Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File:                     LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier:          sSb5n160CgLfBVC7ualuBE+dBvLNA/mOrcxOM/ZUu+Q=
Subject key identifier:   18:F3:C4:59:CB:40:D7:0B:5C:74:0F:00:42:94:2E:85:EA:77:20:C3
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer:       /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial:       01A0C06845545876E009EAA53AEA8979CE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number:          0225
Signing time:             Sun 20 Sep 2026 20:00:53 +0000
Manifest this update:     Sun 20 Sep 2026 20:00:53 +0000
Manifest next update:     Mon 21 Sep 2026 20:00:53 +0000
Files and hashes:         1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
                          2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
                          3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: YRgtRvm3jp3kjJwmOiihBF3zuzpdfz5ntmwptscHNZE=)
                          4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
                          5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
                          6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
                          7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
                          8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
                          9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:68:45:54:58:76:e0:09:ea:a5:3a:ea:89:79:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
        Validity
            Not Before: Sep 20 20:00:53 2026 GMT
            Not After : Sep 21 20:00:53 2026 GMT
        Subject: CN=18f3c459cb40d70b5c740f0042942e85ea7720c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:3f:9a:f3:22:c0:44:85:09:df:72:1a:69:
                    34:56:4a:b6:3f:9a:f2:0a:74:75:5a:05:59:5f:ff:
                    7b:e9:fc:20:c3:ca:1e:f1:a2:3f:b7:19:76:09:91:
                    b8:28:ac:7b:9e:5a:69:2e:9b:59:a3:e6:93:9b:0e:
                    da:d0:02:7b:e8:e2:30:fa:8b:5e:e0:88:21:81:8a:
                    fc:87:ad:db:14:57:00:fc:cb:fc:58:c6:91:53:05:
                    8a:09:b2:9d:16:c2:ae:53:4a:82:44:d1:1f:e8:62:
                    6b:94:c2:ea:dc:5e:7f:8c:c7:a8:d5:16:d1:e1:6f:
                    71:de:81:0a:5d:98:fd:30:4c:fa:65:ec:50:a5:01:
                    9d:15:b2:31:32:70:60:2b:2a:24:cd:c1:f9:a4:82:
                    45:c8:48:0f:8d:5d:6d:36:28:9b:b2:e0:ff:70:71:
                    58:19:7e:aa:54:d2:37:e6:f4:e9:3f:7a:f8:0d:14:
                    57:ca:dc:fa:a8:77:ba:b9:21:6a:b5:d9:e9:63:1f:
                    b7:ec:a9:75:ef:d3:c7:87:8b:b6:a9:81:de:84:1f:
                    5c:17:82:7e:b5:9a:f9:f4:d1:86:3d:6f:49:53:bc:
                    86:b0:69:31:9d:b6:47:b6:1a:81:8e:ff:83:81:5a:
                    5d:e4:39:49:c3:ae:67:de:30:71:80:8b:14:97:70:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:C4:59:CB:40:D7:0B:5C:74:0F:00:42:94:2E:85:EA:77:20:C3
            X509v3 Authority Key Identifier:
                keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f0:29:01:9a:46:5f:1e:2a:d6:06:5c:a9:7b:76:65:d8:63:
         8c:97:6a:5a:bb:9d:08:b6:2d:48:14:cf:eb:b6:64:79:0f:e3:
         a1:59:61:22:42:89:47:07:d6:2c:5f:cd:eb:d4:0f:56:77:63:
         c9:ec:a6:70:7d:9a:a0:0a:ef:dc:c0:db:a6:54:36:a8:74:a7:
         92:61:78:8f:c9:56:8f:59:5a:7d:38:74:a5:27:2f:74:b2:22:
         64:7e:82:f1:60:24:bd:17:24:6f:51:33:1b:f2:c4:27:7d:8f:
         f2:31:cf:25:59:41:68:d1:3b:00:48:8f:c8:b8:ec:15:51:57:
         b3:b4:3b:34:af:1a:87:3e:c8:53:da:2b:4c:b1:ba:3f:0f:2e:
         23:1b:71:7b:68:ec:e6:93:11:83:71:36:7a:31:fe:4b:fd:8a:
         99:d4:82:bb:65:e8:27:b8:b2:8d:d1:99:11:a2:bd:d0:ca:7a:
         ec:eb:fe:e8:9e:c5:9e:fb:66:f1:a3:59:90:95:2d:dd:28:86:
         f1:88:a9:2f:2d:94:21:1d:8a:4f:e4:0d:5f:60:23:27:fd:67:
         dd:dd:79:eb:6d:43:7a:05:24:b6:2e:59:ef:ec:65:d0:00:74:
         ea:7b:98:4b:4f:ac:00:91:b5:50:ee:2f:ce:f4:35:83:89:25:
         38:f6:1f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAaEVUWHbgCeqlOuqJec52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwOTIwMjAwMDUzWhcNMjYwOTIxMjAwMDUzWjAzMTEwLwYDVQQD
EygxOGYzYzQ1OWNiNDBkNzBiNWM3NDBmMDA0Mjk0MmU4NWVhNzcyMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/w/mvMiwESFCd9yGmk0Vkq2P5ry
CnR1WgVZX/976fwgw8oe8aI/txl2CZG4KKx7nlppLptZo+aTmw7a0AJ76OIw+ote
4IghgYr8h63bFFcA/Mv8WMaRUwWKCbKdFsKuU0qCRNEf6GJrlMLq3F5/jMeo1RbR
4W9x3oEKXZj9MEz6ZexQpQGdFbIxMnBgKyokzcH5pIJFyEgPjV1tNiibsuD/cHFY
GX6qVNI35vTpP3r4DRRXytz6qHe6uSFqtdnpYx+37Kl179PHh4u2qYHehB9cF4J+
tZr59NGGPW9JU7yGsGkxnbZHthqBjv+DgVpd5DlJw65n3jBxgIsUl3BCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjzxFnLQNcLXHQPAEKULoXqdyDDMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/ApAZpG
Xx4q1gZcqXt2ZdhjjJdqWrudCLYtSBTP67ZkeQ/joVlhIkKJRwfWLF/N69QPVndj
yeymcH2aoArv3MDbplQ2qHSnkmF4j8lWj1lafTh0pScvdLIiZH6C8WAkvRckb1Ez
G/LEJ32P8jHPJVlBaNE7AEiPyLjsFVFXs7Q7NK8ahz7IU9orTLG6Pw8uIxtxe2js
5pMRg3E2ejH+S/2KmdSCu2XoJ7iyjdGZEaK90Mp67Ov+6J7Fnvtm8aNZkJUt3SiG
8YipLy2UIR2KT+QNX2AjJ/1n3d15621DegUkti5Z7+xl0AB06nuYS0+sAJG1UO4v
zvQ1g4klOPYf+Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:24:08 2026 by rpki-client