update:     Sun 27 Sep 2026 18:01:34 +0000
Manifest next update:     Mon 28 Sep 2026 18:01:34 +0000
Files and hashes:         1: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: gu7q/vjaHtn/WEH818XAW0hUQBDBwDwsUPlg+LT0oF8=)
                          2: Rd5ogL0rZH0GwJinSJKEBpZALRE.roa (hash: nV1zKTqNKFR84ggPUZVLKnPWuVDibn1TXYU/+rnDjXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 18:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:07:89:41:c0:30:6f:05:a3:c2:66:cb:87:2d:2c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
        Validity
            Not Before: Sep 27 18:01:34 2026 GMT
            Not After : Sep 28 18:01:34 2026 GMT
        Subject: CN=f8bdc87bcf4880c545fc2de0ce2d68921032c6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:7e:de:7b:6d:70:01:b8:46:5b:16:ea:b0:
                    60:04:4d:05:31:9c:48:b9:b2:08:c7:6f:56:74:3a:
                    07:ce:de:71:98:3e:9b:9a:25:e0:18:38:9e:a6:c6:
                    68:7e:73:e6:dc:06:d8:99:97:f0:15:0d:64:7e:0c:
                    a3:4d:91:31:58:27:e3:d5:37:a7:ee:e0:e4:49:7f:
                    02:d0:e8:35:93:11:b1:fb:57:0d:a8:9e:05:87:a4:
                    f7:97:49:f3:92:e8:fb:02:d4:f3:ab:57:78:58:4f:
                    14:05:b0:83:8d:d3:ae:84:3a:c2:b6:34:63:c2:47:
                    ae:1d:54:5e:fd:5e:c7:8e:5c:7b:97:f3:ce:c3:e0:
                    2f:a0:f9:bc:e0:85:d0:a3:06:56:74:ad:c6:a5:46:
                    83:59:cf:84:ba:a5:7f:c4:8a:9e:7c:7c:be:fb:ca:
                    8e:56:47:92:fa:dc:a4:2f:cc:cf:9d:d6:f8:78:c4:
                    6d:77:4b:59:6f:23:05:1b:b8:7e:2c:6d:2e:de:fc:
                    29:40:f4:76:b8:a8:a9:05:c0:f4:3a:a0:2e:77:02:
                    e5:a0:8a:a5:a9:a4:cc:a0:43:8d:a0:2b:9d:18:50:
                    e9:7e:5b:9b:ea:7d:f2:01:33:61:44:8d:ee:8a:d3:
                    0f:44:9d:74:bc:22:23:44:fa:ee:41:31:56:12:72:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:C8:7B:CF:48:80:C5:45:FC:2D:E0:CE:2D:68:92:10:32:C6:C3
            X509v3 Authority Key Identifier:
                keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:97:54:29:71:18:0f:75:3f:a6:a8:69:e4:79:cc:34:91:
         8f:6a:fb:b4:56:9c:94:49:22:23:26:cf:bf:24:df:d6:f8:9b:
         01:7a:fe:97:54:71:5c:6b:7d:b3:13:3c:3d:9b:00:0d:17:a2:
         43:e9:3f:d9:ee:14:48:6f:79:1b:64:12:fc:52:2f:4d:3d:50:
         61:91:bc:91:99:9e:d5:6d:11:19:4f:ac:4d:f3:88:82:d4:b3:
         91:fd:fb:e5:16:1e:49:f0:ba:4f:27:af:70:05:22:39:cc:9a:
         c9:87:e3:32:b1:8f:2d:db:8e:ba:47:8c:33:de:6a:e9:18:67:
         89:a0:bc:71:9d:74:cc:19:18:ce:d1:b1:d3:af:cc:aa:bf:c3:
         b9:b7:83:70:13:68:ab:f5:32:20:6d:55:c4:60:9c:c6:02:ba:
         48:f3:e7:c9:f0:94:53:e1:40:f7:12:db:20:02:45:e5:4f:5e:
         a9:ed:1d:97:d0:c9:db:ac:8a:7c:e6:19:ef:7e:f4:cc:cc:39:
         b1:26:44:0d:7b:37:06:f3:d5:86:f0:f0:e4:db:c3:b7:eb:fc:
         6f:04:59:5f:2f:ba:42:f6:64:25:90:71:c7:23:3a:4c:7d:70:
         e1:51:b5:6b:02:7d:d9:c7:49:39:5c:21:e1:67:2b:18:ce:85:
         e4:e7:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:56:57 2026 by rpki-client