Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          6oeapVDx/Q/KwfMpthY2sfUt4chyqznEv7tuxuLrgRk=
Subject key identifier:   69:90:88:39:E7:E4:69:43:DA:E0:54:82:5B:A5:EB:E4:50:3C:D1:0D
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       01A0C3D70523202A23B7579DBDB30638F26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          1A68
Signing time:             Mon 21 Sep 2026 12:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:43 +0000
Files and hashes:         1: DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa (hash: CPSNBE1JDqZWrzRtLM0uStnUMuYrz40a9MwrDBSVFlM=)
                          2: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: QScir2eqCRml4WkrtAoLtwcD5nhVFKWsEk737PJbVa8=)
                          3: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (hash: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A=)
                          4: RUhmJdqw-3Gaw_JLROAhLOvB2IM.roa (hash: XdtV4zgfYLmkDs8xTK/8Ot/KM7BnvRi+tSC9tgSlImI=)
                          5: jYiU8bv569WiEs-qGefdtilWB8Y.roa (hash: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok=)
                          6: yV2ta5YIqZOtbWWi5XnowuWeO2Y.roa (hash: FMj28W2Mwf91c8T9pAxRJIkM3TCaa6JGRs6VpNG02T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:05:23:20:2a:23:b7:57:9d:bd:b3:06:38:f2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Sep 21 12:00:43 2026 GMT
            Not After : Sep 22 12:00:43 2026 GMT
        Subject: CN=69908839e7e46943dae054825ba5ebe4503cd10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:b2:3a:0d:4e:06:11:0b:5c:cc:5e:93:af:
                    0d:dd:9d:6d:16:ec:a2:15:fc:be:4e:63:05:79:1c:
                    ec:a0:17:79:63:91:3f:ee:a2:65:60:ee:de:0f:6c:
                    ff:f2:18:a3:e5:0a:16:2f:f5:b7:f3:29:d2:ce:2b:
                    fb:26:33:86:45:95:26:1c:cf:53:49:70:76:92:ec:
                    30:bb:80:53:3f:2b:08:90:71:8e:e9:60:15:ef:5b:
                    96:87:3a:db:c9:21:b3:ba:99:0e:35:f0:ef:7d:72:
                    3e:be:b2:ea:38:d8:e4:a3:30:79:78:43:3c:df:84:
                    f3:df:88:be:ea:80:2e:20:e2:c0:e0:da:75:62:0f:
                    07:31:78:4c:6a:88:d9:2a:01:f3:68:5b:53:10:e8:
                    19:30:a9:66:8f:57:ca:5d:fe:ec:86:fa:ee:27:c0:
                    cd:4f:46:c3:b3:f5:3f:9f:59:2b:03:2c:a7:d1:ae:
                    dd:d5:b6:98:7a:62:00:43:96:c5:75:2c:b4:ec:3a:
                    ff:4e:2b:8d:a0:91:1d:c8:93:33:3a:ab:8c:dc:d1:
                    76:d4:a0:ef:2e:6d:ea:54:42:0f:0b:28:96:fd:2a:
                    1c:69:66:b0:e4:f6:81:93:14:aa:b7:8a:0e:5a:bd:
                    c1:df:6a:af:b5:ae:3d:e4:59:5c:4f:38:57:eb:7b:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:90:88:39:E7:E4:69:43:DA:E0:54:82:5B:A5:EB:E4:50:3C:D1:0D
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:5f:4e:1c:a4:d0:3b:7a:1f:38:96:9d:8e:54:cf:29:b1:
         c1:a6:95:5d:fe:19:52:a5:e6:c0:36:a5:a2:ae:42:ad:8f:d3:
         19:a4:f8:59:35:58:22:1d:62:fd:1f:6c:74:c3:d4:1e:e2:23:
         3b:9b:21:ba:12:ab:83:c7:95:68:d7:93:35:33:8e:e8:fd:2f:
         00:22:be:ec:f8:5b:61:aa:db:33:55:8c:08:0b:66:9d:5e:37:
         ca:99:a0:b0:df:72:5b:72:c7:b9:2d:6d:53:9f:6d:6b:bc:b3:
         0b:2c:3e:98:d4:74:05:b3:5c:8e:26:ef:57:84:3d:60:24:d4:
         1e:d0:f6:df:1e:ce:39:76:8d:f4:a0:20:a5:b1:a1:df:7d:3d:
         16:33:b4:bc:11:d0:a5:fc:ac:ff:7d:05:e7:a0:31:70:56:38:
         d3:6b:12:bf:61:08:73:a6:ac:59:97:05:7b:dd:13:fd:fe:19:
         08:5d:a5:ec:9c:bc:a9:71:93:17:41:17:d6:44:71:90:dd:51:
         1f:9c:e8:24:af:fc:7e:4d:2c:59:d5:0e:33:7e:55:7f:ae:0b:
         16:d1:77:94:e6:d8:f2:9c:7a:fc:e7:f2:4b:66:c5:69:ce:89:
         c3:99:fd:5f:10:13:d5:f4:de:46:f2:98:c7:2d:a3:f9:22:fa:
         01:77:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:24 2026 by rpki-client