Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File:                     LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier:          8t1dEE+TCyN2Icg+bWtewg5Q2FKtcexw9S3grCcj14c=
Subject key identifier:   38:E9:5E:1B:C9:0B:2D:62:26:DD:60:F9:09:06:FE:3A:63:0D:49:87
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer:       /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial:       01A1076F4613B21F4E53189CE8205357F4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number:          1A88
Signing time:             Sun 04 Oct 2026 15:01:35 +0000
Manifest this update:     Sun 04 Oct 2026 15:01:35 +0000
Manifest next update:     Mon 05 Oct 2026 15:01:35 +0000
Files and hashes:         1: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: +tIJv84RZYh0JgP43/eCx5chqsPvpBrK0NLsEzEK114=)
                          2: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (hash: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6f:46:13:b2:1f:4e:53:18:9c:e8:20:53:57:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
        Validity
            Not Before: Oct  4 15:01:35 2026 GMT
            Not After : Oct  5 15:01:35 2026 GMT
        Subject: CN=38e95e1bc90b2d6226dd60f90906fe3a630d4987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:92:a5:14:4f:bf:c4:89:cd:c1:9b:0c:76:
                    7b:b3:59:18:67:4e:65:c0:4f:ea:37:ce:67:bb:b8:
                    dc:e8:cd:68:6b:21:91:56:9d:8f:64:1d:d9:d6:18:
                    7b:b7:5a:23:d0:bb:a7:c9:cc:c0:e8:b6:8c:69:45:
                    1a:82:d0:d3:f9:c5:c2:1f:92:51:57:4c:d8:67:81:
                    0e:62:7f:d0:56:2c:a9:72:a3:9a:ee:d6:88:e9:1d:
                    a8:26:56:8e:79:59:6b:1f:ea:fb:53:26:39:e0:25:
                    38:9b:7f:cf:76:f8:b0:91:7d:4e:35:f2:26:13:54:
                    28:81:1a:5a:b9:77:e5:e5:6f:39:8c:b1:c7:ff:d5:
                    7b:9b:9c:1f:cd:55:42:dc:5b:f4:0e:c1:43:3a:99:
                    f4:33:78:93:95:3c:a2:1e:0b:07:ca:49:a1:ff:08:
                    5e:3c:a3:b6:9e:06:ce:9e:81:59:c2:7b:6c:76:c5:
                    42:40:8d:8f:cf:2e:f9:2a:ce:48:9d:53:02:19:63:
                    b1:86:06:25:94:a3:40:0d:8f:dd:18:2b:d4:5c:8d:
                    f4:d3:b1:ba:05:ec:42:f5:7a:1d:30:ef:db:7c:fe:
                    e8:af:cc:a5:dd:3b:bd:f3:86:2e:4c:6f:e6:5c:96:
                    d3:af:19:e0:7b:d6:e6:3f:41:c1:ce:bb:99:aa:c3:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E9:5E:1B:C9:0B:2D:62:26:DD:60:F9:09:06:FE:3A:63:0D:49:87
            X509v3 Authority Key Identifier:
                keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:8c:47:7d:bf:9b:04:67:a6:ec:c4:be:ab:f0:50:02:c4:
         9d:02:5d:23:d5:5f:dd:1a:ab:33:b6:cf:76:42:bd:18:ee:00:
         48:dd:fc:2c:0a:96:71:48:e5:ca:f3:35:5d:48:bc:68:f2:ec:
         c7:92:18:91:bb:0d:4d:ba:90:11:1f:c2:65:de:66:d3:9d:02:
         e3:55:50:84:5b:0e:ba:61:5f:06:07:78:9a:a8:f2:0e:f7:20:
         7b:66:51:8d:03:05:90:1a:6c:3b:83:fd:aa:43:3a:aa:5f:e1:
         00:fc:ac:c3:5b:bf:a6:02:64:4f:26:23:93:ee:c7:3d:0f:7c:
         95:e7:9f:90:1c:92:11:17:a8:c8:1f:5b:87:75:36:3c:db:d4:
         ac:3f:8f:43:ec:e0:ad:0b:d4:46:7c:da:e9:b1:dd:a1:68:51:
         c4:cc:b0:c2:d6:18:e8:f3:03:4a:d4:2d:b7:62:ae:bd:2a:9d:
         dc:60:14:c0:f2:b1:93:c4:4c:5e:45:d1:6d:77:4d:09:2b:f1:
         c2:9b:0a:06:ee:b6:d9:94:bf:9b:fa:04:6c:86:f3:41:98:92:
         51:92:70:43:8e:89:f4:c3:6d:50:87:4c:8f:93:1d:b5:21:5b:
         c9:24:ef:90:a8:73:a7:cf:8a:9e:b7:cd:00:cf:a9:75:7b:df:
         86:2d:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:00:35 2026 by rpki-client