Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File:                     LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier:          4rfDKuMmAlcwLY8Fskc5chYhYBzwX7SC2GZo0/zHSwE=
Subject key identifier:   FC:0E:40:67:19:7F:43:CD:58:A4:31:DF:15:5B:25:62:81:76:ED:D6
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer:       /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial:       01A131EB645FC45D166F4136787CD2477B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number:          0B98
Signing time:             Mon 12 Oct 2026 21:01:12 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:12 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:12 +0000
Files and hashes:         1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
                          2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: qH3iJSY7P3f1dXhAF2qqG7z+aet5NYKSaBJMH+P2eZ8=)
                          3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:64:5f:c4:5d:16:6f:41:36:78:7c:d2:47:7b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
        Validity
            Not Before: Oct 12 21:01:12 2026 GMT
            Not After : Oct 13 21:01:12 2026 GMT
        Subject: CN=fc0e4067197f43cd58a431df155b25628176edd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1f:0a:23:88:27:e3:f7:62:4e:15:a2:23:ea:
                    f9:d3:e8:83:9f:4d:9d:60:3f:f5:3f:7b:19:1d:ba:
                    ac:9e:6e:df:a0:99:79:e0:37:04:1a:5a:c4:52:a2:
                    95:fa:82:12:68:c9:d2:db:15:64:9d:c8:31:40:6f:
                    9a:96:e0:5c:80:de:a4:28:32:70:0f:16:da:07:c7:
                    d9:90:53:87:e9:1e:84:e9:7f:cd:50:4b:4d:6f:04:
                    91:dd:48:b2:bc:21:c2:35:34:a7:2d:c8:cb:94:cc:
                    58:ef:f0:e0:42:fa:aa:5b:d8:58:84:dd:18:7a:12:
                    0d:d6:e1:33:d4:b3:98:74:4a:41:23:58:43:68:a6:
                    ae:da:12:81:4a:0f:5a:9d:2f:c9:c5:80:51:f5:3f:
                    3e:e8:aa:94:4e:5f:34:b9:6e:77:bf:5d:92:5b:91:
                    19:2b:56:72:7a:3e:70:83:3c:cb:01:7d:a2:e1:7f:
                    35:c1:e1:6a:95:d4:e2:6b:9b:fd:b1:e7:ac:ac:c0:
                    3a:a1:e8:42:78:90:4d:c1:2a:45:34:b3:73:94:d6:
                    06:d2:76:4a:13:94:8c:bf:ff:b9:72:59:78:ad:86:
                    07:de:ed:2a:e3:72:7c:3b:64:b2:1e:15:dc:46:3e:
                    f2:a2:c4:89:84:ca:ca:d2:d0:c9:da:0b:ef:88:20:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:40:67:19:7F:43:CD:58:A4:31:DF:15:5B:25:62:81:76:ED:D6
            X509v3 Authority Key Identifier:
                keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ee:5c:2b:42:4a:cc:08:c2:3e:e5:32:b0:f8:c2:f4:07:bb:
         4d:63:5f:26:11:77:c4:98:31:f0:29:7c:a0:2b:6c:ba:c1:9b:
         b9:b5:2d:75:81:2c:1e:d7:04:8f:77:c3:98:bc:20:f0:a7:6d:
         77:b8:fd:fb:72:10:03:a9:1c:a7:d8:fa:ba:3b:4d:a4:bf:c7:
         77:2a:4e:6e:33:c2:04:21:7e:10:1f:e5:d8:a4:b5:d9:16:a6:
         34:cb:58:ea:08:71:92:bc:b8:e4:c9:e1:df:96:1a:c2:26:f9:
         5b:ac:cf:9c:02:fc:d7:71:21:20:cc:c3:88:3e:20:15:2e:90:
         9c:ac:c6:c2:dd:16:50:3e:78:4b:5f:ef:1a:41:38:a7:28:9a:
         f4:11:eb:22:29:1b:b3:57:24:54:37:f6:6e:5c:6d:94:e6:ed:
         86:20:f3:a9:b4:57:3e:09:07:32:aa:c0:26:1f:4d:d7:8f:e7:
         85:fb:95:21:bd:dd:89:75:25:30:55:c9:d7:0b:ff:bc:24:1c:
         26:38:6b:4c:3d:78:48:ed:e3:04:b4:49:17:92:8b:df:6a:2f:
         48:9f:0b:ff:76:0d:4c:cf:90:9c:d3:0d:f2:b2:e6:6e:10:8a:
         ed:ca:1b:42:03:cc:3c:7b:ca:f0:08:90:d9:28:ac:b9:f8:cf:
         e2:36:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:52:47 2026 by rpki-client