Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File:                     LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier:          /6JEEAAyFy/hWu43JBJ/82voK6XAFkOmcawaCAhxTl4=
Subject key identifier:   A5:F7:ED:55:95:3E:C1:BB:1F:88:DE:AB:EB:A7:67:B3:26:FE:DB:17
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer:       /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial:       01A0D5DE750F704AB30C666D11B352B44D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number:          056A
Signing time:             Fri 25 Sep 2026 00:02:00 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:00 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:00 +0000
Files and hashes:         1: 8nh2nz59r4IDN5IE02ZK_JnePnU.roa (hash: EoqGd1iJrSXTEZ94UblIUe3hHKZv1dQEjjg+tiyKHkY=)
                          2: CrT-FIs9ETIARmODyPGo6Texbms.roa (hash: VHPhzwyP7ZJaAZF/RLchX9QehGLwEz/Nhb9bbKVLnBE=)
                          3: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: M0DIo2tS1G4J4qQIJut21ISo1eHKAEY14yj6d2xuslY=)
                          4: M1lzEwcwplQSzJYIKHVS3CPULtM.roa (hash: CbzM5ppQIFt899x5QRVS7mcpi5adykj4B/FuVFp7z1c=)
                          5: PGCypFT7PpbRYHnbnL53seEehQY.roa (hash: uikj8M8pga201KYBaCnBW484YRpO24WaVAwTT3xgXLA=)
                          6: gpcRZMvvAarNXGnEQk69CRu1kTw.roa (hash: vDgS5AGwOlvvwcg7ps4GbXeY48BReojyPRTXSF9XHHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:75:0f:70:4a:b3:0c:66:6d:11:b3:52:b4:4d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
        Validity
            Not Before: Sep 25 00:02:00 2026 GMT
            Not After : Sep 26 00:02:00 2026 GMT
        Subject: CN=a5f7ed55953ec1bb1f88deabeba767b326fedb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:fa:2c:9d:93:40:2c:95:a7:47:27:0c:fa:
                    cf:52:5b:f8:ba:40:ad:70:e1:98:d6:d0:09:5c:d1:
                    3b:c1:d1:d8:81:3c:69:cd:3e:2a:86:2f:64:04:1b:
                    66:31:ea:93:47:30:67:08:0c:1e:57:9c:fd:09:ef:
                    c8:f8:4f:04:b9:30:60:6c:20:cf:37:3f:0b:7c:62:
                    47:70:1a:40:f1:cb:f2:87:d4:88:f5:a8:25:26:77:
                    fd:08:70:c7:0a:27:b2:4a:45:ba:86:2a:6e:fc:fa:
                    dd:de:fc:45:f7:b3:81:7e:0b:59:96:ce:54:a8:71:
                    39:27:a0:0b:44:b0:e9:9d:5f:eb:10:c3:0f:90:b9:
                    f6:59:3c:a2:4c:90:20:c7:ad:b6:d9:4f:dc:fa:e4:
                    e6:df:4b:4a:b5:37:99:3c:db:f1:5b:02:46:f3:55:
                    03:b1:ff:ea:14:2a:af:81:42:2f:10:df:31:47:f1:
                    4a:f6:65:cb:b3:4e:07:5b:9c:82:86:0c:1e:79:21:
                    e9:e7:d6:bf:be:5c:1c:d6:25:26:dd:31:ad:70:4d:
                    f8:c4:5e:c7:04:70:f2:c0:02:85:fa:5c:ab:0a:61:
                    18:45:d7:31:9d:14:b0:65:0e:81:13:98:ec:ba:af:
                    7f:a7:f4:c2:e5:c8:9b:06:40:71:76:23:42:c0:17:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:ED:55:95:3E:C1:BB:1F:88:DE:AB:EB:A7:67:B3:26:FE:DB:17
            X509v3 Authority Key Identifier:
                keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:40:e9:a6:19:5d:bd:6e:d2:84:74:47:5b:78:b7:39:95:6a:
         d4:d6:fe:83:6c:3b:4a:42:45:82:47:9b:5a:51:90:60:f1:3e:
         57:72:75:cd:89:61:34:f7:90:9c:19:ea:62:c3:1f:70:4d:47:
         d7:0d:73:29:e4:93:24:63:b2:7f:96:f4:ee:fc:53:54:91:53:
         c1:ec:71:7e:7f:07:c3:de:8e:20:f6:e8:6a:cd:26:59:81:84:
         73:e3:4a:23:3a:08:84:97:3c:88:8c:8b:37:99:94:8c:f4:dc:
         6d:20:ae:33:34:c6:58:f2:b6:53:04:b9:6c:49:81:5e:d1:93:
         e3:17:2c:9c:25:ec:7b:72:8f:bd:6d:a3:62:e7:42:80:42:98:
         0b:b3:c2:e6:98:c8:32:11:3e:43:87:f0:d4:ba:3b:c7:46:0e:
         9b:84:b8:a7:a1:f7:bc:44:90:60:dd:83:b1:76:ed:34:ac:ab:
         f4:bc:50:6a:5a:b5:a7:f3:0a:f5:b1:37:ef:6c:d6:57:05:55:
         cf:63:e5:46:99:c2:68:fd:fb:2f:7f:93:85:f9:08:93:42:97:
         2d:d6:ed:6d:9f:00:db:d2:2d:93:96:a5:99:b9:c5:bb:89:a0:
         d5:31:9f:01:9e:35:b4:89:37:e5:50:cc:d6:f5:58:66:78:77:
         70:c7:44:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3nUPcEqzDGZtEbNStE18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk
YzYzMjgwHhcNMjYwOTI1MDAwMjAwWhcNMjYwOTI2MDAwMjAwWjAzMTEwLwYDVQQD
EyhhNWY3ZWQ1NTk1M2VjMWJiMWY4OGRlYWJlYmE3NjdiMzI2ZmVkYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOX6LJ2TQCyVp0cnDPrPUlv4ukCt
cOGY1tAJXNE7wdHYgTxpzT4qhi9kBBtmMeqTRzBnCAweV5z9Ce/I+E8EuTBgbCDP
Nz8LfGJHcBpA8cvyh9SI9aglJnf9CHDHCieySkW6hipu/Prd3vxF97OBfgtZls5U
qHE5J6ALRLDpnV/rEMMPkLn2WTyiTJAgx6222U/c+uTm30tKtTeZPNvxWwJG81UD
sf/qFCqvgUIvEN8xR/FK9mXLs04HW5yChgweeSHp59a/vlwc1iUm3TGtcE34xF7H
BHDywAKF+lyrCmEYRdcxnRSwZQ6BE5jsuq9/p/TC5cibBkBxdiNCwBeKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX37VWVPsG7H4jeq+unZ7Mm/tsXMB8GA1UdIwQY
MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt
OGNhMjVmNDg4ZWJmLzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm
LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEDpphld
vW7ShHRHW3i3OZVq1Nb+g2w7SkJFgkebWlGQYPE+V3J1zYlhNPeQnBnqYsMfcE1H
1w1zKeSTJGOyf5b07vxTVJFTwexxfn8Hw96OIPboas0mWYGEc+NKIzoIhJc8iIyL
N5mUjPTcbSCuMzTGWPK2UwS5bEmBXtGT4xcsnCXse3KPvW2jYudCgEKYC7PC5pjI
MhE+Q4fw1Lo7x0YOm4S4p6H3vESQYN2DsXbtNKyr9LxQalq1p/MK9bE372zWVwVV
z2PlRpnCaP37L3+ThfkIk0KXLdbtbZ8A29Itk5almbnFu4mg1TGfAZ41tIk35VDM
1vVYZnh3cMdEUQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:21:45 2026 by rpki-client