Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          z/Sgq+M5MRJKQrpp8JISee68IJ92l8wJ/JvhA6mVqMI=
Subject key identifier:   11:CC:F5:48:A7:DD:93:10:E3:6F:1F:20:A1:74:DC:17:EB:9F:D8:EE
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       01A17C2907B71E16AD64912E0CFE47C560D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          1ADA
Signing time:             Tue 27 Oct 2026 07:00:26 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:26 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:26 +0000
Files and hashes:         1: 8Y0frUuyylGYF0JAkx3HfLpxO3Y.roa (hash: fOiapGzEdBHB85kSUiPme4t8/6GQIzy9nkoFJ7Ffyug=)
                          2: CvN-OPpHrkoiSwngHGByZ8d5Y50.roa (hash: HUmo1OpTkAigfX6oXWD0/+6iPG83y0OXXAaTcOrXIoE=)
                          3: EdGl_6Tic6Mpzlfr59WBM1BADyY.roa (hash: G+FZFwJ2110ZCN0MfLE1n2sVgehSz/THxhnHYjoT0VA=)
                          4: M2uxK4q47x4eUk5x2CDI5p_qHlg.roa (hash: 5pa5GIOwyhp3y4tbcKUsTX1710EyGkZrrz75hvZiUvA=)
                          5: W1_o2jcYywYPdIDwRjjua7ADCe8.roa (hash: /W3HAGY8K/NpemVGTOjobPBaP3NbwhIa/jER44sGzpc=)
                          6: ZLWYPED9hnyATq6zL7cDoSdfwEk.roa (hash: l+nkgnHvp3Sb6As13mBVpCJe7cBpWUBShh9jwSh1vjo=)
                          7: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: l/D0+LyHJ1F3SoJh/1L665VQeYGMUzBljvBM1k9Vne0=)
                          8: ssW78z2mnJkOzOZmUnXMkDw6DDk.roa (hash: /yrIaP9kfqHBBzpn1v5OUAHVa+R+kgnJcpfPWDrfgkU=)
                          9: uKtPfwvx5B6XeGpENsInTuBCciU.roa (hash: +7a7SL8VvLvGQs/OKDdLsmsgdAA79tP8yltWgYFxF9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:07:b7:1e:16:ad:64:91:2e:0c:fe:47:c5:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Oct 27 07:00:26 2026 GMT
            Not After : Oct 28 07:00:26 2026 GMT
        Subject: CN=11ccf548a7dd9310e36f1f20a174dc17eb9fd8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:93:e2:44:3b:77:f1:f8:15:d7:7c:01:9d:
                    a2:c4:f6:b7:8f:24:9a:78:80:a6:48:cd:2f:b3:57:
                    8d:a1:ee:fa:ee:e1:cc:d0:ee:25:15:31:8d:d3:2d:
                    16:01:7e:38:94:5f:ec:bd:f9:47:5b:33:e5:6a:c9:
                    c6:29:54:0c:2b:ea:33:ba:8d:8c:6f:1d:8c:8d:42:
                    1c:37:0d:55:76:80:36:c4:0f:c1:d4:d7:f6:b6:87:
                    43:c1:51:68:64:cb:7f:ab:0e:4b:1e:32:4d:75:58:
                    08:0c:e1:ad:1d:76:25:8d:24:e1:f5:b9:52:31:7e:
                    53:8c:32:18:d8:47:57:a4:3e:96:0c:03:47:9b:ec:
                    fb:64:8c:56:07:8b:53:ba:14:41:34:26:47:b6:ca:
                    f0:ac:6a:62:56:8a:ca:d1:76:0a:a1:fd:96:94:55:
                    d4:91:34:eb:d5:52:55:aa:44:c4:24:0e:55:dd:b9:
                    37:20:7f:5e:e7:38:d2:25:f7:13:b3:f3:08:f1:ff:
                    ca:0b:bf:b3:da:44:d9:33:63:8c:ce:67:ba:7c:13:
                    a2:76:5b:f7:f2:66:d8:7c:d4:f7:f9:fc:39:5b:46:
                    67:67:ef:0c:26:9e:4c:63:39:64:75:f4:46:58:7c:
                    27:c7:82:0f:e4:f0:d3:3f:9b:e7:18:39:dc:35:8e:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:F5:48:A7:DD:93:10:E3:6F:1F:20:A1:74:DC:17:EB:9F:D8:EE
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:be:92:02:47:18:e6:04:7b:49:54:9b:41:c5:dd:30:ae:ab:
         e6:73:c0:ce:ab:2b:c9:2b:47:be:01:41:39:61:63:9e:83:3e:
         d6:e0:05:1e:f9:fb:5e:f7:e3:6f:51:21:d5:be:f9:f2:af:11:
         28:68:e7:b8:2e:50:8e:25:1e:7f:0b:d9:ee:15:35:34:3a:00:
         4d:8f:c4:b7:4a:ed:eb:6a:18:b5:ee:73:93:36:21:7c:1a:86:
         28:95:89:45:37:a5:6e:32:ea:5a:b9:9e:fc:7a:92:fb:28:5b:
         90:36:3b:c1:ab:cc:9a:aa:ca:64:dd:15:aa:d7:2f:dc:96:59:
         a1:cb:e6:0a:fb:a2:1b:15:7f:1a:10:4f:e5:88:06:fc:24:54:
         21:93:d5:e7:a3:4c:f1:1a:d7:c2:47:30:8b:d5:a6:59:a1:e1:
         46:3c:b0:88:c0:4c:28:dc:49:8a:25:12:e6:f5:df:ec:a9:20:
         ae:17:5a:04:19:1d:96:10:93:fa:2f:92:3e:c3:b2:e1:e4:67:
         dc:0b:fb:7a:53:87:b3:3d:86:29:31:d7:c4:f0:e2:f6:69:ba:
         85:de:9d:87:2a:f2:5e:0e:fc:bf:4e:4e:2f:b4:5b:69:ea:3d:
         75:05:7f:be:19:20:ad:a0:d8:3e:15:83:97:3a:ea:a6:ab:5a:
         15:b8:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:50 2026 by rpki-client