Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          h8QB6zx3DRm05IAuVlQrO0l61IN0JtBlhzdSkkT7Ie0=
Subject key identifier:   DF:DA:21:0A:E7:F4:43:B9:E5:94:9A:39:B2:F4:A2:47:64:AA:0B:72
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       01A0D124518E45B445A20ED112D345C7B8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 02:00:13 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:13 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:13 +0000
Files and hashes:         1: 84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa (hash: rNTsCrnkBSEotffzabMsfyCIf6z9oVHssU96RenS0Ts=)
                          2: LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa (hash: ok1BqU/j817hL0rg14Y5eXLHkWWn2Jj6wQeonBm4dcs=)
                          3: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: uQ+G2n5AM04aZ41CX/a3JVCyI2mvXy2/qD9uD0todPc=)
                          4: MBwRKSHfxRIenZ6VTtp6s77mU-g.roa (hash: ZUftLriouLT0rVggX9Wl5+VKJOkkEmSY4zXobVbg1VA=)
                          5: XIo_9-qFy5wjas20w7MdEaNT8T8.roa (hash: mjSD46sU4dPzZBYqQEdjYI8aGEpVPeI7VUJMRwMVNGY=)
                          6: aZBPshcpYuW3uiPNklELJKpWxB0.roa (hash: FDs/jppjg3SFmpeDxF8pcdK8smBMdmkqoES9cLDqS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:51:8e:45:b4:45:a2:0e:d1:12:d3:45:c7:b8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Sep 24 02:00:13 2026 GMT
            Not After : Sep 25 02:00:13 2026 GMT
        Subject: CN=dfda210ae7f443b9e5949a39b2f4a24764aa0b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:c3:eb:c0:d1:a1:9c:bb:89:dc:7b:d9:67:
                    fe:d9:dd:9a:93:5f:86:6d:94:dd:a2:cd:a5:d3:ba:
                    78:53:a4:1c:10:d7:52:65:b1:74:11:b9:d0:df:1d:
                    13:68:cb:b4:60:d3:de:c3:56:f7:d1:e7:5d:de:7b:
                    2b:56:a7:79:77:85:09:09:97:63:b2:a9:fd:52:45:
                    46:b4:ad:9f:13:a2:a3:be:b5:eb:00:ce:7b:8c:62:
                    7f:5d:5f:ba:08:9e:cd:b2:15:a3:16:8d:70:62:13:
                    2d:65:25:34:45:c9:6e:35:5a:6b:23:c1:b3:c3:6d:
                    73:02:47:ff:d0:2c:ad:b4:33:fc:1b:4c:f8:c2:51:
                    4a:f3:ed:d5:84:f5:69:b6:f0:b7:f2:d4:35:87:7f:
                    63:ee:0a:f1:79:5c:53:39:b2:d5:ee:80:1c:bc:9e:
                    9b:a8:69:36:77:69:cd:db:83:64:5c:a2:5c:86:e7:
                    fd:a1:75:46:a6:53:6d:65:c6:93:ad:96:ec:a5:73:
                    21:1d:c2:37:ff:9b:d5:45:46:49:7a:51:ca:da:66:
                    14:e4:64:bc:0f:11:a3:66:06:0e:0e:f8:9d:0d:fd:
                    3c:76:d4:c5:64:84:3e:08:f3:84:7a:41:a2:00:0d:
                    3a:5c:b8:32:57:34:7f:fc:b3:80:55:31:da:7d:3c:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:21:0A:E7:F4:43:B9:E5:94:9A:39:B2:F4:A2:47:64:AA:0B:72
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:8e:fe:80:65:f1:90:3d:d0:20:cf:f5:f8:ff:99:63:2e:
         90:66:a8:dd:27:f4:0b:b6:7c:01:fc:f9:89:25:68:95:8e:b0:
         af:55:2d:34:bd:c7:d0:31:96:0e:69:12:ef:12:64:66:e8:93:
         a7:1a:96:52:3d:c8:02:a9:81:cd:8b:7a:d9:6f:e1:29:24:af:
         9e:f9:45:e0:3c:d1:4e:5b:e9:86:52:01:b4:af:5b:b7:a2:21:
         71:9b:ff:2c:d1:d2:2a:b8:1f:e3:c5:53:51:76:97:65:98:33:
         66:fc:1e:be:6a:e6:53:da:2c:83:9a:9d:63:12:6c:1d:92:58:
         22:ce:90:d1:0c:24:d8:93:13:8d:13:39:2d:eb:42:b6:92:50:
         82:f1:a8:2f:c0:ac:ba:bd:01:e5:ed:b8:a4:8d:af:a7:2d:4a:
         e9:6b:ea:72:9f:36:12:bf:41:31:c5:f0:3f:84:9e:c3:07:0c:
         08:1f:fc:fc:39:ff:62:63:4c:0a:69:a4:b7:73:cd:54:4b:ff:
         c1:f5:62:7a:41:fb:28:cb:7a:34:d0:98:20:9d:5d:ae:8e:06:
         74:8e:c2:27:c4:72:c6:43:3b:f5:e5:0d:4d:4a:a4:04:e8:5c:
         d3:26:d9:a2:36:68:cb:69:f3:36:bf:75:b7:dc:a5:93:28:a4:
         0c:a1:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:20:30 2026 by rpki-client