Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          mKm9exUlZLCzF5QqOVGw/+Km2xJgpgeg5+kTToM7kn0=
Subject key identifier:   DF:56:29:9C:54:17:70:36:FF:81:3B:65:71:07:47:FD:54:C9:4B:49
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       01A0D9841511F58215B7C3366D9CF7EA9DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          1AC6
Signing time:             Fri 25 Sep 2026 17:01:46 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:46 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:46 +0000
Files and hashes:         1: 0h-gynlt37_ccfmJ3_-3V9IsODo.roa (hash: lhk56T89fsYDt9b3bZzoR43znTFjvZYbijTV/1C9Si0=)
                          2: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          3: DNixYNCfOx-3pVzNrpIjVDu3-bM.roa (hash: 8RDkaqODnshrgOrJsbzCFmxnXNivbhGSmZclcOklkTM=)
                          4: DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa (hash: uYInFYzDeRAdWcAcrc9tbS0qrMrDwJVw7F9l4//iM4o=)
                          5: ETkKagkgQjnGBNgqOyAmTkHn0P4.roa (hash: 6KoIwag+dQ/SFaGrb0LDubj89Z8MHJmf6ejIXexoZAM=)
                          6: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          7: GgJTJx_b5aOrjfbC7HKHi62LrcY.roa (hash: PnUpyulLa8GGkQy4mSxl7aVOPLy8nEhjtw1K51C+1bI=)
                          8: Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa (hash: TU3oVPvyWOIEJstN9ZVVdTsiXgUUc4Vlg6zQUCF02SE=)
                          9: LBUexS1wq8AOyPYNOmyKpXx9zNs.roa (hash: nF2TOFtPqERUujfrIj1cE2WTysCpGfddroPkP+wf4gg=)
                          10: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          11: Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa (hash: v3/IENdSa8OyjnUENK4zTVbFIGnNSEC4jJo2ZT+P0fw=)
                          12: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          13: Xwtva-5JS24pgtPa6RiyB6jgWs8.roa (hash: 4crKYMPlObMDOjEeTCvMoGko6l7Xz46lTNJ2hPww31s=)
                          14: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          15: dYKy0V0V-kDfDOZR4gtFzNeiaww.roa (hash: ECNi8rSbsFUBmyj3614uPGhFINVbMd3PxyWgQRCiork=)
                          16: gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa (hash: e17L5xzP7AyerioqF9cvfemAnnXUxd+u4XnsDKjQioc=)
                          17: kb6gSfM5mGHVL2sldaFxnmKjhg0.roa (hash: M9+8l6+F24TF6oMlUeKq+hsgUYqqlaAwBaPlCZF5HRE=)
                          18: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: CQAKwCijK2wEOYmpnJK9B4uqGaphXB9GQAxzfv04I34=)
                          19: nwblp8j45JxKR4DziERGe--4qw4.roa (hash: KXUbXAoyGwmjgDKgVdVwzHhR+nJna06EKg7sAYzyOmE=)
                          20: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          21: tO4CEoSB6kxpv7bhTHEnpWackIc.roa (hash: FEK2OPgPfqRTSL5u/YZmiQXmpGK2M6+AWhKFOM6G6As=)
                          22: x2QeoV9YjEnvngKa8MC3rROtI0s.roa (hash: TLUO3bCDce91dJPd3p+jeNSpDA+KWUjSTGFeGUMfFFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:84:15:11:f5:82:15:b7:c3:36:6d:9c:f7:ea:9d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Sep 25 17:01:46 2026 GMT
            Not After : Sep 26 17:01:46 2026 GMT
        Subject: CN=df56299c54177036ff813b65710747fd54c94b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:cb:81:39:15:a3:b3:77:34:46:21:60:c3:
                    57:d2:3d:ca:3f:b0:86:d3:85:eb:26:58:0e:04:ba:
                    f7:2c:f3:da:8d:9a:9f:62:e5:2b:58:8a:7b:fc:d2:
                    a8:85:ff:26:1b:3b:0d:eb:94:85:a1:e8:56:b4:36:
                    f7:d8:4c:1d:2d:d6:c3:ee:80:83:fa:d4:f4:b4:ab:
                    90:65:b8:85:12:c1:45:95:19:bb:fe:c2:13:f8:e4:
                    1c:b4:d7:4a:70:21:33:8d:0b:fc:16:7a:76:bc:5c:
                    ea:36:3d:43:f5:3a:3b:5c:2a:a6:8a:f0:6a:0f:65:
                    cc:00:b3:e7:a3:57:60:2e:27:54:c9:12:4f:b8:79:
                    28:da:c1:3b:73:8b:4f:4c:1e:76:1c:e9:24:96:8f:
                    33:7f:b7:f8:9c:b2:9c:ee:0e:97:6a:4d:b0:57:a2:
                    5c:e3:86:cd:2b:0d:88:14:89:ec:8b:ba:8b:79:25:
                    2f:32:b3:57:e1:b8:9d:c3:07:c0:e1:a1:62:0e:09:
                    31:53:2e:4d:4a:50:c4:6e:4c:49:b0:9e:9b:8a:81:
                    39:e0:25:f0:fb:bf:d1:e7:47:9a:f1:4c:ad:f5:09:
                    d8:be:f9:d4:41:39:1f:04:d9:ef:0e:31:30:80:04:
                    ed:4d:75:6c:8e:a1:07:02:1b:3d:47:a7:c2:30:72:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:56:29:9C:54:17:70:36:FF:81:3B:65:71:07:47:FD:54:C9:4B:49
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:32:e1:f0:76:b9:f0:5c:1d:c5:03:92:0c:43:14:82:1c:f4:
         6c:bc:ca:c1:6f:59:6c:7a:ae:6b:39:b0:e9:d5:bf:1d:3f:11:
         56:98:b4:b8:20:71:76:9e:89:16:74:5e:95:8e:ba:76:6f:3d:
         4d:bc:ee:c6:35:c0:b9:79:07:e7:7c:e4:f6:bd:93:28:19:9f:
         63:fe:74:67:2a:26:e0:b5:eb:61:7b:18:8f:2c:5f:be:47:49:
         69:2b:c2:14:fd:f7:ec:00:17:1c:ae:49:4f:24:29:d3:45:e1:
         78:85:a1:61:1d:25:cf:61:01:cf:67:7b:a6:3f:84:1c:72:d7:
         eb:3e:d9:60:9d:17:41:48:e8:d1:9a:20:18:a3:01:ee:30:04:
         9e:21:45:b8:24:89:cc:e0:ae:22:e6:ad:b7:c7:5f:e2:a3:c0:
         20:57:14:d7:50:2e:55:97:b0:a9:2d:90:1a:7c:6a:5d:86:39:
         09:24:76:7e:89:28:3f:bd:29:31:05:9e:01:94:bd:f2:d8:c8:
         bc:eb:93:8e:72:01:3d:e2:79:ea:6d:28:f1:4c:bf:f4:c1:82:
         08:22:13:2e:2c:5a:75:9e:58:c0:30:9b:72:ec:38:a8:35:22:
         3f:78:09:dc:a3:0b:a7:05:4e:95:c3:d6:f1:b7:b3:ea:72:14:
         40:f2:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:34:00 2026 by rpki-client