Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          UVOz30f9R6aWlr30sWrR5CM2/K9gzdTA27kntQixze4=
Subject key identifier:   67:E6:E5:BF:F0:76:E4:20:B3:83:E5:55:85:5A:D4:3C:B0:3E:5F:43
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       01A08B3171760319851E0AED6185228B7379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1A5A
Signing time:             Thu 10 Sep 2026 12:01:08 +0000
Manifest this update:     Thu 10 Sep 2026 12:01:08 +0000
Manifest next update:     Fri 11 Sep 2026 12:01:08 +0000
Files and hashes:         1: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (hash: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M=)
                          2: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: pMK8HJiLjxH1AAU/Hj/V1mWcQd54bHzqybwBcaEIqvo=)
                          3: MtlNPbOiQrDPq9JzI5yqmhqIeu0.roa (hash: jVaCEGYVnh9jmEuUNesf3uuQIlhN1CzzAG7BWnlcSmA=)
                          4: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (hash: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ=)
                          5: _tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa (hash: sG2gr2VibfwBBWqITc4yDuS8f9cCBW1DEngPZoKQfNg=)
                          6: gGIqjOk7g2PlsS-LqhKTvWucpIY.roa (hash: W502vrehV9CtMQIyWcS05BwV8XiwYtXO1sMXV5IcC2E=)
                          7: q4XekdpB8TJEjFPDt8ccc_PZPoY.roa (hash: PjKWv/0KNDEM4pTyCe/55FuN+l88tsgTGIft6oTHhlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:71:76:03:19:85:1e:0a:ed:61:85:22:8b:73:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Sep 10 12:01:08 2026 GMT
            Not After : Sep 11 12:01:08 2026 GMT
        Subject: CN=67e6e5bff076e420b383e555855ad43cb03e5f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:8c:62:e9:8a:a1:e1:02:00:fd:b3:8d:0d:
                    35:6e:c9:61:41:bb:72:e8:f8:5b:a5:db:cc:eb:ee:
                    89:4b:94:00:62:fd:b6:4d:33:c5:35:66:ba:b9:c8:
                    94:9b:f8:1d:dc:50:a5:16:dd:52:dc:53:41:ff:8c:
                    16:7e:f9:9b:18:19:da:56:7c:5b:0a:1d:cc:a9:fd:
                    5f:86:4b:fc:3e:b6:da:2e:0b:af:ef:30:92:e5:b0:
                    42:bb:c2:d0:43:2f:23:16:4c:29:50:28:61:63:47:
                    bd:1c:e2:d6:57:0e:56:a7:9f:0c:ff:e5:88:ba:f8:
                    26:d2:05:e3:ef:42:26:4c:35:07:48:b0:1f:15:88:
                    22:2a:28:66:74:6d:36:48:ab:87:b5:54:dd:d1:cd:
                    3b:9b:af:3d:67:be:67:63:75:43:ac:3c:42:b2:be:
                    42:7a:20:7f:98:15:88:7b:8f:fe:bd:3a:51:29:da:
                    16:7b:78:fc:2e:e2:a1:17:80:5e:c7:82:f0:2d:5a:
                    e9:b3:00:25:1c:76:71:b8:dd:7c:3e:11:8f:1c:2f:
                    7a:6a:56:60:72:81:e1:ee:3c:27:5b:0a:19:3c:14:
                    d4:4a:7b:c3:11:ea:a6:b7:72:7a:8b:1d:83:e8:50:
                    67:de:c1:07:e3:10:da:64:78:9e:9d:b7:8f:09:9e:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:E5:BF:F0:76:E4:20:B3:83:E5:55:85:5A:D4:3C:B0:3E:5F:43
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:bb:96:a6:2e:dc:e3:c7:66:81:4c:8c:55:0b:6f:c4:da:
         03:c3:4a:47:c4:de:84:0b:a2:f4:5f:90:5f:03:3d:91:e5:63:
         95:99:48:e4:95:2b:c2:bf:ce:0c:ca:3a:bd:7d:5f:bb:d8:65:
         6f:a9:20:db:71:ee:66:17:6b:9d:e6:62:88:ae:33:6b:cc:66:
         58:a4:c7:01:7c:b1:95:82:66:4d:15:9f:17:cc:87:21:5d:3d:
         0d:46:22:90:79:7d:52:1b:da:2b:9d:fb:d2:16:38:55:9e:66:
         01:30:54:af:65:22:c0:53:0a:70:e0:1b:c6:40:37:63:49:af:
         3d:ed:6a:73:4d:3f:50:25:2d:31:c3:ab:61:1c:22:e1:fb:83:
         7d:cd:ef:f2:10:b7:ce:2a:1d:aa:c6:04:f5:42:d3:3f:67:91:
         52:27:c0:b0:eb:00:1e:cb:59:1a:7e:13:12:c3:10:52:07:29:
         b9:89:33:43:11:47:40:08:6d:ed:fc:3c:b4:53:02:76:e8:01:
         65:d4:93:cf:4a:8e:62:9e:2e:30:f3:14:ce:1c:75:77:2b:8d:
         be:78:98:79:79:02:6c:23:59:fb:7f:e0:39:f0:7e:db:8b:25:
         4f:25:fe:25:92:f0:c7:5d:0d:c7:a4:23:0c:1e:ee:4a:42:91:
         af:99:67:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMXF2AxmFHgrtYYUii3N5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2
ZmFjOTgwHhcNMjYwOTEwMTIwMTA4WhcNMjYwOTExMTIwMTA4WjAzMTEwLwYDVQQD
Eyg2N2U2ZTViZmYwNzZlNDIwYjM4M2U1NTU4NTVhZDQzY2IwM2U1ZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDqMYumKoeECAP2zjQ01bslhQbty
6PhbpdvM6+6JS5QAYv22TTPFNWa6uciUm/gd3FClFt1S3FNB/4wWfvmbGBnaVnxb
Ch3Mqf1fhkv8PrbaLguv7zCS5bBCu8LQQy8jFkwpUChhY0e9HOLWVw5Wp58M/+WI
uvgm0gXj70ImTDUHSLAfFYgiKihmdG02SKuHtVTd0c07m689Z75nY3VDrDxCsr5C
eiB/mBWIe4/+vTpRKdoWe3j8LuKhF4Bex4LwLVrpswAlHHZxuN18PhGPHC96alZg
coHh7jwnWwoZPBTUSnvDEeqmt3J6ix2D6FBn3sEH4xDaZHienbePCZ4NUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfm5b/wduQgs4PlVYVa1DywPl9DMB8GA1UdIwQY
MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt
N2Y5NzBhM2FmOWNkLzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk
LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoau7lqYu
3OPHZoFMjFULb8TaA8NKR8TehAui9F+QXwM9keVjlZlI5JUrwr/ODMo6vX1fu9hl
b6kg23HuZhdrneZiiK4za8xmWKTHAXyxlYJmTRWfF8yHIV09DUYikHl9UhvaK537
0hY4VZ5mATBUr2UiwFMKcOAbxkA3Y0mvPe1qc00/UCUtMcOrYRwi4fuDfc3v8hC3
ziodqsYE9ULTP2eRUifAsOsAHstZGn4TEsMQUgcpuYkzQxFHQAht7fw8tFMCdugB
ZdSTz0qOYp4uMPMUzhx1dyuNvniYeXkCbCNZ+3/gOfB+24slTyX+JZLwx10Nx6Qj
DB7uSkKRr5lnWQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:20 2026 by rpki-client