Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          GVNzt21w5IoXXGBrLRVJWRSJy76iPxoVz3CPgwVJFl8=
Subject key identifier:   CD:CD:12:A6:05:48:48:47:14:12:A6:C3:58:C3:A5:5C:60:3E:BF:3F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       01A0D7CC566B14DF5A5020F0BEDE80534A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          1A37
Signing time:             Fri 25 Sep 2026 09:01:27 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:27 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:27 +0000
Files and hashes:         1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
                          2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
                          3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
                          4: 7v4FlDgaUhB0KwYLuf0DrtJYiZE.roa (hash: 1Wu7rdYg7HSjG0fNpexA7LGI5X9w1Yvqs/8X7UlrRkY=)
                          5: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (hash: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=)
                          6: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (hash: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=)
                          7: Bza0u1KrAMDMGupZL29e32A3MCc.roa (hash: pZiFonQx+AjzAflURZDKbh/3OCh69YGkDga9U2khExM=)
                          8: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
                          9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: OQPbqyTpkElFh10Ji55gPEKBIermUcWk6xMAfkm1NKM=)
                          10: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
                          11: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
                          12: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
                          13: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
                          14: X6w9majvI_DCoEpE7YSlgjrwWBk.roa (hash: nSq/rO7rO1FgXnozv7cLPZZonavuQIUu1J8PyL3NQ+k=)
                          15: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (hash: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=)
                          16: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
                          17: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
                          18: lAUTh060UnG4SYUzw748rs6F-AU.roa (hash: rqx44g42iFnxW7L4EozICe/qV2vcSLbN9ZwaWDSqR4Y=)
                          19: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
                          20: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=)
                          21: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
                          22: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (hash: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=)
                          23: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
                          24: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
                          25: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:56:6b:14:df:5a:50:20:f0:be:de:80:53:4a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Sep 25 09:01:27 2026 GMT
            Not After : Sep 26 09:01:27 2026 GMT
        Subject: CN=cdcd12a6054848471412a6c358c3a55c603ebf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:35:67:5e:21:a9:82:63:2b:10:19:75:9a:
                    6a:6c:2f:2b:f8:f0:69:70:d5:c7:23:9d:1c:54:a2:
                    64:3d:99:ab:2b:89:92:53:e7:e0:65:0a:9e:4e:35:
                    68:d0:3c:ab:5b:29:6f:c5:75:46:d6:9e:3f:3a:ad:
                    6c:61:e3:ef:e3:21:31:18:c6:32:6b:8e:8a:14:06:
                    88:c5:28:59:2b:d5:44:8b:7c:69:5e:0e:ae:73:f9:
                    8c:ec:23:d3:7d:36:88:d2:77:e6:9e:0f:a1:83:d9:
                    aa:05:da:47:7d:07:92:e0:c6:3b:cf:7c:f5:bd:34:
                    8d:95:33:95:d5:a3:f3:95:85:9d:9e:7c:c2:cd:40:
                    cd:d4:4a:9a:af:22:ce:85:28:56:e9:76:a9:71:52:
                    09:df:6b:8a:b2:94:3c:56:e6:14:62:46:ad:75:73:
                    a8:68:44:da:37:57:22:c8:c3:32:8b:9f:1b:7e:89:
                    01:5b:38:72:30:71:04:bb:d1:1b:9a:72:4a:eb:d8:
                    5b:2d:eb:f5:81:c4:09:ea:e9:ff:32:50:de:2e:ae:
                    30:9c:8c:71:49:95:bb:d3:e0:8e:e8:7e:95:26:dc:
                    4b:2c:66:19:c7:ca:19:ed:a0:fe:93:f4:d7:da:b9:
                    8f:4a:9c:ec:94:d5:95:4e:b4:62:73:e8:c3:21:53:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:12:A6:05:48:48:47:14:12:A6:C3:58:C3:A5:5C:60:3E:BF:3F
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:a2:15:8f:5c:84:e3:9b:70:20:76:43:e2:ce:c6:1f:b1:
         ff:58:19:c3:cb:c1:21:d4:cd:43:3b:58:47:19:60:45:eb:9d:
         39:7c:09:9f:d7:48:48:51:b6:31:a3:c0:5c:10:aa:88:35:7b:
         56:03:cf:d3:2c:2d:86:5e:87:68:c9:8e:e0:52:8f:fd:e9:12:
         87:f2:bd:8d:18:25:f2:37:2e:07:16:2f:44:b1:57:2b:84:9b:
         60:a7:1a:7d:d0:9b:ee:40:5b:f8:2c:44:43:97:ad:30:a8:89:
         50:c3:e8:4a:34:e2:11:b6:7d:c1:0a:a2:3e:4f:56:f7:62:27:
         53:05:0f:c7:b0:9f:ad:a6:0d:31:ab:f1:2a:c5:e7:a8:b8:39:
         86:3d:92:7a:00:63:f9:9c:f6:4c:8f:3b:3c:d2:25:ae:e1:65:
         83:2f:06:d0:3b:b2:ad:ab:78:07:61:60:d7:f2:0c:64:80:e3:
         ca:ab:ff:32:53:02:ce:77:86:08:02:7b:b6:72:1b:6d:71:d3:
         d9:cf:51:32:16:e6:06:e0:55:c4:b8:48:d0:0a:91:0a:19:2d:
         06:96:29:a5:3e:0d:45:a2:d3:a0:8d:9a:97:13:e7:b9:65:4b:
         21:75:1d:05:57:78:84:5d:a3:bf:e4:93:12:ea:5b:2f:09:38:
         d1:d4:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:55:12 2026 by rpki-client