Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File:                     lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier:          j5zC+uFV17io0tRJGlJCRzD8Ra12FRmb2S8rZ47HTHk=
Subject key identifier:   5C:E6:BE:44:18:6A:13:2B:74:69:65:A6:D5:73:17:56:86:14:19:43
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer:       /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial:       01A112602D7A906372885B37668D221F57A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number:          1A22
Signing time:             Tue 06 Oct 2026 18:00:55 +0000
Manifest this update:     Tue 06 Oct 2026 18:00:55 +0000
Manifest next update:     Wed 07 Oct 2026 18:00:55 +0000
Files and hashes:         1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
                          2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: 2EiZwtHChuMvNVl6AjDWVr7C2LdME3nYiw3YgUJ/urs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:60:2d:7a:90:63:72:88:5b:37:66:8d:22:1f:57:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
        Validity
            Not Before: Oct  6 18:00:55 2026 GMT
            Not After : Oct  7 18:00:55 2026 GMT
        Subject: CN=5ce6be44186a132b746965a6d573175686141943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:ef:29:d3:0d:fc:21:53:9d:bb:66:dd:0e:
                    b0:ae:7f:f3:f8:fd:35:c9:35:41:a8:69:68:94:f0:
                    95:19:f5:15:2e:be:69:6b:5e:e4:38:9d:88:ff:b7:
                    cd:c7:f8:aa:44:60:23:f0:09:de:3a:03:bf:91:6a:
                    a1:3d:ab:0e:b4:8a:17:41:ce:a9:ee:32:08:b8:dc:
                    11:a2:b5:84:e2:03:22:d9:65:b6:d3:7b:ab:36:56:
                    85:01:6c:e8:05:85:97:c3:08:2a:28:e5:8e:ee:67:
                    8b:3f:1c:3d:07:9f:d9:75:35:42:5c:e0:13:5c:dc:
                    51:60:a7:c6:a2:11:40:5b:c2:5f:5b:5b:2c:d1:27:
                    be:27:1b:72:46:71:97:ea:e9:7f:c7:28:ef:4d:93:
                    1a:0b:03:fd:76:bc:3c:5a:68:0d:b8:42:c7:30:29:
                    40:db:89:c8:a7:00:cf:89:3e:93:85:dd:28:c1:3b:
                    08:55:6f:b8:85:13:f3:45:a7:29:e7:74:a8:a0:84:
                    59:79:3f:02:83:63:a7:74:bb:7a:92:f0:de:4f:63:
                    5c:c9:68:70:9e:9e:b1:4f:b3:05:7e:1a:ac:08:c5:
                    ff:03:67:e3:79:8d:67:e2:96:4e:a1:55:fc:29:b0:
                    db:2e:5f:0a:70:ea:07:54:42:c2:b4:20:c7:2f:fd:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E6:BE:44:18:6A:13:2B:74:69:65:A6:D5:73:17:56:86:14:19:43
            X509v3 Authority Key Identifier:
                keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:95:48:73:4d:16:8f:af:1b:dd:31:8b:1e:a6:36:c6:e9:b8:
         ed:70:01:c1:e5:3e:e7:3f:8c:b0:11:b0:28:83:7b:d8:8e:2d:
         4a:dc:ee:32:f5:65:05:ae:b6:59:41:cc:0f:fa:96:0b:66:0c:
         67:96:93:4f:0c:9a:2e:d4:7e:38:c3:fc:a3:ad:10:08:d0:1b:
         c4:25:b7:a2:34:dd:e3:e0:64:91:2d:7b:9a:9e:01:63:14:5c:
         8b:71:5c:2b:fc:c9:51:5b:73:41:75:5d:fe:a2:c4:c2:3a:f2:
         33:02:2e:cf:07:d1:12:a6:3c:8b:b1:74:05:1c:67:70:2d:3f:
         dc:95:db:82:c7:b2:31:36:ae:84:22:02:09:6b:26:15:31:44:
         c5:1d:bd:27:91:b1:ff:11:07:38:b3:ae:12:ef:5f:c5:c3:ed:
         ef:0e:0c:5c:90:5f:fb:2b:fb:7f:02:71:30:25:68:38:94:e2:
         15:46:76:86:66:61:92:69:e6:80:ed:61:20:11:bb:22:bb:69:
         5e:fd:df:6a:c2:7b:59:28:e1:d5:c9:18:14:8a:37:67:4a:6e:
         e8:a8:01:ea:e1:8e:7c:c8:8d:74:af:77:49:ec:ca:a3:7c:76:
         54:b2:9c:1b:25:6a:e3:f2:20:51:d0:53:7e:a4:c2:c1:f6:a1:
         f9:74:24:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESYC16kGNyiFs3Zo0iH1emMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi
MTg2OGYwHhcNMjYxMDA2MTgwMDU1WhcNMjYxMDA3MTgwMDU1WjAzMTEwLwYDVQQD
Eyg1Y2U2YmU0NDE4NmExMzJiNzQ2OTY1YTZkNTczMTc1Njg2MTQxOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp/vKdMN/CFTnbtm3Q6wrn/z+P01
yTVBqGlolPCVGfUVLr5pa17kOJ2I/7fNx/iqRGAj8AneOgO/kWqhPasOtIoXQc6p
7jIIuNwRorWE4gMi2WW203urNlaFAWzoBYWXwwgqKOWO7meLPxw9B5/ZdTVCXOAT
XNxRYKfGohFAW8JfW1ss0Se+JxtyRnGX6ul/xyjvTZMaCwP9drw8WmgNuELHMClA
24nIpwDPiT6Thd0owTsIVW+4hRPzRacp53SooIRZeT8Cg2OndLt6kvDeT2NcyWhw
np6xT7MFfhqsCMX/A2fjeY1n4pZOoVX8KbDbLl8KcOoHVELCtCDHL/2n/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzmvkQYahMrdGllptVzF1aGFBlDMB8GA1UdIwQY
MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt
OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk
LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5VIc00W
j68b3TGLHqY2xum47XABweU+5z+MsBGwKIN72I4tStzuMvVlBa62WUHMD/qWC2YM
Z5aTTwyaLtR+OMP8o60QCNAbxCW3ojTd4+BkkS17mp4BYxRci3FcK/zJUVtzQXVd
/qLEwjryMwIuzwfREqY8i7F0BRxncC0/3JXbgseyMTauhCICCWsmFTFExR29J5Gx
/xEHOLOuEu9fxcPt7w4MXJBf+yv7fwJxMCVoOJTiFUZ2hmZhkmnmgO1hIBG7Irtp
Xv3fasJ7WSjh1ckYFIo3Z0pu6KgB6uGOfMiNdK93SezKo3x2VLKcGyVq4/IgUdBT
fqTCwfah+XQkCg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:17:51 2026 by rpki-client