Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          UIczNsub9fxZm1xrVg/aZUY1Z19e6p/XANHLALjFXf0=
Subject key identifier:   9A:A9:32:89:16:55:FE:A2:FC:90:9E:DD:CE:34:E5:75:6F:70:0F:CB
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       01A04273CFABA142FD46E353257A8BF64A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          1A25
Signing time:             Thu 27 Aug 2026 09:01:20 +0000
Manifest this update:     Thu 27 Aug 2026 09:01:20 +0000
Manifest next update:     Fri 28 Aug 2026 09:01:20 +0000
Files and hashes:         1: DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa (hash: CPSNBE1JDqZWrzRtLM0uStnUMuYrz40a9MwrDBSVFlM=)
                          2: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: rgT2hNRpxyAvIp1gqtSziLaFqy9mfKBXlO753+fh15c=)
                          3: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (hash: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A=)
                          4: RUhmJdqw-3Gaw_JLROAhLOvB2IM.roa (hash: XdtV4zgfYLmkDs8xTK/8Ot/KM7BnvRi+tSC9tgSlImI=)
                          5: jYiU8bv569WiEs-qGefdtilWB8Y.roa (hash: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok=)
                          6: yV2ta5YIqZOtbWWi5XnowuWeO2Y.roa (hash: FMj28W2Mwf91c8T9pAxRJIkM3TCaa6JGRs6VpNG02T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:42:73:cf:ab:a1:42:fd:46:e3:53:25:7a:8b:f6:4a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Aug 27 09:01:20 2026 GMT
            Not After : Aug 28 09:01:20 2026 GMT
        Subject: CN=9aa932891655fea2fc909eddce34e5756f700fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:48:35:3e:bd:b0:c8:a0:04:ea:a0:4e:3b:
                    a9:f8:26:dc:ef:5a:e3:c6:68:96:ce:24:35:d9:3b:
                    16:1a:57:17:b5:de:fc:eb:60:e2:6c:42:24:57:a8:
                    65:22:e9:2d:84:b0:20:30:fd:25:26:ee:8f:a7:2c:
                    34:8f:9a:73:b6:18:d2:a8:ff:e1:3b:3d:8a:2c:fb:
                    8f:01:eb:34:f5:cd:8d:2f:d1:65:49:8c:72:3b:f4:
                    f8:90:3b:98:53:84:44:e8:9d:b3:5c:ad:60:5f:1b:
                    7b:b8:75:ab:88:bd:9a:a1:64:ec:bb:9b:fb:86:d5:
                    14:32:6e:7f:ca:20:13:18:7f:7d:07:d3:7b:96:72:
                    a0:94:26:d1:48:e0:0c:c3:7f:61:b1:24:ff:ca:ac:
                    f7:42:a5:6f:77:a7:97:3b:43:00:ed:8c:84:d4:cd:
                    3a:16:fc:8f:f4:71:cc:39:1d:7a:35:dd:41:ac:6f:
                    c2:dc:61:cc:e6:52:88:c5:1a:b2:b7:c6:e0:4f:0b:
                    7c:3c:df:66:45:bf:20:ed:c2:59:1d:82:d9:0c:d7:
                    6f:21:03:d0:2d:4d:98:bc:d3:b4:8d:64:ed:ff:d3:
                    50:d7:a4:7b:22:7b:02:5d:88:a5:73:3a:2d:f9:76:
                    9b:be:bc:03:f3:fa:0c:80:27:14:61:65:19:3f:dd:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A9:32:89:16:55:FE:A2:FC:90:9E:DD:CE:34:E5:75:6F:70:0F:CB
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:a2:c8:28:0e:f2:43:4a:89:43:d7:b1:87:d0:04:75:23:
         02:8f:b3:9e:66:62:0d:16:bc:70:d0:67:07:d4:3b:9a:3a:55:
         1a:0e:cb:34:cd:d2:53:c4:1b:9d:0d:f4:0a:b4:cc:0b:bb:88:
         12:fd:61:fb:bf:74:81:a3:94:8b:50:5b:89:7b:16:78:d1:81:
         71:73:e9:ea:25:f9:4a:7b:b7:a6:f4:c9:c1:6c:c7:2e:89:d7:
         02:31:be:54:bb:d5:47:43:53:52:85:03:5d:fc:98:60:af:4a:
         41:70:1b:9a:78:5a:bb:a0:54:18:dc:54:eb:e5:f7:0f:7e:bc:
         22:f4:de:1e:ac:eb:01:9c:9d:ad:e0:9d:7b:6d:8e:96:b9:0a:
         4a:25:7e:1e:52:06:ff:15:65:b1:17:f8:08:77:40:7a:1e:e4:
         af:4f:af:ce:35:0b:8a:81:e3:4f:1e:73:3a:80:e3:61:4b:bd:
         98:e8:a6:71:d5:ee:14:94:e6:70:95:3c:a8:a0:03:d2:e8:69:
         dc:20:84:63:df:64:26:c0:df:6f:5a:85:6b:c1:3a:97:05:d7:
         a2:19:e9:00:46:56:aa:20:9b:02:3c:a9:4c:30:ce:08:af:1a:
         b6:ae:df:03:9a:b5:a1:c8:21:42:22:67:56:14:4d:56:ba:6d:
         aa:42:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:10 2026 by rpki-client