Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
File:                     LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft (raw, json)
Hash identifier:          v7KaTeS54Q22JirAivi0HTUHpq4QLKm3I07MTzSBFQQ=
Subject key identifier:   34:31:EC:3B:A3:BC:DC:C0:65:95:E2:6D:CE:51:48:A2:97:8A:0C:E5
Authority key identifier: 2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
Certificate issuer:       /CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Certificate serial:       01A0DD97772ED0270B35C9AB0DD82FF07EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 12:01:26 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:26 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:26 +0000
Files and hashes:         1: 3URcR2VAq9YwUG_RdREcOw-9ln4.roa (hash: S5nWhW1lsV8LUmD4DKpYZGcwm/m354NfNJ30ZDEaIUk=)
                          2: LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl (hash: LKerN71LgBY1G4g4Zm2zt7sCf5CaSuZwOj6DRulPUTY=)
                          3: d7lqAUzGr5Jc883I2HWBv_nEhIM.roa (hash: BNKZdUryXFyz1omY36pPU2N0lM3FeOgjtMztkteKae8=)
                          4: lHJI6jEPkBn01XkO68qpjaIbBp4.roa (hash: Wr8iSQaD7B+SmF7n+aUj/i7OLCYDdgcmxhreHklOPnw=)
                          5: pFTHW4-Bucx-lpPTlrtl5Wfgp1I.roa (hash: D/fcF4IEFWMJQvt8UmINawGoN8hFrDrMCVBxLhfIb1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:77:2e:d0:27:0b:35:c9:ab:0d:d8:2f:f0:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
        Validity
            Not Before: Sep 26 12:01:26 2026 GMT
            Not After : Sep 27 12:01:26 2026 GMT
        Subject: CN=3431ec3ba3bcdcc06595e26dce5148a2978a0ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:3b:51:fa:de:11:0e:52:2d:e4:7b:1b:3b:
                    d8:c0:d9:b2:5e:b7:4a:b5:7c:b5:87:ba:b3:2f:08:
                    39:44:79:da:36:65:27:81:5a:96:b1:48:c3:3e:6c:
                    61:e2:74:8c:91:ef:f2:33:ba:8c:f5:ed:aa:68:9b:
                    3f:e1:6f:71:a0:0a:30:d2:1d:3e:59:a5:91:4f:b5:
                    c9:6b:95:9f:2e:1c:d1:ea:40:c8:04:26:5e:70:d2:
                    6e:c7:ee:a0:10:e1:5c:49:f0:84:82:fa:66:0b:03:
                    89:e4:fc:5e:31:8d:e9:cd:97:14:03:25:4e:e0:64:
                    2b:01:14:5c:a4:c7:1f:2e:3d:e9:fe:a3:d6:a8:e6:
                    28:4f:cf:37:21:48:5f:8b:66:2d:d1:c0:13:91:96:
                    c2:8c:dc:04:ec:38:ba:de:fc:fa:c1:ca:9d:81:51:
                    f1:69:b9:1b:ce:d1:77:59:56:44:78:fc:09:c8:ac:
                    dc:56:8e:75:fe:6f:40:68:bc:f6:34:fc:ba:b1:38:
                    f9:6f:8f:16:3e:bb:60:16:f7:e5:3b:d3:5e:8a:84:
                    3a:e8:42:62:d7:24:c0:b3:40:79:db:b4:cd:36:4d:
                    82:9d:7c:88:c6:21:bc:46:65:b7:0b:e6:83:fb:60:
                    a6:31:05:3e:fe:b1:ec:a8:bd:0a:28:0b:f1:03:6b:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:31:EC:3B:A3:BC:DC:C0:65:95:E2:6D:CE:51:48:A2:97:8A:0C:E5
            X509v3 Authority Key Identifier:
                keyid:2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:f6:6d:11:04:1d:c6:d9:05:b4:fa:71:a1:00:fa:61:96:
         f8:db:5c:82:bd:12:8e:aa:4e:64:33:99:69:6e:04:26:50:31:
         ef:f5:de:de:78:3f:97:eb:64:c9:e6:8c:1d:d9:d2:20:fa:db:
         f2:51:b3:06:02:b7:78:87:c0:64:ec:b4:62:e3:9d:2b:c4:49:
         25:87:3a:64:92:e4:90:f2:95:17:91:91:9c:df:54:55:54:01:
         fe:a5:63:78:a7:b8:00:25:0d:61:f2:49:bd:bd:53:9b:fd:4e:
         6e:11:06:53:62:00:13:fd:d4:5f:53:05:bd:08:db:57:73:35:
         e1:01:d6:57:f4:b0:1a:6f:f2:5f:5b:ba:f5:dc:02:fe:c7:db:
         e5:72:8a:f9:0d:b7:28:39:75:28:f7:a6:d5:e0:7a:5d:d4:09:
         26:cd:cd:11:c0:8d:61:89:a2:8b:c7:d7:1b:17:41:bc:e2:e2:
         b6:c0:43:03:91:b8:3c:e3:93:d6:e6:4d:80:79:34:db:44:2d:
         76:18:29:54:d6:fa:f4:95:33:6a:5a:eb:48:f0:02:17:b9:ee:
         31:41:97:5a:7d:f1:32:23:21:a8:0b:45:85:44:d8:21:8c:8c:
         e8:c7:82:58:24:87:7e:03:9d:8b:f9:5b:a5:0a:b4:40:59:17:
         c0:34:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:49 2026 by rpki-client