Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File:                     LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier:          TSWa3IKvSMbyFkn3qe/JJ9d6CyyaIJQlhXqpL20CU0g=
Subject key identifier:   96:B7:DC:D5:B4:98:E7:11:85:A7:9D:A5:1A:89:83:4E:DB:DF:D5:80
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       019D24DE78BDDFE4380D62CDE9D6CE055378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number:          1533
Signing time:             Wed 25 Mar 2026 12:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 12:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 12:00:52 +0000
Files and hashes:         1: 4C8f5FARcG-ZhuB-vuYks_uFiSM.asa (hash: W61wROGokL5bWdXjsmKXsKb3BR0ZpNI0VLQdgkpNYOY=)
                          2: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: 4yBmL392jJauZbBrlbWSEQYE891YAS4uH+X5x2Jyh6Q=)
                          3: _Cfy9cb-oQbNsdjFWpTXAp0vykM.roa (hash: hIou1rSmsH9WYXgyvdfhrYuo3Ds/LLT4qC/64LFji2o=)
                          4: c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa (hash: 9NIofwcdGz5zeO6bax5mK7skNIAnSwQhXhWa+mJ1VWs=)
                          5: ddfQyL5mhD7mpFJJqGaZ3w97HDk.roa (hash: MOdMZ39n6c+DnqvSWvmRktnMqoezzAOZSZFQGziSyik=)
                          6: upplO1vsJUxfE9a6L-gXM6q4wxw.roa (hash: YDn3jYv0iMQlWNcNP2DzaLyq8GD8cqRsMXLAgOSsLHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:de:78:bd:df:e4:38:0d:62:cd:e9:d6:ce:05:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Mar 25 12:00:52 2026 GMT
            Not After : Mar 26 12:00:52 2026 GMT
        Subject: CN=96b7dcd5b498e71185a79da51a89834edbdfd580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:36:f6:8d:25:d2:9e:d5:a6:ee:8d:59:22:
                    2b:39:d2:b8:33:65:9d:69:a1:1b:df:21:19:2b:f5:
                    40:33:6f:cf:77:fd:b1:6d:55:0e:82:5f:dc:40:7e:
                    eb:67:f6:62:ad:0b:37:19:f7:87:92:c4:ba:0c:73:
                    6c:bb:e8:43:91:d4:4a:4d:52:c0:f6:33:81:18:4e:
                    07:9c:48:7e:4f:44:28:cc:83:af:84:01:d5:13:5c:
                    3c:cd:99:0d:fd:d4:13:10:92:3f:10:e0:1e:39:2b:
                    77:be:bb:fd:4b:75:0a:96:56:f4:ea:8d:61:9f:8b:
                    d4:ac:4d:b3:35:04:34:1b:7b:db:3f:7b:24:be:8b:
                    f5:6e:f0:8e:12:27:b0:6f:1a:17:78:09:b9:80:68:
                    1e:f6:ac:2e:55:d0:7a:bd:30:58:18:bc:68:a9:2c:
                    c0:20:34:cf:fb:e4:89:68:e2:b7:ad:49:e5:28:08:
                    f4:bc:78:23:3f:d2:d9:51:2c:ab:1b:b5:7a:1b:87:
                    6f:fe:71:dc:93:7c:9b:2d:15:03:f9:77:31:75:23:
                    76:1e:33:f7:40:4c:56:82:da:90:f9:19:c3:6b:1e:
                    d1:8f:31:a0:4c:04:da:d4:5f:f4:0e:a2:34:e9:ed:
                    09:af:88:21:e6:a7:e0:0a:b8:81:04:29:15:ea:f1:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:DC:D5:B4:98:E7:11:85:A7:9D:A5:1A:89:83:4E:DB:DF:D5:80
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:39:ad:b4:12:fa:69:08:f9:83:7f:7e:c3:f0:0c:3c:5c:
         ca:76:36:2b:72:a3:5f:76:41:81:96:d4:51:f4:ba:c7:b7:09:
         af:e7:70:54:ee:f3:56:ff:de:37:61:f2:04:47:61:5b:f7:18:
         c3:bd:a3:5a:b8:bd:f0:fd:6d:86:0b:4e:95:14:3d:6e:ec:f7:
         c4:32:ad:d6:ac:69:8a:ec:91:fe:d9:a4:db:74:c3:e8:fc:7e:
         cf:2c:b9:7e:f8:b8:7d:5f:03:dc:c6:d4:7b:37:25:9f:13:c1:
         e0:42:54:b0:12:21:42:3d:c9:02:1f:db:70:61:ae:bc:ce:bc:
         c6:8d:5d:9a:96:42:d5:13:62:c8:cd:83:b6:0e:dd:8e:a2:3d:
         82:b2:39:a3:b8:c8:90:18:83:b2:a1:3f:af:5d:4e:f9:67:b4:
         d9:63:07:63:a6:ff:4b:11:5f:53:ba:0f:26:cb:cb:87:04:f6:
         c9:6a:5e:2f:25:87:82:12:95:b5:68:e6:4a:11:39:54:33:c6:
         0e:45:aa:88:c5:54:3c:12:0c:65:68:82:c2:3c:b0:fb:46:37:
         74:0d:db:0f:2e:52:d9:0a:5d:09:06:9f:77:b8:29:e3:a4:1b:
         8f:b4:e8:ce:d0:3c:52:64:1f:99:45:66:5f:1a:a2:cc:a8:54:
         e0:3b:83:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0k3ni93+Q4DWLN6dbOBVN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDNkYWM4ZWE1NTY5MzQzOWRkMWI4YjQ4MTJiYTcxODM0
ZjEwMzEwHhcNMjYwMzI1MTIwMDUyWhcNMjYwMzI2MTIwMDUyWjAzMTEwLwYDVQQD
Eyg5NmI3ZGNkNWI0OThlNzExODVhNzlkYTUxYTg5ODM0ZWRiZGZkNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iE29o0l0p7Vpu6NWSIrOdK4M2Wd
aaEb3yEZK/VAM2/Pd/2xbVUOgl/cQH7rZ/ZirQs3GfeHksS6DHNsu+hDkdRKTVLA
9jOBGE4HnEh+T0QozIOvhAHVE1w8zZkN/dQTEJI/EOAeOSt3vrv9S3UKllb06o1h
n4vUrE2zNQQ0G3vbP3skvov1bvCOEiewbxoXeAm5gGge9qwuVdB6vTBYGLxoqSzA
IDTP++SJaOK3rUnlKAj0vHgjP9LZUSyrG7V6G4dv/nHck3ybLRUD+XcxdSN2HjP3
QExWgtqQ+RnDax7RjzGgTATa1F/0DqI06e0Jr4gh5qfgCriBBCkV6vE+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa33NW0mOcRhaedpRqJg07b39WAMB8GA1UdIwQY
MBaAFC5D2sjqVWk0Od0bi0gSunGDTxAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQt
MjZjN2M5NjNhNzY5LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQtMjZjN2M5NjNhNzY5
LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1E5rbQS
+mkI+YN/fsPwDDxcynY2K3KjX3ZBgZbUUfS6x7cJr+dwVO7zVv/eN2HyBEdhW/cY
w72jWri98P1thgtOlRQ9buz3xDKt1qxpiuyR/tmk23TD6Px+zyy5fvi4fV8D3MbU
ezclnxPB4EJUsBIhQj3JAh/bcGGuvM68xo1dmpZC1RNiyM2Dtg7djqI9grI5o7jI
kBiDsqE/r11O+We02WMHY6b/SxFfU7oPJsvLhwT2yWpeLyWHghKVtWjmShE5VDPG
DkWqiMVUPBIMZWiCwjyw+0Y3dA3bDy5S2QpdCQafd7gp46Qbj7ToztA8UmQfmUVm
XxqizKhU4DuDJQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:58 2026 by rpki-client