Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          1jXW5EzRNuOnuCNo6A/ccOwW4Ixor4q4xaSfzYrM+M8=
Subject key identifier:   B9:46:79:8E:C1:20:58:3E:DC:6C:02:26:45:0D:4B:45:EE:B6:F9:27
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       01A0EF2FE1DF28ED8C0EA07C3AF3C1BDB9F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          192B
Signing time:             Tue 29 Sep 2026 22:01:27 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:27 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:27 +0000
Files and hashes:         1: ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa (hash: SCP22drV5yjMaMO6Qyzik8RwzK7qK47hYUDCwnDNJ2I=)
                          2: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: NmmLICD8QOsp1HoF1lLTwJ5L3ps+2ntfluOavItugnU=)
                          3: XHs1m3SRKcYSslJybhJTMzxM9-c.roa (hash: A0erFAS1Db0vVamA672kEgwbEmWDzDENo+wHPI/ufmU=)
                          4: g2QaSslIEgo7FZj53UBiSTtFk-4.roa (hash: 6A+YhHwe2IJ834GJkC/1/7bS6gTkAl2WRDOeCCEHr98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:2f:e1:df:28:ed:8c:0e:a0:7c:3a:f3:c1:bd:b9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Sep 29 22:01:27 2026 GMT
            Not After : Sep 30 22:01:27 2026 GMT
        Subject: CN=b946798ec120583edc6c0226450d4b45eeb6f927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:55:21:bb:4b:88:22:8a:7c:1c:eb:7f:db:
                    bd:5c:1b:ac:32:98:df:0d:de:0a:20:c9:e6:dd:1b:
                    ee:8c:c7:80:c2:8d:25:cc:ad:a5:05:55:a3:bb:3b:
                    a3:3a:8c:a4:2a:c0:db:0f:b0:b8:f9:cf:b9:dd:8c:
                    db:64:8b:e7:1f:71:e9:fc:86:2b:85:f6:87:8a:68:
                    ab:53:71:f1:18:9c:1f:1f:f3:5f:46:3c:d0:3d:3b:
                    90:18:da:0b:0e:d0:ea:8f:52:16:c4:97:75:9a:66:
                    94:6d:0e:52:b4:c8:7d:8b:38:47:69:d8:c0:82:54:
                    5c:55:9f:a6:b7:88:71:c1:76:57:33:af:12:b9:0f:
                    f8:c1:c9:50:2c:7f:33:c5:55:12:e1:e2:8f:35:03:
                    59:dd:1f:2d:e5:7a:39:02:39:1b:c6:e9:1f:b8:eb:
                    2d:35:6c:09:c6:24:b8:b8:e7:f8:16:fe:ee:10:14:
                    d5:65:03:eb:94:6c:0c:3a:b3:cd:05:31:2f:57:9b:
                    2b:ce:db:ed:df:ad:4b:5d:19:c5:3c:27:c9:01:fb:
                    53:67:4d:c0:58:da:5a:06:93:d6:ac:26:f1:a1:48:
                    28:80:1a:0b:8a:6b:3b:9b:59:da:5e:2e:f7:a1:50:
                    fc:aa:01:fa:e2:5f:4a:4c:4d:72:a1:7a:48:3a:27:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:79:8E:C1:20:58:3E:DC:6C:02:26:45:0D:4B:45:EE:B6:F9:27
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:77:61:e6:94:bf:28:80:50:93:21:3a:53:11:83:1c:66:a0:
         ea:98:eb:d9:a4:c8:e3:31:f9:56:d1:4f:42:77:66:40:30:89:
         06:63:13:91:df:ed:b8:8e:59:38:2b:ee:2f:06:78:1c:18:06:
         a2:8a:67:a8:2d:87:8c:57:03:a3:d9:dc:42:95:1e:67:2f:dd:
         49:63:3d:57:42:12:f1:72:8a:9f:3a:11:90:0f:a2:12:d4:33:
         88:eb:90:c1:ed:21:c4:97:13:cb:bb:2e:54:5e:32:b1:b2:33:
         b8:75:88:55:40:b1:7f:26:07:b8:c9:eb:b4:88:58:0b:16:c7:
         7b:c1:20:ff:b7:1d:2b:b2:08:95:32:92:ff:91:e9:f8:a4:28:
         62:47:7b:c5:c8:bd:9f:ed:52:43:fe:54:0c:d9:ca:90:55:8a:
         e3:42:4f:3f:fc:a1:75:2f:9e:a1:e3:7e:62:3d:9a:a8:15:07:
         bf:96:39:c5:4f:0d:e7:93:ef:93:a6:6e:04:7d:36:5d:ad:20:
         13:8f:69:b2:1c:47:4e:bb:c1:5f:51:3f:0d:24:a2:35:0e:d0:
         06:2b:20:cf:21:39:7a:4e:ba:2e:74:40:c4:68:2f:44:e7:5e:
         58:57:7b:3d:c7:b5:37:e3:78:77:69:bd:43:f5:36:23:ad:0a:
         99:3c:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:34:35 2026 by rpki-client