Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          Clvs6eXXkpxl5RwHg2BmxUVZhvN8fiwuwajGT4VsUFM=
Subject key identifier:   7D:F6:13:22:9D:97:F3:51:37:1E:92:AF:42:D4:B6:C7:D3:AF:26:41
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       01A0DCF25CD6CDE9D05FB8E3861064C17942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          0516
Signing time:             Sat 26 Sep 2026 09:01:05 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:05 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:05 +0000
Files and hashes:         1: 4KwoPjMEOKwVgqjkR1iM1Sga8ls.roa (hash: zEP8VUcw4u5qtFYg9l1WCeFUs+0BvYnLihv3gDQhsgg=)
                          2: 5quSGDFiCc7x9xQL3RZ2oDRoZEI.roa (hash: GKv86KDQ60+mPLbc7GtPs9wY5m72zA4FBxOc21v69ao=)
                          3: 6MOfJoJfjgHruP2KWqkzqptDlOw.roa (hash: 7sX90kHGNjmL95aSRKZrdKO8hW7cdwTVGZ3KRAMueWY=)
                          4: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: hLb+R5yU0Dc8sJR0G0kLTPmft9jxXQeTGzEejG60WWM=)
                          5: RdYGiesB8wE7Cc7xqOKt4JlLnok.roa (hash: W3DsiCdc3x/PMoGS82zn756ZVAXlVYusY8WrxMFT/7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:5c:d6:cd:e9:d0:5f:b8:e3:86:10:64:c1:79:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: Sep 26 09:01:05 2026 GMT
            Not After : Sep 27 09:01:05 2026 GMT
        Subject: CN=7df613229d97f351371e92af42d4b6c7d3af2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:38:01:a6:47:9c:20:61:1f:3a:7f:5e:4e:
                    9b:1a:94:66:23:c4:aa:41:d7:b7:1a:75:da:c4:da:
                    6c:b3:6f:19:77:3d:d5:c2:6b:1b:12:1d:7e:1e:87:
                    b3:32:4b:c0:4d:ad:bc:e2:ea:30:95:5d:b1:8f:cf:
                    85:a4:b3:78:bd:b8:a1:92:99:9d:c7:a7:2b:84:08:
                    17:79:05:ca:d3:8d:7c:40:56:2b:bb:d4:1f:bd:37:
                    8a:f1:04:d1:c7:de:23:cf:e3:22:14:bf:98:69:cd:
                    16:39:02:8c:6a:1b:ee:92:bb:2a:eb:d2:1d:4f:a5:
                    a8:89:02:f1:b8:cd:3d:25:4a:a6:aa:fa:2b:92:72:
                    f1:41:0b:a2:8c:19:61:ab:1d:cf:75:7d:ff:67:2e:
                    98:28:fe:b6:f3:01:18:80:06:87:37:b8:03:d4:46:
                    a8:8a:c8:4f:34:b7:69:dc:26:73:03:c9:99:55:66:
                    e4:5f:94:c0:60:79:45:41:85:00:7e:1e:93:5b:fb:
                    41:e3:51:51:5c:b4:d8:dd:47:23:e2:26:83:d3:9c:
                    e1:fa:15:86:40:98:a7:a0:09:89:22:aa:86:80:e8:
                    1d:9b:8e:9b:3d:85:c9:86:98:e4:4f:5b:29:93:2c:
                    0e:73:54:15:6c:2c:43:eb:b1:1c:38:0a:ed:a1:40:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:13:22:9D:97:F3:51:37:1E:92:AF:42:D4:B6:C7:D3:AF:26:41
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:7f:69:58:6d:7e:55:f9:52:c6:38:b6:7f:47:6e:bd:83:
         73:f9:b5:fd:dd:b2:48:56:7f:78:a3:8a:ff:a1:21:8d:d6:e2:
         42:8d:0d:70:c9:70:8a:cc:9f:bc:b0:75:4b:47:27:4a:03:d7:
         a9:19:44:5e:eb:8d:2d:94:7c:9f:40:52:9f:12:ae:2b:68:6e:
         6e:6e:eb:2f:ae:b9:57:2f:1a:ed:53:fd:f6:c2:0d:8d:b3:a5:
         1b:81:e4:14:cc:0d:5f:4c:b7:3f:21:17:3e:82:eb:b7:d6:08:
         fe:40:61:cf:a0:c6:da:7c:c5:5b:3c:90:74:ca:72:75:ec:19:
         74:cc:10:89:b1:75:87:eb:08:d8:06:a4:1a:fd:08:be:17:71:
         19:07:ad:78:b8:5a:cb:46:0a:f1:61:0b:b4:d3:56:d9:d3:68:
         92:ab:7c:0e:fb:6a:a9:d7:0f:4d:dd:25:89:fd:fb:1a:d3:cb:
         a1:49:be:6d:0d:5b:65:4a:e4:90:25:59:cf:44:90:04:67:d0:
         b2:90:9c:a1:d9:4c:56:cb:77:6f:59:89:b0:1b:ef:05:63:50:
         d5:94:54:24:cc:eb:d3:d1:dc:b6:06:1b:e5:26:36:f7:ad:df:
         a4:04:2a:78:88:bf:a5:c0:cb:60:90:14:d7:96:79:13:62:50:
         be:2d:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:41:54 2026 by rpki-client