Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File:                     LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier:          kGG7ZXOVvSgOFClh90+jw7ZNe/rIE7+GaxMVoF+zi14=
Subject key identifier:   B3:CF:3E:03:3A:9A:15:C9:15:C5:F6:57:66:BD:68:63:99:F5:8C:6E
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer:       /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial:       01A0D200697B8619F4162E26FB418A176786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number:          19FE
Signing time:             Thu 24 Sep 2026 06:00:37 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:37 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:37 +0000
Files and hashes:         1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
                          2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: WZnABWGC8oflY2Ej88ahwBTvbLXOM39clSuB7AGmPJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:69:7b:86:19:f4:16:2e:26:fb:41:8a:17:67:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
        Validity
            Not Before: Sep 24 06:00:37 2026 GMT
            Not After : Sep 25 06:00:37 2026 GMT
        Subject: CN=b3cf3e033a9a15c915c5f65766bd686399f58c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:0e:16:f7:f2:54:3e:b8:79:e4:49:5d:98:
                    10:cf:60:bc:dd:f6:87:ff:3c:92:d2:7b:b0:22:82:
                    79:9f:2f:49:b5:dc:22:92:0c:49:d5:96:dd:fd:7b:
                    d0:2e:1f:bd:98:8e:38:69:6b:46:aa:cd:79:a4:43:
                    78:83:3b:d6:b2:32:83:0c:cf:09:c0:a5:75:b7:dc:
                    b8:d7:2f:31:14:ee:13:f7:6c:4d:54:ba:6d:fd:b8:
                    c2:54:d0:59:7f:6c:72:52:81:c3:7b:61:db:53:a3:
                    29:ce:31:73:8a:2b:62:82:48:11:2b:03:31:27:da:
                    02:94:0b:72:08:92:00:f2:4c:58:1e:50:a6:46:74:
                    b0:eb:df:9a:5b:74:fc:ae:29:f6:f9:03:a0:9b:5a:
                    cf:23:2b:6b:83:1b:ae:94:24:c8:0a:75:b1:1c:73:
                    cb:c5:46:39:b5:d4:15:d2:5b:40:de:46:74:00:20:
                    e8:9a:d3:2b:97:b6:6e:c2:34:1e:26:ef:51:4c:84:
                    b6:56:e4:6b:a1:81:3e:56:25:63:bf:2f:63:e4:bf:
                    7e:84:2c:68:5d:12:76:6f:74:05:fd:cf:ce:c0:f6:
                    05:da:75:b2:90:1d:be:2c:f3:fd:50:94:f6:e2:9a:
                    f6:43:04:27:18:3b:b7:59:54:35:33:8c:b6:2b:2d:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CF:3E:03:3A:9A:15:C9:15:C5:F6:57:66:BD:68:63:99:F5:8C:6E
            X509v3 Authority Key Identifier:
                keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:de:64:aa:cb:cb:98:50:72:24:03:e9:c3:f8:5e:15:31:c1:
         7e:79:0d:f1:0c:cc:5f:b0:cf:8c:12:dd:aa:fc:1d:4d:3f:4c:
         ef:f4:1f:31:88:ec:50:b7:7a:82:6f:63:65:b1:68:be:4f:79:
         c7:f7:c2:6c:f2:c5:2d:f4:b2:d7:d5:a8:16:1a:bb:e8:0e:a8:
         55:55:2f:05:5e:75:cc:60:f4:76:bf:82:92:8d:93:80:ba:e5:
         1f:6b:56:ab:16:13:3a:3d:b3:e6:ea:c0:bd:f6:ef:e5:0c:45:
         59:83:e4:a0:94:10:bd:86:2e:15:fd:93:d3:d4:93:15:33:b7:
         e7:b6:33:7d:83:2c:f8:00:b9:d7:3e:75:a6:ce:ce:91:2c:09:
         67:74:23:82:9a:f7:bf:a4:f4:ca:39:05:8b:28:78:cb:67:05:
         ac:c9:b8:6e:59:fb:9b:e5:ec:84:db:a9:a9:e1:cf:cf:c5:d2:
         78:bf:63:be:58:72:70:db:da:65:96:9e:1c:7e:17:da:a2:b7:
         f5:97:8a:a4:4d:6a:ff:2c:f2:da:ea:cb:51:9f:76:51:c3:50:
         6d:e7:4d:c4:a0:b4:77:04:e9:78:1e:3d:e9:e2:24:65:27:63:
         15:b6:bf:36:f6:56:2f:db:33:91:7b:ed:44:f8:b7:97:92:1c:
         d7:55:e8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAGl7hhn0Fi4m+0GKF2eGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4
ZTNlYjkwHhcNMjYwOTI0MDYwMDM3WhcNMjYwOTI1MDYwMDM3WjAzMTEwLwYDVQQD
EyhiM2NmM2UwMzNhOWExNWM5MTVjNWY2NTc2NmJkNjg2Mzk5ZjU4YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfEOFvfyVD64eeRJXZgQz2C83faH
/zyS0nuwIoJ5ny9JtdwikgxJ1Zbd/XvQLh+9mI44aWtGqs15pEN4gzvWsjKDDM8J
wKV1t9y41y8xFO4T92xNVLpt/bjCVNBZf2xyUoHDe2HbU6MpzjFziitigkgRKwMx
J9oClAtyCJIA8kxYHlCmRnSw69+aW3T8rin2+QOgm1rPIytrgxuulCTICnWxHHPL
xUY5tdQV0ltA3kZ0ACDomtMrl7ZuwjQeJu9RTIS2VuRroYE+ViVjvy9j5L9+hCxo
XRJ2b3QF/c/OwPYF2nWykB2+LPP9UJT24pr2QwQnGDu3WVQ1M4y2Ky0J8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPPPgM6mhXJFcX2V2a9aGOZ9YxuMB8GA1UdIwQY
MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt
MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm
LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA95kqsvL
mFByJAPpw/heFTHBfnkN8QzMX7DPjBLdqvwdTT9M7/QfMYjsULd6gm9jZbFovk95
x/fCbPLFLfSy19WoFhq76A6oVVUvBV51zGD0dr+Cko2TgLrlH2tWqxYTOj2z5urA
vfbv5QxFWYPkoJQQvYYuFf2T09STFTO357YzfYMs+AC51z51ps7OkSwJZ3Qjgpr3
v6T0yjkFiyh4y2cFrMm4bln7m+XshNupqeHPz8XSeL9jvlhycNvaZZaeHH4X2qK3
9ZeKpE1q/yzy2urLUZ92UcNQbedNxKC0dwTpeB496eIkZSdjFba/NvZWL9szkXvt
RPi3l5Ic11XoRw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:27:29 2026 by rpki-client