Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File:                     Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier:          vzk71AMy8czssYBiyVaMQzP2MrZcGQo+xjFbG9gTIIs=
Subject key identifier:   78:53:0F:0F:D5:86:0B:B5:AB:9C:0B:5C:3B:F9:F4:54:B6:14:EF:68
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer:       /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial:       01A14EE3506361912EF4D1062C1FAAEFEC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number:          0480
Signing time:             Sun 18 Oct 2026 12:01:22 +0000
Manifest this update:     Sun 18 Oct 2026 12:01:22 +0000
Manifest next update:     Mon 19 Oct 2026 12:01:22 +0000
Files and hashes:         1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
                          2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
                          3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: amTIi4YX6SqWrgGc6k3X6XRQRsdkWOw7P5q+vHInZaY=)
                          4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:e3:50:63:61:91:2e:f4:d1:06:2c:1f:aa:ef:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
        Validity
            Not Before: Oct 18 12:01:22 2026 GMT
            Not After : Oct 19 12:01:22 2026 GMT
        Subject: CN=78530f0fd5860bb5ab9c0b5c3bf9f454b614ef68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:47:ad:a0:87:0c:b7:69:01:e6:23:c4:48:
                    dc:72:0d:d1:fd:0a:fc:ac:68:f8:74:e7:4b:ef:25:
                    66:9c:5b:94:9c:9c:02:a9:6d:72:f2:45:6b:08:7b:
                    3d:5f:8c:ce:11:f6:b2:a1:fb:3e:f6:d5:98:9e:2c:
                    29:1a:22:b6:61:64:38:4b:76:15:7c:10:5c:4a:c1:
                    06:31:0a:a3:85:7a:4b:67:aa:9b:4c:be:3a:57:16:
                    6c:6a:b0:aa:24:d9:a5:bf:c2:93:47:da:0b:85:f1:
                    34:f4:94:6b:61:2d:b2:19:8c:b0:d6:93:54:85:b2:
                    bc:33:7d:29:6e:8f:f7:89:25:62:9c:8f:eb:df:f1:
                    fe:00:d7:a3:9a:88:be:02:9f:ca:32:07:b7:4a:e9:
                    03:0e:84:06:9f:71:8b:4b:74:6b:a1:02:56:c4:e5:
                    0b:77:54:44:c1:4f:82:bd:78:95:b3:1b:09:cb:d3:
                    91:73:0e:74:1f:99:37:e8:89:89:9b:c2:5b:6c:95:
                    18:a5:fd:35:32:09:1f:c7:1b:20:45:c4:77:e2:0f:
                    c9:ef:24:45:33:1d:fe:94:81:b1:d0:97:4b:de:67:
                    26:31:9d:6b:2f:dd:b0:25:dc:c0:cb:21:4b:92:06:
                    40:28:d1:fd:cf:9f:81:c0:d7:d5:aa:37:bc:50:0c:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:0F:0F:D5:86:0B:B5:AB:9C:0B:5C:3B:F9:F4:54:B6:14:EF:68
            X509v3 Authority Key Identifier:
                keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e4:1d:78:09:97:b7:56:11:65:ec:af:db:8c:88:9d:5a:fc:
         c4:41:68:07:fa:bf:95:30:30:60:9a:ac:1b:85:fc:16:58:ea:
         74:93:0f:e2:40:58:3e:52:0f:ce:de:1f:cd:f9:10:3c:2f:28:
         71:42:1b:ba:d6:ed:ee:d3:86:a9:89:2a:5b:32:74:bc:de:51:
         9f:9b:e9:46:e1:fc:81:dd:33:84:e5:66:82:a0:f9:08:c6:80:
         aa:e3:e5:bd:c9:7b:49:4f:27:35:67:4e:c2:fe:2d:87:bc:f6:
         3e:ce:39:b6:f4:a6:eb:d2:67:ae:0b:35:f3:ac:32:6f:6f:53:
         63:d1:45:c7:cb:03:89:ae:9b:bf:00:cd:2e:01:ad:0d:c3:89:
         c5:fe:78:04:8c:0d:04:13:49:06:a2:32:80:a3:06:f1:b1:e8:
         fb:82:53:af:51:db:db:ee:24:36:0f:2b:66:a5:65:4d:8d:46:
         85:a2:90:61:18:64:e9:b6:c9:13:ee:6d:96:a7:fb:05:f9:43:
         1f:3e:c7:34:fc:dc:fc:f4:f8:fc:07:20:91:6e:6f:a6:71:6c:
         dc:4e:25:a4:2e:7f:76:92:20:55:59:79:5a:dd:fc:60:69:0d:
         85:21:4d:75:3b:5a:0d:54:46:14:19:0f:43:3e:a5:67:c1:b8:
         c3:2c:32:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFO41BjYZEu9NEGLB+q7+wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2Q1YWRiMWQwNjQzNjliN2U0MWJhZWJkYjBlOGUxMzVk
NjU3NjMwHhcNMjYxMDE4MTIwMTIyWhcNMjYxMDE5MTIwMTIyWjAzMTEwLwYDVQQD
Eyg3ODUzMGYwZmQ1ODYwYmI1YWI5YzBiNWMzYmY5ZjQ1NGI2MTRlZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UdHraCHDLdpAeYjxEjccg3R/Qr8
rGj4dOdL7yVmnFuUnJwCqW1y8kVrCHs9X4zOEfayofs+9tWYniwpGiK2YWQ4S3YV
fBBcSsEGMQqjhXpLZ6qbTL46VxZsarCqJNmlv8KTR9oLhfE09JRrYS2yGYyw1pNU
hbK8M30pbo/3iSVinI/r3/H+ANejmoi+Ap/KMge3SukDDoQGn3GLS3RroQJWxOUL
d1REwU+CvXiVsxsJy9ORcw50H5k36ImJm8JbbJUYpf01MgkfxxsgRcR34g/J7yRF
Mx3+lIGx0JdL3mcmMZ1rL92wJdzAyyFLkgZAKNH9z5+BwNfVqje8UAyx9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhTDw/Vhgu1q5wLXDv59FS2FO9oMB8GA1UdIwQY
MBaAFC49WtsdBkNpt+Qbrr2w6OE11ldjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMt
YmViZjQyZmJlODQ2LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMtYmViZjQyZmJlODQ2
LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuQdeAmX
t1YRZeyv24yInVr8xEFoB/q/lTAwYJqsG4X8FljqdJMP4kBYPlIPzt4fzfkQPC8o
cUIbutbt7tOGqYkqWzJ0vN5Rn5vpRuH8gd0zhOVmgqD5CMaAquPlvcl7SU8nNWdO
wv4th7z2Ps45tvSm69Jnrgs186wyb29TY9FFx8sDia6bvwDNLgGtDcOJxf54BIwN
BBNJBqIygKMG8bHo+4JTr1Hb2+4kNg8rZqVlTY1GhaKQYRhk6bbJE+5tlqf7BflD
Hz7HNPzc/PT4/AcgkW5vpnFs3E4lpC5/dpIgVVl5Wt38YGkNhSFNdTtaDVRGFBkP
Qz6lZ8G4wywyqA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:01:32 2026 by rpki-client