Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          JBKzo0Xg+FdqhnUR4K7HzXojruQSZPh3rr0J8ZdvruA=
Subject key identifier:   81:6E:1B:69:06:15:E9:73:BF:8D:C8:FB:DC:6A:81:97:9F:80:12:1C
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       01A0F5A042808536D96A5EC684806534BF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          1A7F
Signing time:             Thu 01 Oct 2026 04:01:55 +0000
Manifest this update:     Thu 01 Oct 2026 04:01:55 +0000
Manifest next update:     Fri 02 Oct 2026 04:01:55 +0000
Files and hashes:         1: Yk8K_yjB7gE3OoJVuZNkwQupR_M.roa (hash: tY5f7xqEp6Riff6tKlIsz63Q7nyfWnAQu/RKC5YJYpg=)
                          2: ax2msnEEnBpql0wtfN6LKLilaEw.roa (hash: khBC79DhTJMtOh4PAW+/zA1ZipTlEKexyh0uRxokVU8=)
                          3: k26mF9MmuzhiFpBjSAPIbbJx6NA.roa (hash: expI8ju4pO9T2VDPcQtkx64FF7f+z+QlEkn5dvh9hp8=)
                          4: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: pJCO6eoqB8APasDrTWSVAJLq/tKVqr5Dey/xbGZa2Ps=)
                          5: u1kMFExxSy9w7Ndw_xKckqwMp50.roa (hash: fWU8uqj9vLth8eAvIcefHvbFMC/gjcfidrkqDKu8wEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 04:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:a0:42:80:85:36:d9:6a:5e:c6:84:80:65:34:bf:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Oct  1 04:01:55 2026 GMT
            Not After : Oct  2 04:01:55 2026 GMT
        Subject: CN=816e1b690615e973bf8dc8fbdc6a81979f80121c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:12:ae:ac:d9:22:0f:27:96:98:7e:ab:04:
                    a8:25:30:79:1c:7a:c5:3a:c9:ac:d7:88:38:50:7c:
                    64:fa:b1:4f:f5:ca:f1:f5:00:84:bd:03:6d:10:49:
                    70:23:56:f1:a4:d5:1b:0b:f1:59:8b:e5:e4:cb:20:
                    ab:bb:97:c9:42:a0:ea:49:72:2a:47:50:d4:b9:0e:
                    ed:0e:59:85:c8:9d:87:1e:23:8e:61:b0:70:9f:3c:
                    55:1c:fa:a7:33:fd:c4:e2:42:54:30:4a:88:37:5a:
                    3a:6e:16:86:25:39:d3:8e:c0:18:b8:fb:13:33:23:
                    10:d1:c0:ae:be:ac:43:9a:de:c0:1f:66:4f:0a:2f:
                    bc:57:cf:c4:35:6a:ab:ff:6e:a1:f4:fb:e5:e8:99:
                    3b:f7:ba:ce:1d:82:6b:7d:3e:52:3f:a3:3a:9a:60:
                    e2:b9:92:1c:73:fc:37:af:16:75:2a:3c:a7:e4:e5:
                    a1:60:1b:10:de:db:a7:cc:8b:fd:6d:27:ff:07:14:
                    fb:b1:84:55:11:09:f6:ec:1c:f9:80:0c:77:fe:de:
                    16:7a:df:a4:e2:04:05:5c:08:d8:33:35:52:81:86:
                    7d:22:1b:5c:f6:24:11:35:93:ad:f5:48:1c:54:9b:
                    d3:bd:20:38:14:9f:0f:c1:13:76:2f:29:81:64:c6:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6E:1B:69:06:15:E9:73:BF:8D:C8:FB:DC:6A:81:97:9F:80:12:1C
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:f2:71:16:10:cb:cb:e1:fc:b0:38:c4:fa:fc:81:e3:c7:
         61:77:0d:9f:94:02:b4:4b:bf:f2:d9:92:b4:ad:87:a3:95:0e:
         72:72:4b:13:81:6a:8b:78:fb:f8:15:68:36:6f:86:a6:fd:f0:
         8a:25:49:04:23:c0:dc:31:aa:13:f5:24:e8:f1:f9:ad:6d:f9:
         80:71:cd:8b:eb:38:e9:90:3a:cb:da:2d:73:4c:35:64:ab:a2:
         f6:79:e3:8f:ba:c1:a8:3d:19:2a:0a:ed:5d:bc:d1:1c:ca:30:
         e0:09:8b:5f:02:5e:3f:cd:85:5b:86:5b:5d:bf:d9:53:d5:36:
         39:b5:64:eb:a4:a6:23:b1:b4:c3:29:f6:a2:6e:98:f6:6c:6d:
         f4:70:ba:47:1e:28:b8:71:ae:1e:bc:d9:56:ee:b4:8f:a1:f7:
         f9:4a:f1:81:62:bb:45:d3:09:03:27:74:49:95:53:aa:9f:48:
         b4:66:ed:e6:00:ae:df:ca:97:53:e2:03:53:63:da:d4:8b:c4:
         a2:90:c3:7c:33:2f:e0:de:54:48:c7:a8:bd:32:ae:13:60:5c:
         a1:7b:25:4e:ac:45:e8:3d:cd:34:db:01:00:af:47:05:bd:56:
         0b:5f:ad:ff:b8:d0:81:e3:34:84:74:77:98:1f:ea:01:8f:85:
         c5:14:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:45:11 2026 by rpki-client