Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          CgnO9VTyfEM1V/i97unVQOGwLprqhgDi7GIMj51na2c=
Subject key identifier:   4F:0A:01:59:39:D0:88:C9:75:56:27:3C:23:DD:5E:3D:05:BB:6A:CE
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       01A0D4943A213BA71367CB255B9B001EBD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1A80
Signing time:             Thu 24 Sep 2026 18:01:18 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:18 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:18 +0000
Files and hashes:         1: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (hash: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M=)
                          2: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: nMkEcqbU6cVUMPkeJTACGZFZPDtsqicreXWUZgvVzjA=)
                          3: MtlNPbOiQrDPq9JzI5yqmhqIeu0.roa (hash: jVaCEGYVnh9jmEuUNesf3uuQIlhN1CzzAG7BWnlcSmA=)
                          4: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (hash: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ=)
                          5: _tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa (hash: sG2gr2VibfwBBWqITc4yDuS8f9cCBW1DEngPZoKQfNg=)
                          6: gGIqjOk7g2PlsS-LqhKTvWucpIY.roa (hash: W502vrehV9CtMQIyWcS05BwV8XiwYtXO1sMXV5IcC2E=)
                          7: q4XekdpB8TJEjFPDt8ccc_PZPoY.roa (hash: PjKWv/0KNDEM4pTyCe/55FuN+l88tsgTGIft6oTHhlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:3a:21:3b:a7:13:67:cb:25:5b:9b:00:1e:bd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Sep 24 18:01:18 2026 GMT
            Not After : Sep 25 18:01:18 2026 GMT
        Subject: CN=4f0a015939d088c97556273c23dd5e3d05bb6ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:13:9f:c1:1d:da:80:56:cf:85:d1:2f:48:
                    f3:f8:20:45:af:35:35:83:44:17:f1:2a:ae:26:b7:
                    57:88:11:6c:41:50:60:d5:f5:de:46:e9:7d:8f:93:
                    80:49:81:cb:bf:9d:ea:be:6e:5b:e4:53:d0:85:a1:
                    fa:b6:73:42:2c:74:a3:a4:8e:fd:cd:4c:8d:ab:1f:
                    ff:66:d2:d3:69:9b:21:90:e3:ef:a4:c8:bd:86:90:
                    85:f8:42:06:bd:64:a2:67:6d:41:9c:d1:fb:e5:a8:
                    8b:a5:7f:fc:14:9e:91:92:40:50:11:38:b7:b8:cb:
                    dc:49:5c:d0:c5:01:80:69:c2:7a:15:92:c9:e5:ff:
                    db:75:4b:f1:55:52:9b:83:d7:62:5c:3f:6b:a6:01:
                    3e:92:1e:fe:a7:2b:ea:15:5e:be:52:7b:ec:e8:01:
                    4d:08:b6:3b:77:23:05:0d:d1:e5:5c:2e:ff:e3:cb:
                    de:f2:bf:f0:36:e9:32:9d:ee:ec:41:8e:57:c7:f1:
                    a6:15:1e:6c:5f:c2:fc:56:e4:48:c6:79:1f:33:7f:
                    ca:7a:ea:57:4b:a0:fb:4d:d1:57:d5:6d:59:44:83:
                    09:be:ae:fb:10:19:bc:99:42:c3:f4:51:fb:d4:16:
                    a0:a9:df:fc:ec:cf:23:63:1e:4c:40:4e:6a:f8:cd:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:01:59:39:D0:88:C9:75:56:27:3C:23:DD:5E:3D:05:BB:6A:CE
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8e:60:a4:43:e2:32:c5:50:f6:bd:c5:0b:32:f8:33:aa:2d:
         58:5f:f8:a4:5d:1a:63:77:fc:f3:f1:78:ae:08:14:68:02:a4:
         30:34:5d:fe:e4:3d:1d:5e:43:6d:3a:f9:2b:ff:63:aa:fd:39:
         0e:ab:25:a0:22:6f:89:5c:4b:7d:e8:ea:36:b9:fe:a0:17:1e:
         88:d5:be:cc:c4:d4:1c:fc:20:9f:e2:a7:6e:79:2b:23:ba:6b:
         48:e1:3e:74:98:4d:fb:f2:b9:ae:85:29:8c:3a:d6:6c:24:8f:
         3b:16:a2:de:19:f3:46:d0:78:38:cd:d0:b0:77:d9:30:62:6f:
         28:cd:cc:cf:64:72:6d:a5:69:54:12:52:5e:d5:36:7d:e9:af:
         4a:6c:c9:14:0e:c9:96:77:c7:a7:ab:b3:62:75:21:d8:89:57:
         17:00:d8:14:30:f7:17:28:09:0a:ca:2d:d1:24:84:1e:3f:7c:
         8b:31:87:20:d3:6a:9d:c9:aa:c7:c4:1f:bf:cd:c6:92:4d:5d:
         f6:84:15:96:9b:b9:1b:0f:9f:dd:2a:a7:2c:4f:d0:f3:79:44:
         0a:94:a0:39:3d:9a:11:a9:43:97:25:0c:ec:03:f8:b2:f4:a6:
         c4:a6:a0:9c:61:58:fb:cb:85:16:66:33:b9:40:7b:0c:f8:58:
         a4:52:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:56:42 2026 by rpki-client