Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          3qiXzVO8stf9f1kTOitvU2EjOos9jmzOCwL9GtT2rXw=
Subject key identifier:   93:95:99:07:80:89:89:3F:BF:14:3A:A7:0B:4B:BC:71:80:EF:DB:E1
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       01A0C66A4420F628848D2AE57ADCB65C533A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          1A2E
Signing time:             Tue 22 Sep 2026 00:00:48 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:48 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:48 +0000
Files and hashes:         1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
                          2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
                          3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
                          4: 7v4FlDgaUhB0KwYLuf0DrtJYiZE.roa (hash: 1Wu7rdYg7HSjG0fNpexA7LGI5X9w1Yvqs/8X7UlrRkY=)
                          5: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (hash: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=)
                          6: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (hash: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=)
                          7: Bza0u1KrAMDMGupZL29e32A3MCc.roa (hash: pZiFonQx+AjzAflURZDKbh/3OCh69YGkDga9U2khExM=)
                          8: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
                          9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: AL3wrKKtLuWj5jutCfPdlzw+94xz/9cJF2HmA4jSkRc=)
                          10: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
                          11: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
                          12: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
                          13: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
                          14: X6w9majvI_DCoEpE7YSlgjrwWBk.roa (hash: nSq/rO7rO1FgXnozv7cLPZZonavuQIUu1J8PyL3NQ+k=)
                          15: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (hash: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=)
                          16: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
                          17: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
                          18: lAUTh060UnG4SYUzw748rs6F-AU.roa (hash: rqx44g42iFnxW7L4EozICe/qV2vcSLbN9ZwaWDSqR4Y=)
                          19: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
                          20: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=)
                          21: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
                          22: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (hash: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=)
                          23: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
                          24: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
                          25: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:44:20:f6:28:84:8d:2a:e5:7a:dc:b6:5c:53:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Sep 22 00:00:48 2026 GMT
            Not After : Sep 23 00:00:48 2026 GMT
        Subject: CN=939599078089893fbf143aa70b4bbc7180efdbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:95:45:02:04:96:b4:38:c9:20:a3:8e:cd:
                    36:92:cd:eb:6d:f8:94:77:3d:11:23:e2:ec:34:0a:
                    8b:28:9f:de:84:82:6c:e8:44:5e:e8:6e:5f:0e:1a:
                    d1:d8:7e:ba:fb:c9:2b:b6:f8:be:a6:68:ac:09:66:
                    1c:23:b9:ff:8d:f7:65:b8:85:2c:34:a2:35:18:74:
                    ad:47:52:ce:a0:10:73:cf:9b:ea:d6:45:71:59:1c:
                    f1:79:5c:a5:b9:3f:53:12:ef:82:a0:75:ea:a2:2a:
                    6a:14:2a:15:42:64:59:e5:8a:69:40:95:e5:04:6c:
                    c6:d7:8c:9e:35:bb:23:26:0c:45:d1:5f:e4:5b:fc:
                    62:de:27:13:5c:a4:31:d1:bf:a4:77:3e:11:3e:16:
                    a7:e3:7c:6a:71:e6:dc:75:ce:fc:59:3a:ea:4f:75:
                    b9:92:78:e4:a7:5e:4b:58:8c:f1:5a:ad:fb:b1:d0:
                    93:cc:a9:80:9b:6e:2c:db:dd:a7:8e:3d:8f:03:1c:
                    ff:00:87:d6:4f:f6:21:75:18:31:6b:06:88:bf:f9:
                    cd:d6:0a:f5:a6:42:6e:d9:88:1a:8e:65:04:6e:99:
                    2a:63:2d:9b:5a:06:9b:8b:1e:af:51:9c:a6:ad:bd:
                    7c:c1:a3:4f:07:19:57:23:fd:a2:00:1f:2a:c4:8b:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:95:99:07:80:89:89:3F:BF:14:3A:A7:0B:4B:BC:71:80:EF:DB:E1
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:b5:ed:72:07:7d:94:41:62:78:dd:2e:03:07:f9:5a:3b:
         cf:23:79:89:e6:2f:0e:26:47:ca:b2:76:e9:80:37:88:c3:2b:
         48:44:bd:e2:d2:3a:9b:40:24:90:ba:19:7f:88:e0:55:09:84:
         b4:86:40:f7:f8:55:96:db:1f:10:4a:54:4a:8b:98:73:e9:80:
         3a:b8:e8:54:9e:be:83:66:b1:26:a8:bd:74:a7:f5:96:4a:dc:
         c8:2e:88:80:9c:66:14:a5:f2:4f:18:a4:89:2c:59:85:71:01:
         b4:64:82:a4:1b:80:3f:3d:b4:c6:a7:86:3a:77:09:3d:90:20:
         d2:2f:da:72:58:09:a9:09:67:cc:fe:dc:aa:3b:f4:82:57:6b:
         0a:f6:0b:9e:f0:33:11:b1:5b:10:f8:eb:ea:26:9e:13:bd:26:
         67:bc:d0:c0:45:fc:6d:f3:0e:b6:af:67:67:c1:38:fa:68:00:
         4d:69:1d:1a:df:13:7f:7d:98:e7:70:1a:73:31:80:86:1a:12:
         dc:6e:0e:12:da:a2:ca:b0:7f:e4:29:92:93:ea:08:73:79:65:
         95:ae:f3:ab:44:13:95:9b:a1:be:bb:12:15:3c:4f:b5:4e:26:
         c0:48:9b:96:b6:46:7f:47:7a:53:a8:b9:fa:1e:73:7a:16:95:
         e2:6b:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:07 2026 by rpki-client