Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File:                     ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier:          9ifPE93ikBS2TRew8N0SaynJ0efYk9Q5fqzEiU3998w=
Subject key identifier:   19:86:9F:9D:AF:C7:5A:46:F5:6E:A8:4E:1F:4C:DF:25:DA:26:F7:A5
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer:       /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial:       01A12C56DBD0DA82F444DC5D9434FD0CF1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number:          1A9B
Signing time:             Sun 11 Oct 2026 19:00:52 +0000
Manifest this update:     Sun 11 Oct 2026 19:00:52 +0000
Manifest next update:     Mon 12 Oct 2026 19:00:52 +0000
Files and hashes:         1: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: RqVR30VKUkwuD2/ypT3d8mPoitdWi/XJkjQAac45MC4=)
                          2: w73J2wKuabz6xF5h7oZy0LH-4cE.roa (hash: Rf9ykuk+l/JPt0H5ZkccxWBMK9ULnk1SQbpqnOL7oFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:56:db:d0:da:82:f4:44:dc:5d:94:34:fd:0c:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
        Validity
            Not Before: Oct 11 19:00:52 2026 GMT
            Not After : Oct 12 19:00:52 2026 GMT
        Subject: CN=19869f9dafc75a46f56ea84e1f4cdf25da26f7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:ac:06:19:17:4d:ce:c7:3f:52:5f:6d:43:
                    ed:08:94:f6:88:f3:9e:18:0d:e5:21:75:52:ff:c7:
                    62:9d:18:bf:e6:58:c5:64:30:6e:19:cd:2c:f3:e7:
                    83:c6:41:ae:73:53:fa:61:5a:fb:a0:5e:28:1a:e7:
                    4f:b7:a2:95:7e:a0:64:e6:ab:40:87:6c:f4:74:b9:
                    14:44:e4:ce:23:43:85:e5:aa:ad:3f:69:a3:9e:1c:
                    1b:89:bc:8e:5d:b2:ea:e7:5a:77:64:1c:68:ef:c1:
                    48:b1:73:95:57:19:27:6f:a1:c0:ef:c7:98:5b:b2:
                    48:e3:08:72:a6:d6:26:3d:35:f8:ee:28:ee:91:1c:
                    f3:c6:25:6f:5b:cf:9d:76:79:bf:36:ee:24:4e:55:
                    d8:fd:db:6d:02:19:91:99:2a:c5:86:53:8c:9d:16:
                    06:d2:83:75:19:38:1d:65:64:a7:b1:b0:04:87:46:
                    fe:02:a8:0b:60:e8:55:89:a6:73:a8:fa:ba:d8:f9:
                    6a:0b:34:82:c8:5a:c4:43:61:96:f4:64:af:e5:69:
                    2d:f1:b7:b6:e4:29:2c:32:95:b5:3e:67:4c:f6:84:
                    f2:c7:91:c6:c9:29:ee:b3:f5:11:15:f4:c1:e4:11:
                    62:f0:21:c2:1a:c2:71:37:13:9b:e2:03:cc:e6:54:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:86:9F:9D:AF:C7:5A:46:F5:6E:A8:4E:1F:4C:DF:25:DA:26:F7:A5
            X509v3 Authority Key Identifier:
                keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:80:6b:c0:b1:54:85:23:a1:7e:ba:22:b2:31:50:0d:84:bc:
         47:e3:82:35:44:a0:27:df:c3:f9:b6:ee:10:be:6a:9c:b9:6b:
         ff:de:c6:94:97:ee:56:7f:9a:ba:78:d1:ab:20:91:4e:2d:f2:
         9f:50:d8:45:ba:f1:a7:9b:b0:6c:03:0c:49:00:64:92:59:02:
         a8:5e:af:c8:f3:f2:0f:52:57:ff:69:87:c2:95:11:40:52:34:
         cf:25:3c:14:98:18:8e:b3:e8:aa:b4:a4:ec:0c:c2:19:02:01:
         18:e3:b5:f9:cf:e9:ae:1a:d4:85:e9:3b:90:30:59:31:63:de:
         5f:ec:d3:1e:34:74:8a:8b:e3:57:a8:f4:4a:8c:72:ba:f0:38:
         96:19:49:02:68:47:93:8f:d9:2b:2b:54:f4:de:20:a3:5e:99:
         19:21:88:05:eb:05:e0:6f:1f:ec:bc:c2:d4:fc:91:90:63:77:
         5b:f7:ca:64:54:d1:1e:c5:88:e0:26:12:88:78:fe:c3:81:be:
         d5:78:9f:6b:d5:58:b5:b2:05:17:87:b8:da:5f:e1:02:c9:dd:
         18:3b:aa:11:cb:b5:07:6f:1b:48:49:85:4c:00:8d:dc:4a:9a:
         c4:03:6d:1a:66:6e:dc:14:1b:a2:3b:eb:5b:82:d9:ea:6f:47:
         c4:5b:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:06:24 2026 by rpki-client