Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File:                     LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier:          PDxOldw5TyCVOmGX6/NLo257jXZLwuCi3kPhdUMKl98=
Subject key identifier:   9D:4E:73:52:55:6C:36:46:9B:86:03:07:6C:7E:59:53:E2:E8:79:E1
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer:       /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial:       01A129560A3134F4CA8BF479E460CE1ACAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number:          17BF
Signing time:             Sun 11 Oct 2026 05:01:06 +0000
Manifest this update:     Sun 11 Oct 2026 05:01:06 +0000
Manifest next update:     Mon 12 Oct 2026 05:01:06 +0000
Files and hashes:         1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
                          2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: q5Mz+wamgbPDNHW+p5JiNv5btbselfLeCmq+FTWzRCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:56:0a:31:34:f4:ca:8b:f4:79:e4:60:ce:1a:ca:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
        Validity
            Not Before: Oct 11 05:01:06 2026 GMT
            Not After : Oct 12 05:01:06 2026 GMT
        Subject: CN=9d4e7352556c36469b8603076c7e5953e2e879e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:e1:07:23:ca:c1:a8:10:84:4d:fc:6f:66:
                    b0:ce:83:ed:73:97:df:53:80:51:fa:c8:e1:c4:0e:
                    bc:ce:42:e3:43:41:36:93:7e:67:ab:b1:3c:78:d8:
                    34:5d:47:be:76:67:2d:70:c5:e8:80:87:b9:93:b7:
                    41:35:60:19:b1:fa:87:86:46:04:04:72:07:be:e1:
                    30:92:49:bd:42:90:8e:ee:a8:49:95:2d:b4:9b:ab:
                    33:4e:3a:f8:39:96:15:db:e9:18:e4:e4:c0:17:de:
                    ff:0c:e1:36:08:2a:3e:8e:f9:44:b6:1c:1f:20:32:
                    20:d2:d3:6f:20:b2:90:9b:ee:45:58:d8:5f:cb:19:
                    3b:a9:dc:dd:1d:99:e1:7d:d3:43:56:70:12:0a:4e:
                    b8:fc:a7:71:16:93:69:54:c8:5a:87:fb:81:f7:f3:
                    fb:02:c2:9e:ee:59:d4:d9:1b:8d:c8:de:b9:c0:cc:
                    2d:e3:60:8e:01:b6:12:11:c4:85:25:60:28:53:8d:
                    6f:13:8f:17:97:5b:5b:5b:73:b0:a4:6c:08:9f:46:
                    7f:bf:79:50:49:f8:92:ce:d8:2d:53:b6:cd:6f:de:
                    f1:2b:6b:9b:3c:12:32:b7:7c:bc:af:d7:14:7b:e5:
                    82:53:fc:05:b2:51:2c:8a:73:60:87:ff:46:bc:53:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:73:52:55:6C:36:46:9B:86:03:07:6C:7E:59:53:E2:E8:79:E1
            X509v3 Authority Key Identifier:
                keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:b6:6f:de:62:11:8b:d0:c4:f4:ce:75:e5:b9:4a:79:15:
         f0:90:52:62:55:80:33:d8:a0:07:d1:70:01:45:77:89:eb:c8:
         18:93:64:28:ac:ff:9e:71:7c:f7:ab:ca:cf:ab:2d:24:17:75:
         f7:7e:ed:11:52:85:51:00:10:bf:c6:34:91:a2:16:a4:e9:85:
         dd:99:90:46:99:fb:e3:92:c3:56:66:f9:f7:57:e8:f9:7f:37:
         cf:24:e9:eb:a5:1e:7b:9b:3c:bd:39:23:5d:32:00:9f:6c:ab:
         d4:54:3f:31:95:84:2f:66:f5:ee:79:60:4b:49:6e:00:d9:6b:
         2a:cf:b1:92:9a:d9:c7:91:17:ef:3c:a9:61:ac:8e:b6:6b:bf:
         c5:d4:ad:c9:c5:c7:fe:eb:65:07:ca:44:a8:cc:30:d3:e1:d3:
         b4:f9:81:82:36:da:56:ec:59:ce:62:5c:d3:0d:89:02:2a:78:
         0f:f5:b3:d5:b7:fd:25:3b:a8:df:5e:74:51:b7:ab:11:e2:a4:
         29:d6:9c:dd:b6:1a:b9:54:b2:dd:1f:51:6f:93:3d:da:d6:85:
         7f:53:7e:0a:fd:28:fe:91:23:68:4e:dc:b5:c9:f1:2f:df:de:
         6b:68:e6:3d:e8:3e:50:3f:71:d0:5d:12:2b:d5:f2:ed:43:cb:
         8e:a3:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:31:11 2026 by rpki-client