Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File:                     LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier:          fuvM/k6Zsk0dHftTaCkIe2LbQnc0cK12g1isKXC65bM=
Subject key identifier:   23:B1:4B:23:8D:B9:C9:C5:DF:73:E9:BD:E8:FB:84:3D:38:0B:B1:BE
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer:       /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial:       01A0B508A7D786255E49C979D28CE97FB1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number:          19EF
Signing time:             Fri 18 Sep 2026 15:00:38 +0000
Manifest this update:     Fri 18 Sep 2026 15:00:38 +0000
Manifest next update:     Sat 19 Sep 2026 15:00:38 +0000
Files and hashes:         1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
                          2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: XTwE8uxyG+lA3XnwbJtqmbRIJO4/9vpZ0pADKspsqyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:08:a7:d7:86:25:5e:49:c9:79:d2:8c:e9:7f:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
        Validity
            Not Before: Sep 18 15:00:38 2026 GMT
            Not After : Sep 19 15:00:38 2026 GMT
        Subject: CN=23b14b238db9c9c5df73e9bde8fb843d380bb1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:4f:c4:46:5f:04:75:b0:2d:d3:3e:8a:27:
                    e9:a6:8c:2d:aa:46:b5:c3:81:3d:ab:a2:e3:07:db:
                    e9:e2:e6:d0:1f:6b:c6:54:6d:fb:f9:ac:f1:1f:e3:
                    c9:9b:95:f8:f2:67:72:a1:88:cf:14:92:c4:f3:b7:
                    b0:c8:77:28:e9:0c:72:54:51:20:f7:c7:05:c7:84:
                    4e:51:f4:39:87:79:ef:82:11:96:23:07:4a:64:73:
                    82:44:fc:61:26:32:e3:74:3c:4d:50:b5:6e:9b:59:
                    cf:23:1d:64:86:88:dd:7e:c0:54:7c:19:42:57:e8:
                    cc:4a:26:d5:97:c8:e8:8b:6e:f4:60:35:7c:5e:4f:
                    c6:15:74:b7:d8:d2:83:11:52:c2:bc:4a:78:e5:ef:
                    8a:df:19:3a:79:45:b3:64:84:d8:31:08:84:ba:66:
                    b4:99:bf:db:32:79:d7:6f:67:47:e7:e1:5d:e0:31:
                    d3:18:e2:c3:8a:20:40:db:c0:15:cc:b1:29:af:b9:
                    fe:ac:1a:71:71:be:cd:74:31:b5:29:f3:af:09:21:
                    59:e1:4c:97:36:3f:59:aa:62:44:0a:ff:f1:ce:94:
                    68:f1:75:f8:4a:1c:28:6c:2f:ac:64:d5:6b:14:16:
                    54:3d:3f:0f:24:6d:b9:9a:4a:0f:e5:b7:8d:c7:bf:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B1:4B:23:8D:B9:C9:C5:DF:73:E9:BD:E8:FB:84:3D:38:0B:B1:BE
            X509v3 Authority Key Identifier:
                keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:28:07:b1:9f:54:50:9e:ec:87:fa:23:d4:72:74:85:4a:
         ba:33:f8:d1:6a:9e:a2:42:0f:6d:90:5a:63:b2:44:ed:67:c8:
         ae:cb:ba:07:6f:d3:e0:f9:bf:34:54:1a:2e:11:38:5c:29:01:
         82:c8:9a:aa:99:c0:47:85:8c:bc:aa:42:1b:00:00:ab:9e:71:
         a8:99:65:f0:17:68:b4:1a:b2:b2:3f:92:a5:bf:e1:21:0b:ab:
         d0:a1:78:2f:0c:24:29:02:a2:9a:a5:d5:61:17:89:0e:db:af:
         0d:16:41:71:6a:c4:56:20:a3:84:15:a9:9e:63:a1:d0:bc:90:
         d3:bd:67:1b:b2:8d:b0:11:79:36:6d:5a:5f:09:69:29:20:79:
         54:74:35:0a:82:63:26:d4:e5:76:b7:ed:50:45:a3:df:18:29:
         cc:bc:2b:57:26:fa:31:6f:0e:7e:09:7c:e6:d2:a7:62:a9:4e:
         a8:ff:07:c6:50:ba:08:a7:a1:2a:40:62:76:23:f0:85:23:c7:
         f5:89:91:14:4e:50:aa:32:7a:b4:c0:d2:2f:5b:b5:fe:dd:42:
         5b:7b:4c:80:ed:1a:1b:e8:11:b8:1c:bf:b6:52:5a:50:64:f7:
         98:ad:40:3a:53:97:f2:bd:8f:8f:79:11:f1:79:22:02:5b:f3:
         8f:7e:0e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:59:18 2026 by rpki-client