Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          i5Vv8uZq7KIiL21rtBCIjKFRNKfSp/LMd152FaixhtA=
Subject key identifier:   C1:F4:93:76:0B:90:60:CE:A7:D0:E6:F4:02:54:91:A7:2A:B1:E9:5D
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       01A0CB909B720940940F43C11909F801F05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 00:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:46 +0000
Files and hashes:         1: DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa (hash: CPSNBE1JDqZWrzRtLM0uStnUMuYrz40a9MwrDBSVFlM=)
                          2: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: yw8S34q2RbhcQCgxupkyodjdoEi648rUS25osDC42T8=)
                          3: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (hash: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A=)
                          4: RUhmJdqw-3Gaw_JLROAhLOvB2IM.roa (hash: XdtV4zgfYLmkDs8xTK/8Ot/KM7BnvRi+tSC9tgSlImI=)
                          5: jYiU8bv569WiEs-qGefdtilWB8Y.roa (hash: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok=)
                          6: yV2ta5YIqZOtbWWi5XnowuWeO2Y.roa (hash: FMj28W2Mwf91c8T9pAxRJIkM3TCaa6JGRs6VpNG02T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:9b:72:09:40:94:0f:43:c1:19:09:f8:01:f0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Sep 23 00:00:46 2026 GMT
            Not After : Sep 24 00:00:46 2026 GMT
        Subject: CN=c1f493760b9060cea7d0e6f4025491a72ab1e95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:90:1e:f8:33:4b:5b:ce:3e:33:dd:9a:c7:
                    7d:6b:47:05:5f:e8:aa:e2:ad:48:04:07:6c:82:24:
                    6f:25:f9:6b:a0:3d:3b:3a:64:49:2c:e2:74:e2:7f:
                    2b:48:b4:eb:0e:fc:20:13:63:8f:5d:92:79:83:2e:
                    8d:b1:63:22:3b:68:3a:ee:13:c2:95:f8:b4:10:a5:
                    77:af:0f:d4:de:70:8d:d3:db:05:f6:32:29:ca:fc:
                    01:ef:98:ab:02:d7:a6:27:14:79:2d:3c:32:43:1c:
                    3b:f3:1e:25:39:13:83:ea:39:70:c7:ff:63:7d:00:
                    23:6c:c1:45:0c:cc:b2:cd:b5:45:25:cb:7c:3f:a0:
                    0e:15:69:6b:46:82:47:cb:6f:fa:db:8f:3b:03:8f:
                    ac:df:a8:02:b5:18:5e:d8:7f:28:84:96:68:25:fd:
                    cc:4d:ee:fa:84:74:a4:75:10:89:5b:27:4c:31:37:
                    52:9e:a8:ff:a3:8c:21:00:90:50:d1:28:76:72:9d:
                    9e:9c:18:4e:14:d1:b9:23:c0:93:a3:73:8e:e4:ab:
                    e3:61:db:9c:23:b7:af:e4:fe:4c:be:29:fe:e8:88:
                    94:1b:ff:66:db:d5:fb:d8:8a:b5:9d:a4:9d:b5:14:
                    21:9b:dd:f4:35:0d:63:cd:ad:c7:0c:e4:c1:62:d0:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F4:93:76:0B:90:60:CE:A7:D0:E6:F4:02:54:91:A7:2A:B1:E9:5D
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d0:71:91:f7:92:28:35:d9:a0:11:21:28:77:5a:c3:8f:27:
         f0:3d:04:f3:6e:f2:53:56:37:8a:f0:b8:1f:cc:c1:7a:41:8c:
         e5:41:5b:2e:a6:45:93:89:1c:22:16:c4:74:5f:54:88:60:45:
         31:b9:53:f3:c8:89:64:a6:59:1d:d3:2c:1f:a1:3b:a4:7a:e7:
         aa:1b:8b:ad:c2:39:57:5f:4d:90:31:1b:9d:bd:3e:91:2c:b5:
         7e:fc:d9:06:05:53:01:44:e8:2d:51:18:11:05:18:45:20:91:
         f4:4a:d5:a4:4c:cd:60:d8:4f:70:4b:ff:d5:54:cc:a1:a4:9e:
         35:0b:dd:60:f4:e1:f2:94:6d:69:d0:2d:80:39:b6:e2:99:f4:
         7e:c9:ad:4f:6b:61:31:10:e1:80:de:90:88:bf:12:6e:6c:7c:
         8b:8b:8d:d7:83:d0:98:8b:69:78:8b:df:a7:52:d8:0d:49:ee:
         3a:0b:93:44:70:e0:15:f6:c2:70:5c:49:a3:91:fb:b0:80:25:
         af:c2:1d:f7:96:6d:45:86:19:87:2a:3e:c1:06:07:b9:38:50:
         fd:f1:3b:fa:22:47:4f:7c:fa:c1:56:3c:1d:05:ca:b3:c1:1e:
         3f:63:32:f4:87:6a:55:05:8a:0f:ba:4a:d7:40:b0:1b:fd:fd:
         f6:e1:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:43:01 2026 by rpki-client