Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          KQrFAOG70xX50LQ7K/Ex0eRt4K7efz0K0Djh0YDLOyg=
Subject key identifier:   C9:5A:4E:FB:31:A7:74:23:26:90:B1:51:B3:E5:D4:94:AA:B4:9C:BF
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       01A0D760D8505ED34B8C6D92463357FCD8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 07:04:03 +0000
Manifest this update:     Fri 25 Sep 2026 07:04:03 +0000
Manifest next update:     Sat 26 Sep 2026 07:04:03 +0000
Files and hashes:         1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: 4T3xpupmbLHZYwhknVixOZmoGhprgpn/SSHp38QbGIk=)
                          2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
                          3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
                          4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
                          5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
                          6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
                          7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:60:d8:50:5e:d3:4b:8c:6d:92:46:33:57:fc:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Sep 25 07:04:03 2026 GMT
            Not After : Sep 26 07:04:03 2026 GMT
        Subject: CN=c95a4efb31a774232690b151b3e5d494aab49cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:e9:d3:0a:64:2d:af:9f:83:e2:f9:eb:40:
                    78:10:73:aa:97:a5:af:43:22:5b:2a:c3:19:f2:7a:
                    89:a7:2b:f6:60:b2:7f:26:f7:d2:a7:8a:8d:75:22:
                    f4:d1:4b:c9:a2:de:75:a0:76:fa:8d:f8:da:e7:16:
                    3f:a2:7c:eb:d2:de:a6:27:72:32:f2:7f:95:db:1f:
                    b5:ca:91:b6:34:1f:5b:52:c6:04:89:05:ed:a7:b2:
                    cc:c2:c8:13:26:da:9b:02:03:b8:e2:29:d8:b7:03:
                    71:a5:3d:45:0f:92:81:3b:1f:98:a6:f2:7f:4f:88:
                    83:b9:04:54:16:cc:d5:f1:21:97:b2:11:a5:03:d6:
                    cb:16:0a:85:c7:fb:41:2c:ad:9b:29:4f:0d:ca:43:
                    8b:f3:b2:cf:49:ae:ab:a0:85:30:f8:72:18:de:6d:
                    1d:7c:eb:2a:03:6b:49:34:b5:3a:80:28:93:e5:ca:
                    56:8d:23:65:62:4d:f4:b6:77:d4:5d:54:b0:a4:12:
                    47:b0:28:68:a9:12:19:30:ac:01:2b:b7:3e:46:be:
                    75:41:fd:78:69:e9:ba:8b:1e:52:d6:1b:bc:ae:86:
                    a7:b1:ff:c3:a5:29:60:eb:e4:8d:ed:e6:6b:8c:2d:
                    2a:c5:d6:cb:1c:3e:aa:31:95:e5:22:66:55:d0:2d:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5A:4E:FB:31:A7:74:23:26:90:B1:51:B3:E5:D4:94:AA:B4:9C:BF
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f7:bb:c3:1b:71:32:91:b3:c6:e0:72:db:99:f7:6a:c2:b0:
         ff:b8:4e:2d:5c:c5:bd:e0:5f:8a:2a:31:6f:dd:e8:ed:07:cc:
         0f:7b:ae:cc:d9:95:27:a2:8e:cd:01:5d:86:ec:ef:ad:66:33:
         a7:5f:1a:2a:af:ad:95:6e:e3:ea:8b:e2:dd:c9:fb:9a:4d:5b:
         2b:ab:6f:5f:dd:a5:0e:e3:d9:51:66:ca:79:5d:2e:63:06:53:
         5a:75:30:ea:e3:4a:2b:58:81:80:05:2b:0e:0c:d3:8e:50:01:
         1c:ce:d2:0d:0d:2e:cd:a5:48:aa:88:50:7b:51:7c:bc:0c:6f:
         63:de:b1:c8:b4:1d:f4:de:08:a1:bf:c1:85:59:2a:ba:25:dc:
         14:12:42:3b:ad:9b:37:bd:19:ee:0b:f8:4e:fe:60:3c:dc:3a:
         94:c1:b0:94:59:e1:6d:6f:53:59:1d:48:b0:17:e6:d6:49:de:
         ff:5e:3b:2a:70:89:48:1b:7e:88:e7:6b:4f:42:36:54:4c:92:
         3a:f0:96:c9:6c:38:54:78:a7:20:5a:19:9e:d1:57:bc:cc:85:
         0c:5c:a9:fa:2c:ed:e6:05:b4:2d:db:45:6b:06:3a:c4:1e:e2:
         6c:87:d6:fe:2d:e1:e0:0e:2d:a6:d2:10:c6:0a:5e:b7:03:8e:
         77:ae:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:22:39 2026 by rpki-client