Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
File:                     LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json)
Hash identifier:          PKQM2f1Bp3VLezmstieYoVum30p9xtdK4IRYmbWPngw=
Subject key identifier:   70:84:39:AF:4C:4B:59:F8:20:F5:37:32:FE:D6:C4:6F:E5:26:97:69
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       01A0C1E8A636195E62B343EF4A445F4E0E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
Manifest number:          1A7A
Signing time:             Mon 21 Sep 2026 03:00:44 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:44 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:44 +0000
Files and hashes:         1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=)
                          2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=)
                          3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=)
                          4: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=)
                          5: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=)
                          6: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=)
                          7: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=)
                          8: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=)
                          9: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: dWyltUt4nuAaSRDlIqcTy3uAKxwoTSajRH1jXmptu8Q=)
                          10: LT5U7UOPqMR9dxspYlni6B2_-ok.asa (hash: 4R46tr0UVWf5j/XthdbsjaI9PbEJ5C8W2vS24mxosWQ=)
                          11: LVHEdOZ9cxYOhnAJ9408KCd5ekU.asa (hash: jVnacy56+b+JmQ8n4TA/QxGb2j2ni1UNtEV+QrW8RIY=)
                          12: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=)
                          13: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=)
                          14: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=)
                          15: Vt0us9OcLBIXjJfySaiTKs5W6wQ.roa (hash: nyuVpwcHfYR7p0Amdida/oXahMkize2c3OFf8NBV6os=)
                          16: cbVChPNP4-DIWiKkOfkWP8doixc.roa (hash: kIXewO7P0d1ssZnGCLQfIk8MUG+ijdkQqTo/a3x7pAg=)
                          17: isIvqhxIlVlWYZic6aD0NMaoOWM.asa (hash: Q1HSbtnso1qdFY5DvxeAsPc30rTxakch5bCACBXM2eU=)
                          18: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=)
                          19: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=)
                          20: rR1f83OQ9uRUE7_cr1u6YytDpBc.roa (hash: XM5rNdyvUe3EDxwwVIUj6GQWBqMm/WaWj2X3nUSC/Qg=)
                          21: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=)
                          22: t5uw45Hhtzxj2GLToAWcTHImtcg.roa (hash: fqD4dYIocF+gCJ4U31lpisnaUUMjXKt9o0wyGOryKek=)
                          23: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:a6:36:19:5e:62:b3:43:ef:4a:44:5f:4e:0e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Sep 21 03:00:44 2026 GMT
            Not After : Sep 22 03:00:44 2026 GMT
        Subject: CN=708439af4c4b59f820f53732fed6c46fe5269769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:d7:33:1a:8f:d3:7a:95:d0:e9:b4:a5:0f:
                    a1:40:c4:e6:c0:d8:c2:51:10:24:a6:b4:1a:9e:02:
                    fb:01:09:4d:25:88:c1:60:3f:e6:ee:46:87:89:fe:
                    16:18:bc:9f:d0:0b:20:ac:e7:b7:59:fd:78:cb:a5:
                    48:bf:4c:c8:bc:8a:19:db:1d:38:3d:c8:80:3f:43:
                    33:2f:30:b6:62:92:8f:60:e0:8a:6d:6c:9c:cc:d7:
                    4d:2d:9d:9c:e5:0a:29:c0:eb:c1:f3:19:b5:19:81:
                    b8:49:0e:7a:d1:77:af:30:7f:01:96:d8:13:1d:2b:
                    79:0a:55:0d:b5:b2:f3:2f:27:eb:ed:c5:25:39:86:
                    0d:79:82:d8:e4:71:68:2f:93:5d:aa:6b:94:9f:6c:
                    2a:db:46:bf:64:18:aa:6a:70:ff:57:b2:c9:4b:7b:
                    ae:50:12:1c:3b:1a:1b:a9:f4:4d:37:d7:c9:95:e9:
                    ac:e5:d9:23:c7:23:c2:cf:b9:ed:79:cc:a3:9f:d5:
                    a0:ff:26:2e:24:11:b3:9d:c8:4c:53:3d:53:02:52:
                    10:f1:c0:12:ff:50:eb:06:3f:1f:69:c6:50:cf:1d:
                    4d:b8:62:97:f6:c2:dd:4f:a5:ce:ed:a8:8a:48:64:
                    af:ad:22:d3:e0:b2:37:dc:f3:35:6d:51:f5:3f:46:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:84:39:AF:4C:4B:59:F8:20:F5:37:32:FE:D6:C4:6F:E5:26:97:69
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:bc:d8:cd:a9:71:5b:54:ae:4c:09:62:e7:4b:88:1e:f7:
         dd:e6:0a:4d:28:a5:c5:f5:26:aa:bd:5c:43:84:05:d1:b5:a1:
         90:52:82:aa:5f:65:6f:65:97:72:72:b9:17:03:46:c0:86:e4:
         06:ad:72:91:5b:c8:d0:6e:d6:c9:f8:69:b0:27:34:4c:24:34:
         85:cf:25:dc:0f:a1:9b:68:47:6d:0d:47:89:60:2f:55:87:95:
         a5:18:c6:3f:31:8d:b1:b2:6b:57:27:31:02:64:8c:03:ac:50:
         07:75:90:92:d2:2d:cf:1b:81:97:59:c8:c4:21:cd:6d:0c:fa:
         eb:99:50:52:ad:95:f2:32:6b:3d:64:7b:6d:79:e8:db:04:1c:
         ca:69:14:3e:c6:2f:09:1c:62:60:db:d1:92:32:8f:27:34:88:
         55:c0:01:3a:5a:4b:37:43:12:4c:74:29:9a:f0:2e:af:ff:ed:
         d5:ba:16:c4:3e:6f:e2:58:ed:f1:e6:28:3f:cd:ac:b3:d9:37:
         80:50:9c:c0:ea:35:5f:7b:9b:78:40:50:f9:4b:71:29:83:aa:
         97:91:95:17:67:1e:7a:f6:61:b6:77:3b:5c:26:33:df:d0:c3:
         8e:0d:fb:c4:66:34:66:18:7e:9d:54:d9:ff:96:99:67:2a:0d:
         dd:6a:6c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6KY2GV5is0PvSkRfTg4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjYwOTIxMDMwMDQ0WhcNMjYwOTIyMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg3MDg0MzlhZjRjNGI1OWY4MjBmNTM3MzJmZWQ2YzQ2ZmU1MjY5NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEPXMxqP03qV0Om0pQ+hQMTmwNjC
URAkprQangL7AQlNJYjBYD/m7kaHif4WGLyf0AsgrOe3Wf14y6VIv0zIvIoZ2x04
PciAP0MzLzC2YpKPYOCKbWyczNdNLZ2c5QopwOvB8xm1GYG4SQ560XevMH8BltgT
HSt5ClUNtbLzLyfr7cUlOYYNeYLY5HFoL5NdqmuUn2wq20a/ZBiqanD/V7LJS3uu
UBIcOxobqfRNN9fJlems5dkjxyPCz7ntecyjn9Wg/yYuJBGznchMUz1TAlIQ8cAS
/1DrBj8facZQzx1NuGKX9sLdT6XO7aiKSGSvrSLT4LI33PM1bVH1P0Yp2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCEOa9MS1n4IPU3Mv7WxG/lJpdpMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPS82M2p
cVtUrkwJYudLiB733eYKTSilxfUmqr1cQ4QF0bWhkFKCql9lb2WXcnK5FwNGwIbk
Bq1ykVvI0G7WyfhpsCc0TCQ0hc8l3A+hm2hHbQ1HiWAvVYeVpRjGPzGNsbJrVycx
AmSMA6xQB3WQktItzxuBl1nIxCHNbQz665lQUq2V8jJrPWR7bXno2wQcymkUPsYv
CRxiYNvRkjKPJzSIVcABOlpLN0MSTHQpmvAur//t1boWxD5v4ljt8eYoP82ss9k3
gFCcwOo1X3ubeEBQ+UtxKYOql5GVF2ceevZhtnc7XCYz39DDjg37xGY0Zhh+nVTZ
/5aZZyoN3Wps7g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:37:38 2026 by rpki-client