Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          G2XlZNCgfx/mhRQ1nxjuhN2C8i2dLSG6LFSxB6VU87k=
Subject key identifier:   47:F5:F3:48:1B:FF:DB:98:00:02:6E:0F:1D:01:7E:1B:13:2A:86:0C
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       01A1DD270F987E3C4A8A44D4DE177C1CD81C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1B09
Signing time:             Sun 15 Nov 2026 03:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:26 +0000
Files and hashes:         1: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (hash: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M=)
                          2: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: 6NijsUZ059f2IA098amx3GlH0dYI0wjjrui4zKBgoy8=)
                          3: MtlNPbOiQrDPq9JzI5yqmhqIeu0.roa (hash: jVaCEGYVnh9jmEuUNesf3uuQIlhN1CzzAG7BWnlcSmA=)
                          4: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (hash: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ=)
                          5: _tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa (hash: sG2gr2VibfwBBWqITc4yDuS8f9cCBW1DEngPZoKQfNg=)
                          6: gGIqjOk7g2PlsS-LqhKTvWucpIY.roa (hash: W502vrehV9CtMQIyWcS05BwV8XiwYtXO1sMXV5IcC2E=)
                          7: q4XekdpB8TJEjFPDt8ccc_PZPoY.roa (hash: PjKWv/0KNDEM4pTyCe/55FuN+l88tsgTGIft6oTHhlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:27:0f:98:7e:3c:4a:8a:44:d4:de:17:7c:1c:d8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Nov 15 03:01:26 2026 GMT
            Not After : Nov 16 03:01:26 2026 GMT
        Subject: CN=47f5f3481bffdb9800026e0f1d017e1b132a860c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:c2:9a:fd:26:0d:39:da:e8:bb:42:e3:21:
                    71:ad:61:79:9b:0d:d1:d8:b6:b0:8e:ad:03:db:a0:
                    c9:76:00:56:8c:6c:f2:4a:81:17:cb:b6:5d:07:86:
                    21:56:5e:1a:ca:23:a9:c7:1a:e0:5e:da:78:f2:57:
                    75:40:27:3d:63:a9:cc:d6:a6:3f:c0:fc:bb:e5:3c:
                    4d:aa:83:43:96:1c:12:58:74:e9:07:2c:78:bc:dc:
                    30:39:5c:11:b3:5f:97:85:10:fa:8c:60:fe:e1:89:
                    40:28:0a:b0:62:3c:30:b5:f1:b0:df:8a:6c:14:c2:
                    4e:e7:2c:8d:65:2e:23:13:2a:2b:51:06:7a:6c:f4:
                    47:2f:81:e0:af:67:cd:d4:2d:a8:c5:d4:4b:ec:c3:
                    55:71:9d:b2:78:11:d9:a7:34:45:cc:5e:e8:e1:aa:
                    7e:74:a7:8f:1c:ab:7a:a2:de:5f:94:fd:25:c5:46:
                    5c:81:08:ba:32:de:96:7f:d4:ee:c9:b9:a4:b1:18:
                    fe:ae:ed:70:8f:22:0e:07:73:b3:0a:8b:e7:a7:46:
                    90:30:3e:1c:79:79:09:25:36:5a:5b:31:f3:4f:71:
                    5b:1e:9c:7d:2f:41:df:95:1b:80:20:78:27:f4:bd:
                    37:ad:49:9a:1e:aa:2b:f4:14:e2:ea:f6:86:94:de:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:F3:48:1B:FF:DB:98:00:02:6E:0F:1D:01:7E:1B:13:2A:86:0C
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d7:2d:d8:be:c1:aa:2e:8f:28:e9:53:3b:da:9e:6d:78:65:
         37:4c:a9:9d:cf:85:df:30:62:c3:66:ef:f0:be:d0:40:ef:0d:
         3a:3f:27:b4:81:4c:74:88:68:43:64:a1:e8:27:63:1b:d7:fd:
         1f:f6:02:3b:3b:6b:32:65:4b:ad:06:6a:0f:4b:e2:ca:01:82:
         4d:b8:04:37:de:ea:e1:0f:19:11:f0:87:06:97:3a:00:44:e1:
         16:5c:11:98:ae:f1:c8:fa:16:91:60:fd:a7:7c:da:01:5c:31:
         3b:ff:79:1c:2b:02:2b:26:86:41:3d:7c:f6:a3:79:aa:33:55:
         4b:f1:52:09:5d:f7:6a:64:9f:79:99:29:06:58:f6:50:e7:35:
         65:2f:f0:17:70:7d:84:f9:cf:90:88:cc:19:e1:aa:04:e4:06:
         43:e9:88:d9:cf:8c:66:fd:b3:55:65:8d:de:3a:9c:ac:99:57:
         e8:bb:65:68:95:a4:18:b0:6e:09:44:70:fa:cb:5f:70:d7:00:
         0e:28:1e:9e:c3:93:43:84:fd:9f:41:1e:7e:61:39:e7:95:03:
         c5:cd:07:0b:da:e8:86:02:f8:ce:94:b2:07:6c:14:2b:73:20:
         83:18:dd:2a:53:0b:9a:f5:49:33:24:87:41:4f:67:6d:60:01:
         53:0f:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:11 2026 by rpki-client