Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File:                     lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier:          TO8TqoDhxIr/N+jSFtHIbEmKZOHuOx1kefAI6qP5POs=
Subject key identifier:   F6:AD:B9:10:3F:2F:2C:DE:30:5C:CF:2D:24:91:0C:BA:17:8B:C5:24
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer:       /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial:       01A114BD07805BB63F5AB4D1272C4DD7015E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number:          1A9A
Signing time:             Wed 07 Oct 2026 05:01:34 +0000
Manifest this update:     Wed 07 Oct 2026 05:01:34 +0000
Manifest next update:     Thu 08 Oct 2026 05:01:34 +0000
Files and hashes:         1: 3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa (hash: yo8hQ3SuLYgiKWGisWTt5R1HgigntwJ6UO6bodCaAnE=)
                          2: 868VkIZTeEk8g8K-nc-GYk4GNqA.roa (hash: mAkolD9i09Q2h4MCniDyPs0rmf1iQU6A0FPOG2LgFwE=)
                          3: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: ADX5qe3XbC9ImNFtuhNmNmjo9hNvVx4djwWakTVW+rg=)
                          4: q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa (hash: eotOUqJ53rWQxs9/sn9KK6XM4STngZxv7oKNTVxb9eI=)
                          5: xY0yzyzGKETMGEPdBnrDX84itWs.roa (hash: avsQpG9VhWpkE114IUXSkSxZIAsU+MHzryCiy/ZPdtw=)
                          6: yQDR4RXyJipBGIGaXf0hpmvg9MI.roa (hash: Gz9z3oldgWaZnVSRtfCqMKiqcH9Ia6S6jLOD4nomWR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:bd:07:80:5b:b6:3f:5a:b4:d1:27:2c:4d:d7:01:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
        Validity
            Not Before: Oct  7 05:01:34 2026 GMT
            Not After : Oct  8 05:01:34 2026 GMT
        Subject: CN=f6adb9103f2f2cde305ccf2d24910cba178bc524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:da:b7:5e:d2:ea:f9:08:0e:f7:28:b0:49:
                    b5:15:f3:52:e6:99:70:2f:c0:a6:a9:3e:a0:f5:72:
                    e8:bd:0e:33:74:ac:e5:69:26:6c:99:1d:48:21:87:
                    5d:89:04:6f:d4:43:4c:fa:f9:42:55:48:6e:1f:a8:
                    d1:30:89:c5:ae:38:60:5b:86:87:a1:62:6a:5d:0b:
                    39:65:d1:ac:e2:2b:6d:79:e2:4d:9f:3d:ca:ca:2b:
                    a6:d3:25:f2:a6:a3:ef:aa:aa:5c:f0:78:b6:a4:20:
                    0d:67:41:c8:7d:fe:5a:e2:7c:b5:e7:76:d0:f8:40:
                    6d:ea:20:cb:01:a5:2b:dd:c1:d4:14:cf:2d:9a:4b:
                    cc:ae:45:17:67:93:c4:f0:94:3b:7e:72:6d:55:88:
                    5e:7d:5c:ee:03:7b:da:db:69:74:58:57:d3:3c:b7:
                    f4:30:91:09:81:8f:63:0c:0f:d4:59:09:87:0b:a1:
                    26:09:3b:c1:97:82:da:f6:1a:ce:0d:00:c9:e6:7f:
                    af:54:9c:2c:79:bc:fd:c8:d8:90:64:e5:3f:0d:09:
                    b6:41:c2:fa:7f:01:97:c5:dc:3e:4f:79:e8:e4:f3:
                    d3:48:4c:6a:77:54:31:ff:29:cc:00:b3:c7:4d:9b:
                    62:8f:29:eb:10:db:a2:ec:08:69:30:05:38:14:cb:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AD:B9:10:3F:2F:2C:DE:30:5C:CF:2D:24:91:0C:BA:17:8B:C5:24
            X509v3 Authority Key Identifier:
                keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:62:b9:22:3c:a0:07:55:68:e2:8d:7b:08:c8:34:b8:3f:
         01:c5:90:81:c1:7a:7b:1b:92:fb:61:57:bd:ed:61:11:7b:75:
         d3:d9:e8:e6:ed:4c:79:1f:54:98:3a:2d:84:82:92:80:cc:e9:
         86:b2:dd:00:6a:08:d9:8a:bc:73:ea:6b:ad:49:1a:7d:6d:17:
         cf:c1:73:2f:15:1f:a0:2b:e5:46:bf:1c:a5:19:2e:81:a8:24:
         f2:be:bf:b1:73:13:ba:04:0f:7d:f6:b1:d4:d0:36:b0:6c:0f:
         f1:ea:48:c3:99:e6:09:6b:75:f3:a7:82:79:71:5f:08:26:2e:
         a3:ee:1d:21:23:f8:fb:7b:95:03:d5:1d:09:f9:6f:65:ad:b7:
         fe:7c:83:92:1f:75:4a:3e:24:e4:9b:ee:5e:ba:2e:09:fb:20:
         00:31:c2:5c:83:23:ed:35:f4:58:de:b7:8b:7d:df:f0:8e:03:
         48:81:33:8b:db:d8:17:9f:b1:68:c1:e1:f9:12:3a:34:de:47:
         b5:a8:1e:bb:76:95:57:28:ad:c4:df:8b:d8:79:d5:b1:07:20:
         77:24:87:a3:f8:a6:c2:41:9b:0e:e1:2a:99:eb:69:aa:94:bd:
         b2:2c:d0:34:22:7e:c5:01:bd:98:a7:8d:fe:c0:77:b4:7a:39:
         a6:96:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:03:36 2026 by rpki-client