Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          tt1ZrDAOYddRPusv1kd3/o5mYEy7deQBMGDg0Bal8qM=
Subject key identifier:   53:3D:FE:FF:AC:64:FF:BC:36:87:AE:6C:94:C9:58:9E:EB:25:FB:16
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       01A18AF751A484D6103ED2B6B1DCBFB39C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0D44
Signing time:             Fri 30 Oct 2026 04:00:26 +0000
Manifest this update:     Fri 30 Oct 2026 04:00:26 +0000
Manifest next update:     Sat 31 Oct 2026 04:00:26 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: t09625TmKtwfs65PWawTRnWBwbgrxBST5HWfCNkIydg=)
                          2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:f7:51:a4:84:d6:10:3e:d2:b6:b1:dc:bf:b3:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Oct 30 04:00:26 2026 GMT
            Not After : Oct 31 04:00:26 2026 GMT
        Subject: CN=533dfeffac64ffbc3687ae6c94c9589eeb25fb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:3f:8f:e1:1b:52:39:cf:1d:21:32:9c:55:
                    3c:ae:4a:2d:34:05:2f:39:e7:50:e9:fc:f3:8e:46:
                    fb:30:d0:b9:b1:dd:a0:fe:d2:70:34:a1:e4:b8:3f:
                    b0:0a:87:2f:53:8b:9b:d9:1c:e2:85:bf:0d:1b:4e:
                    19:b6:0c:10:e3:20:76:7f:19:6a:ee:e1:d1:68:bf:
                    d8:04:5c:04:46:4d:1d:b0:c3:39:dc:aa:b6:57:f6:
                    a8:35:b6:e4:f9:3c:aa:4b:20:48:9a:aa:6a:5a:72:
                    cf:f5:64:35:7f:64:e1:7d:9c:0b:27:56:ab:3a:a0:
                    37:15:78:79:92:73:ee:f8:2b:82:ab:3e:51:ce:e1:
                    09:55:d8:bf:4d:9c:f6:b9:e1:f8:d0:d2:de:bd:8a:
                    0e:59:07:12:2b:6c:4f:db:57:9f:e6:ac:56:e4:59:
                    53:47:10:82:6b:5f:9f:aa:10:56:ca:17:d6:a7:bc:
                    3f:d3:eb:09:57:fa:22:63:36:4c:6f:62:83:4b:52:
                    b7:65:c9:f5:6c:2a:30:d1:e0:5e:df:fa:d9:8b:a4:
                    9a:65:9c:f8:e1:74:1d:8c:33:36:3d:76:5b:e0:6a:
                    3f:43:44:41:63:c9:67:e5:5e:45:7c:65:34:21:1e:
                    4b:ce:52:b4:32:3b:b2:91:1a:fa:ff:d4:48:6d:17:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:FE:FF:AC:64:FF:BC:36:87:AE:6C:94:C9:58:9E:EB:25:FB:16
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:e4:c8:9f:a2:74:5e:ff:c1:ca:25:1c:6d:cd:b0:cd:0e:
         ae:ed:fe:d3:6d:ff:58:2f:18:bd:13:a5:18:ff:d0:42:4b:7a:
         73:78:07:68:11:17:04:71:73:9c:64:ac:86:e1:23:6c:36:52:
         e5:2d:1f:1b:4e:2b:83:ef:62:56:ae:5a:09:0b:8f:91:3f:c2:
         cf:1a:1f:a3:ba:9f:61:aa:40:b3:70:4a:62:1b:8c:1b:72:1e:
         68:06:94:f7:a7:6e:c9:4d:ec:3a:65:b6:97:de:5c:74:80:50:
         8e:54:ae:1b:94:39:b8:9f:b5:c9:0a:c0:9e:fd:06:a9:fd:33:
         5a:e5:fc:38:36:6a:e9:ec:3b:c1:d2:b4:88:fc:d3:bb:11:d9:
         af:18:2c:91:1b:42:fa:15:6d:df:b2:80:6e:26:b4:8b:7a:f8:
         9f:23:0a:d6:b6:79:fb:13:bf:ec:fc:fa:af:1c:57:49:e4:72:
         65:b1:2d:fb:61:e9:2c:1f:91:ab:8b:c4:26:bc:86:2f:4e:a5:
         63:64:b7:fd:d4:8c:cc:ee:a5:bb:6d:64:12:99:15:0a:46:60:
         da:59:c1:0b:62:97:10:07:5a:9b:fe:c0:92:23:d6:e3:18:a7:
         d6:0f:bc:6a:10:4e:0b:91:05:96:bd:f3:3f:47:6e:0f:87:4f:
         12:c2:50:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGK91GkhNYQPtK2sdy/s5yQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi
ZDc0MzMwHhcNMjYxMDMwMDQwMDI2WhcNMjYxMDMxMDQwMDI2WjAzMTEwLwYDVQQD
Eyg1MzNkZmVmZmFjNjRmZmJjMzY4N2FlNmM5NGM5NTg5ZWViMjVmYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcQ/j+EbUjnPHSEynFU8rkotNAUv
OedQ6fzzjkb7MNC5sd2g/tJwNKHkuD+wCocvU4ub2Rzihb8NG04ZtgwQ4yB2fxlq
7uHRaL/YBFwERk0dsMM53Kq2V/aoNbbk+TyqSyBImqpqWnLP9WQ1f2ThfZwLJ1ar
OqA3FXh5knPu+CuCqz5RzuEJVdi/TZz2ueH40NLevYoOWQcSK2xP21ef5qxW5FlT
RxCCa1+fqhBWyhfWp7w/0+sJV/oiYzZMb2KDS1K3Zcn1bCow0eBe3/rZi6SaZZz4
4XQdjDM2PXZb4Go/Q0RBY8ln5V5FfGU0IR5LzlK0MjuykRr6/9RIbRdEFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM9/v+sZP+8NoeubJTJWJ7rJfsWMB8GA1UdIwQY
MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt
Nzc0MGIzZDY5MDVlLzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl
LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiovkyJ+i
dF7/wcolHG3NsM0Oru3+023/WC8YvROlGP/QQkt6c3gHaBEXBHFznGSshuEjbDZS
5S0fG04rg+9iVq5aCQuPkT/Czxofo7qfYapAs3BKYhuMG3IeaAaU96duyU3sOmW2
l95cdIBQjlSuG5Q5uJ+1yQrAnv0Gqf0zWuX8ODZq6ew7wdK0iPzTuxHZrxgskRtC
+hVt37KAbia0i3r4nyMK1rZ5+xO/7Pz6rxxXSeRyZbEt+2HpLB+Rq4vEJryGL06l
Y2S3/dSMzO6lu21kEpkVCkZg2lnBC2KXEAdam/7AkiPW4xin1g+8ahBOC5EFlr3z
P0duD4dPEsJQuA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:09 2026 by rpki-client