Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
File:                     LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft (raw, json)
Hash identifier:          1x9ewuKl1/2QONx2Ey4DW55F7Qqxk445d5yFVqqfTXs=
Subject key identifier:   E7:40:B7:5E:B3:F4:85:4E:87:AF:97:42:4B:73:EB:F8:E7:AA:6B:CD
Authority key identifier: 2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D
Certificate issuer:       /CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d
Certificate serial:       01A0D8DF2661DAC5BF70ECF994F4B593BEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
Manifest number:          030D
Signing time:             Fri 25 Sep 2026 14:01:38 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:38 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:38 +0000
Files and hashes:         1: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl (hash: F93+fgYPE6fkKhpnCyLRIIS61ucBgOisQM8f8YJYNmw=)
                          2: Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa (hash: WyYT1rW3NAfoNqzlN2CzJQbWLBSI3Y59Gh+h+WbBSgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:26:61:da:c5:bf:70:ec:f9:94:f4:b5:93:be:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d
        Validity
            Not Before: Sep 25 14:01:38 2026 GMT
            Not After : Sep 26 14:01:38 2026 GMT
        Subject: CN=e740b75eb3f4854e87af97424b73ebf8e7aa6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e3:de:ee:c7:9b:6c:29:02:63:8c:9f:5a:ad:
                    eb:f0:e7:86:b6:bf:14:b8:48:7b:66:47:2a:fb:d5:
                    9f:a6:7d:3c:fc:56:29:be:d1:90:74:c1:ef:52:27:
                    56:5c:7f:08:01:f2:c0:86:0b:3f:fa:62:10:94:1f:
                    69:97:06:88:7a:9f:45:0b:53:ad:5e:bc:d7:88:84:
                    db:7f:d9:2d:d6:7b:a1:47:05:30:dc:a5:cc:4c:f0:
                    d1:d4:89:8e:bf:34:2a:75:dc:7f:6c:1f:27:46:f7:
                    8b:4f:bb:60:31:27:41:ca:a1:ae:b5:64:e2:96:13:
                    96:e2:f6:c8:9d:3c:09:d9:89:cc:20:38:3e:7c:64:
                    67:4d:19:85:96:93:eb:51:7b:0d:5f:7b:08:f4:2c:
                    fd:ac:1d:7e:ce:17:b4:52:1c:9e:b9:4d:d5:74:df:
                    17:f8:90:86:ee:e8:54:52:a5:c7:fe:80:1f:e4:25:
                    6a:ee:79:5b:e9:e0:28:93:b6:6a:14:75:85:29:07:
                    a0:32:44:0e:55:ae:5d:fe:a0:c3:53:37:79:0a:1c:
                    7e:c4:5b:94:12:5d:3e:16:25:1a:80:58:f7:0d:33:
                    f9:d8:66:f2:8a:c9:f7:cb:9d:59:7c:b2:1a:7d:51:
                    45:06:82:35:d6:6d:9f:b8:38:7c:29:c1:5c:84:41:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:B7:5E:B3:F4:85:4E:87:AF:97:42:4B:73:EB:F8:E7:AA:6B:CD
            X509v3 Authority Key Identifier:
                keyid:2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:2b:69:8a:a3:7f:c3:85:88:89:fb:90:d0:6e:3b:27:5c:
         6b:9b:01:b4:ba:bc:ae:79:27:f5:38:94:ef:b9:a7:2a:80:ab:
         e9:59:a2:0c:fd:a0:5b:92:3d:70:89:67:7f:f0:83:d4:64:0f:
         dc:1c:22:4a:7d:20:0a:3a:4a:61:4c:3c:58:2e:6f:c3:8c:de:
         50:64:28:8b:eb:c5:f2:dc:17:2a:63:39:5a:57:0a:22:4c:75:
         1f:99:80:c2:6d:31:1f:8f:96:43:0a:4c:05:2b:8e:83:1c:24:
         cf:54:47:5e:ec:67:e3:1b:75:c2:e2:42:69:99:ee:76:28:ff:
         a8:1c:fd:79:4e:2d:f5:9e:19:4f:89:d6:57:e1:d0:27:35:06:
         9a:e5:ae:bf:09:52:56:11:f4:06:05:7f:91:6c:31:32:54:0e:
         d8:e7:f2:99:30:3a:1e:5c:27:b1:1c:d2:6c:52:a1:57:ab:e7:
         b4:0b:4d:5d:94:95:aa:d3:99:bb:b6:4c:8f:c0:6f:e7:13:fa:
         d9:f0:31:b2:08:ee:da:7d:96:a5:8b:fb:88:e2:c8:a3:00:fb:
         d6:5a:56:24:44:cf:c0:aa:a8:dd:8b:4f:d7:0e:ee:03:cd:8f:
         e7:d1:18:e5:19:12:e6:ae:d5:8c:65:9e:4f:4e:23:90:a7:f0:
         f9:ff:9a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3yZh2sW/cOz5lPS1k77eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzYyZDNmZDJmYmZjZTEwYzU4ZjllYjc2YmU5MGZjY2Jh
ZmIxN2QwHhcNMjYwOTI1MTQwMTM4WhcNMjYwOTI2MTQwMTM4WjAzMTEwLwYDVQQD
EyhlNzQwYjc1ZWIzZjQ4NTRlODdhZjk3NDI0YjczZWJmOGU3YWE2YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Pe7sebbCkCY4yfWq3r8OeGtr8U
uEh7Zkcq+9Wfpn08/FYpvtGQdMHvUidWXH8IAfLAhgs/+mIQlB9plwaIep9FC1Ot
XrzXiITbf9kt1nuhRwUw3KXMTPDR1ImOvzQqddx/bB8nRveLT7tgMSdByqGutWTi
lhOW4vbInTwJ2YnMIDg+fGRnTRmFlpPrUXsNX3sI9Cz9rB1+zhe0UhyeuU3VdN8X
+JCG7uhUUqXH/oAf5CVq7nlb6eAok7ZqFHWFKQegMkQOVa5d/qDDUzd5Chx+xFuU
El0+FiUagFj3DTP52Gbyisn3y51ZfLIafVFFBoI11m2fuDh8KcFchEEbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdAt16z9IVOh6+XQktz6/jnqmvNMB8GA1UdIwQY
MBaAFC52LT/S+/zhDFj563a+kPzLr7F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUt
OGU4MTM4ZWZjNDFiLzEvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUtOGU4MTM4ZWZjNDFi
LzEvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk0raYqj
f8OFiIn7kNBuOydca5sBtLq8rnkn9TiU77mnKoCr6VmiDP2gW5I9cIlnf/CD1GQP
3BwiSn0gCjpKYUw8WC5vw4zeUGQoi+vF8twXKmM5WlcKIkx1H5mAwm0xH4+WQwpM
BSuOgxwkz1RHXuxn4xt1wuJCaZnudij/qBz9eU4t9Z4ZT4nWV+HQJzUGmuWuvwlS
VhH0BgV/kWwxMlQO2OfymTA6HlwnsRzSbFKhV6vntAtNXZSVqtOZu7ZMj8Bv5xP6
2fAxsgju2n2WpYv7iOLIowD71lpWJETPwKqo3YtP1w7uA82P59EY5RkS5q7VjGWe
T04jkKfw+f+aBw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:22 2026 by rpki-client