Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          K/BhNN1FA4nWuiZJyZBA7LQwKloYi6ytxiL0c8CqdyI=
Subject key identifier:   80:38:AD:5A:57:FA:73:40:F5:6D:E6:44:55:6C:8C:03:A7:7C:41:38
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       01A1908BB29369984C1B5984ED422232A25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          0573
Signing time:             Sat 31 Oct 2026 06:00:36 +0000
Manifest this update:     Sat 31 Oct 2026 06:00:36 +0000
Manifest next update:     Sun 01 Nov 2026 06:00:36 +0000
Files and hashes:         1: 4KwoPjMEOKwVgqjkR1iM1Sga8ls.roa (hash: zEP8VUcw4u5qtFYg9l1WCeFUs+0BvYnLihv3gDQhsgg=)
                          2: 5quSGDFiCc7x9xQL3RZ2oDRoZEI.roa (hash: GKv86KDQ60+mPLbc7GtPs9wY5m72zA4FBxOc21v69ao=)
                          3: 6MOfJoJfjgHruP2KWqkzqptDlOw.roa (hash: 7sX90kHGNjmL95aSRKZrdKO8hW7cdwTVGZ3KRAMueWY=)
                          4: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: uEdh0mGEB953aTjizTkj3DRnrcUh3H2jrHJNMbVTe68=)
                          5: RdYGiesB8wE7Cc7xqOKt4JlLnok.roa (hash: W3DsiCdc3x/PMoGS82zn756ZVAXlVYusY8WrxMFT/7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:8b:b2:93:69:98:4c:1b:59:84:ed:42:22:32:a2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: Oct 31 06:00:36 2026 GMT
            Not After : Nov  1 06:00:36 2026 GMT
        Subject: CN=8038ad5a57fa7340f56de644556c8c03a77c4138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:08:d6:4e:5e:41:27:a9:66:00:9d:ca:2b:
                    4a:57:b3:8f:f8:6c:ec:ab:d1:7e:8b:60:af:e4:02:
                    74:8c:64:8c:16:2e:82:2e:68:91:4c:2c:7d:a3:f0:
                    b8:ed:5f:2a:11:03:32:d3:8d:b7:5a:52:54:a6:5f:
                    cd:21:70:9d:0b:4d:c0:e5:66:df:4e:4d:29:bd:82:
                    9c:46:45:d0:d9:95:56:b3:9a:f4:b0:c3:27:7b:27:
                    17:b8:3a:6e:62:de:19:79:04:75:31:df:11:76:e6:
                    46:c4:1e:cd:8b:80:8f:fc:b3:b1:dd:b9:70:d7:b6:
                    ce:5c:63:2f:5d:c8:c5:99:da:68:92:76:af:35:19:
                    ed:38:26:69:af:bb:77:8e:68:0f:55:04:8a:c3:fd:
                    80:ca:1f:13:8c:a6:4f:c4:62:54:6a:d7:48:7f:73:
                    03:16:b8:c0:89:06:a6:4e:ef:98:52:7f:66:1c:a9:
                    6d:f7:f3:99:12:cd:6d:74:08:04:1c:0f:41:3d:08:
                    19:05:52:e1:c3:cb:3c:2e:33:0f:ac:22:28:75:3f:
                    49:92:e0:24:40:fc:eb:be:e5:a9:67:ac:58:eb:2c:
                    4a:47:e6:30:9f:ea:08:b8:4d:5c:32:fd:6e:a1:db:
                    75:7b:1e:59:de:97:4a:07:3a:37:1e:10:9c:0a:d9:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:AD:5A:57:FA:73:40:F5:6D:E6:44:55:6C:8C:03:A7:7C:41:38
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:9b:39:e2:84:34:91:34:62:aa:51:4f:84:14:ef:11:47:
         93:f8:d3:df:98:d4:06:47:de:df:6d:b6:53:5f:b7:32:23:b4:
         e2:aa:b9:be:4a:bc:60:6e:c5:d5:61:00:9d:26:13:09:b4:d4:
         50:2f:c2:98:c0:d8:e4:ea:55:db:91:e5:56:87:c5:39:f2:45:
         a1:4d:5d:e1:2e:fd:cc:74:9b:bc:24:38:d8:7a:1e:f8:ab:21:
         57:dc:f8:a2:a3:50:0c:5f:e9:68:07:ab:85:67:7d:56:b4:d2:
         00:4b:b6:f1:49:59:7b:48:ad:31:ba:24:33:59:17:d6:5b:49:
         ed:fb:20:fc:dd:35:89:a7:4a:20:8a:cb:3c:2e:5a:7f:e4:d7:
         de:bd:24:69:27:dc:41:39:a9:d3:3d:68:69:29:4e:f0:9d:43:
         1f:3a:ce:dc:da:5c:27:d7:3f:d4:f8:69:16:ad:9c:f6:34:7a:
         08:12:8c:15:eb:74:32:fc:c9:b4:ac:1c:69:ed:2c:e8:a9:6b:
         18:63:a7:86:30:69:6a:fd:ca:b1:ef:ab:d5:a9:f0:23:1c:6c:
         5b:62:b7:f8:f8:38:5f:10:12:fb:c4:c9:d7:80:28:86:d1:9d:
         79:f7:90:d8:ef:3b:db:e3:5f:f3:ec:d0:ac:b9:50:f2:2f:4e:
         ae:b2:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:53 2026 by rpki-client