Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File:                     LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier:          HPJ5LmnB+uOpJE301HpuoA6DZcdnb28Jw3WaDR2O2Q0=
Subject key identifier:   46:FC:72:14:EC:DF:D5:CD:0D:98:2A:7F:41:DD:57:9D:E0:78:EE:BF
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer:       /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial:       01A1E02844ACAC29E990B325502EA30C205A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number:          02BA
Signing time:             Sun 15 Nov 2026 17:01:37 +0000
Manifest this update:     Sun 15 Nov 2026 17:01:37 +0000
Manifest next update:     Mon 16 Nov 2026 17:01:37 +0000
Files and hashes:         1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
                          2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
                          3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: a9MEwpnqPNOjbtDJ2Husmz09bzoXXXK4ugl1EdOHRmw=)
                          4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
                          5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
                          6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
                          7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
                          8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
                          9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:28:44:ac:ac:29:e9:90:b3:25:50:2e:a3:0c:20:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
        Validity
            Not Before: Nov 15 17:01:37 2026 GMT
            Not After : Nov 16 17:01:37 2026 GMT
        Subject: CN=46fc7214ecdfd5cd0d982a7f41dd579de078eebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:b7:69:97:86:08:a0:3e:d2:5c:bd:52:4e:
                    4e:79:aa:93:ef:f1:db:8c:ed:54:b8:08:02:a4:fb:
                    9e:31:99:21:2d:66:a1:6f:ad:15:8b:10:38:ff:b4:
                    23:7c:df:02:3f:e5:9e:eb:67:e4:fc:88:43:15:3d:
                    a9:11:82:36:da:05:a4:ca:90:1c:90:ff:67:a0:ad:
                    5a:e0:c2:6f:a3:cc:e2:b2:d5:c3:4e:4e:1b:d0:bc:
                    f2:ee:9b:6f:bb:c8:a4:71:91:3f:29:b3:c4:dd:0d:
                    7b:3f:48:6c:ec:de:ba:8a:1f:9c:c7:0b:c8:51:4e:
                    09:a0:e7:e0:45:6a:02:75:0d:90:b9:b6:32:e8:63:
                    92:fe:41:39:06:5e:77:eb:f6:0f:a2:4b:fb:b3:f1:
                    c6:38:a2:41:12:35:80:60:cd:63:f2:16:21:46:2d:
                    b7:35:6f:01:b3:23:28:1c:c7:da:ec:cb:64:a3:b4:
                    ec:39:f7:01:90:fe:dd:8f:47:69:ad:32:e5:84:fc:
                    df:be:0a:63:0d:9c:9f:f7:d3:6f:32:16:65:03:35:
                    a4:7c:a2:5b:6d:53:29:1e:bc:41:08:c8:0c:bc:30:
                    d7:fb:bd:c0:c1:d1:21:4a:ea:53:e9:ca:df:39:b1:
                    d7:06:7b:87:43:d4:1c:89:a4:75:9b:56:d4:49:c5:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:72:14:EC:DF:D5:CD:0D:98:2A:7F:41:DD:57:9D:E0:78:EE:BF
            X509v3 Authority Key Identifier:
                keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:6d:ba:d3:42:31:b1:77:f8:0b:38:54:a9:f4:19:ac:d7:
         3f:9b:2e:96:e2:a3:f5:66:9a:32:31:23:ca:06:be:ec:3e:4d:
         32:cc:f6:ff:c8:0e:00:21:23:a3:60:a1:e6:4b:bc:f0:eb:7e:
         8d:fd:18:85:57:d8:3b:c2:27:02:bf:b8:ee:bc:04:d3:e1:fd:
         a3:d2:bd:6c:ea:29:30:b8:17:0d:f6:3b:1c:cb:c7:8e:93:67:
         08:ac:2d:a0:ad:aa:6e:4d:8e:68:8e:1a:c1:71:b8:6c:9e:95:
         77:a7:46:b6:a4:a9:9b:58:d4:60:df:27:c9:af:10:bf:9f:e6:
         31:37:6e:dd:81:56:cc:b5:b7:b9:8e:45:3f:39:ff:93:3e:06:
         32:7a:33:04:11:f4:d7:bd:3c:1f:8e:36:db:68:4b:40:c5:9e:
         b6:fe:3d:a4:20:a4:e8:6d:c1:a2:f1:42:ed:95:35:08:b7:e0:
         12:93:a3:ed:29:49:97:b2:0f:fc:44:6c:39:ea:5c:06:8c:5a:
         59:a5:d5:8e:bf:70:99:ae:e7:e2:fe:b9:af:61:03:ca:ec:21:
         50:94:27:51:86:9b:8c:a2:a4:da:90:57:b1:8e:7f:41:4d:c2:
         32:67:22:00:8b:89:32:ca:0a:ef:17:36:9d:aa:47:43:ba:92:
         41:cd:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:25 2026 by rpki-client