Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File:                     lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier:          9/Td3cBQRaM6A7xggslPf5uLKMFaTBDHCYRq7HvaQ1U=
Subject key identifier:   F0:61:90:3B:B0:1C:38:F6:BF:23:05:D9:15:1D:11:C2:15:A1:84:15
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer:       /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial:       01A16C1151A1D0CF6BE40AF229FAEF2ECD81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number:          1655
Signing time:             Sat 24 Oct 2026 04:00:36 +0000
Manifest this update:     Sat 24 Oct 2026 04:00:36 +0000
Manifest next update:     Sun 25 Oct 2026 04:00:36 +0000
Files and hashes:         1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=)
                          2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: etBdJaZ7p+mi+X+7DTS/k703v+plM+Qp7w/2b72lMQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:11:51:a1:d0:cf:6b:e4:0a:f2:29:fa:ef:2e:cd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
        Validity
            Not Before: Oct 24 04:00:36 2026 GMT
            Not After : Oct 25 04:00:36 2026 GMT
        Subject: CN=f061903bb01c38f6bf2305d9151d11c215a18415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:55:22:f7:05:e3:8c:4a:6c:77:77:8d:a6:
                    d2:3f:83:9f:09:5f:d2:32:30:55:ff:44:9c:79:0e:
                    45:03:51:7b:49:e6:8b:83:7f:85:73:66:22:0c:77:
                    f0:c4:6c:d8:29:da:38:1b:5a:8f:e7:f3:97:0c:6d:
                    3c:8e:20:32:70:69:f3:7a:70:47:be:c2:0f:5d:7c:
                    13:0d:86:48:06:50:ff:49:53:b9:69:bb:ce:08:43:
                    84:81:34:e5:14:ce:67:1e:54:58:c8:fc:b5:d7:1b:
                    7d:74:6c:9f:3e:f5:27:f2:81:f2:fb:11:29:06:2f:
                    36:27:83:41:26:ad:b2:e0:b1:94:55:96:e8:bf:ea:
                    83:10:6f:6b:f3:40:69:6a:08:80:5e:17:75:45:15:
                    31:2b:1e:c7:9a:b1:45:ad:48:53:41:da:1b:9b:12:
                    24:06:85:20:24:ed:cb:b0:ef:cf:b4:76:f6:42:66:
                    cc:35:8d:ee:78:11:33:b2:bc:f5:70:5f:00:da:f3:
                    03:3b:f8:c3:0d:49:ca:f7:4c:84:d2:12:a6:ca:7c:
                    f8:53:83:41:57:d3:2d:46:19:c0:3e:0f:3a:01:d7:
                    13:6f:1a:cd:a7:5a:c8:49:ff:04:9d:01:f5:40:a2:
                    23:c9:ab:13:a5:0b:86:51:a2:53:24:67:21:a3:a8:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:61:90:3B:B0:1C:38:F6:BF:23:05:D9:15:1D:11:C2:15:A1:84:15
            X509v3 Authority Key Identifier:
                keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:3b:74:17:55:82:e4:e8:d3:04:4d:18:bc:b0:9e:9c:ef:
         72:52:f9:ab:99:6a:94:26:fc:d5:06:1b:e6:c7:cf:b9:6b:65:
         b9:5a:74:aa:9f:a5:8e:db:6a:d5:55:56:ae:52:b0:3a:f0:8f:
         8b:36:f2:be:57:2b:d6:1f:ad:c8:e7:0a:5b:c8:f1:de:4a:bd:
         b4:2c:35:4c:1e:ed:42:ed:5d:9e:f9:15:2a:40:b2:38:87:26:
         1e:bb:c9:77:fc:15:e1:67:ab:7e:ed:fd:ab:6b:92:93:2d:ac:
         e4:49:06:72:39:35:20:75:00:c6:0e:e0:ef:fb:77:ca:ff:33:
         99:80:93:ce:91:18:e2:51:ce:e2:3b:60:88:19:3b:f7:2e:b2:
         31:48:f4:2e:8b:f9:c5:25:ca:c5:7d:3b:40:98:a5:98:5a:a6:
         a4:ba:46:9f:0c:a2:c4:4e:b7:13:39:23:f3:b8:67:90:f0:2a:
         00:39:3e:34:6d:88:d2:52:32:a2:c5:39:6f:30:39:d3:fb:91:
         d9:27:2e:6b:e9:e3:f6:b5:be:73:42:9e:62:e1:04:53:28:c5:
         04:30:3c:72:1c:7e:c9:56:40:bc:50:f8:50:42:8e:25:8d:35:
         7d:83:f6:a0:ab:35:b4:1c:42:b1:49:09:59:74:1c:de:4e:6e:
         50:cd:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:37 2026 by rpki-client