Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          SxIzJ5+HfS1/3MQziqA6xIef03ReLNogmUlutLLKPaU=
Subject key identifier:   6F:B4:60:72:C0:20:FF:0D:81:40:17:2B:E5:95:9E:2E:9E:C0:7C:C5
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       01A0E0988DDDE5229ACA96DAED05011CB6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          067B
Signing time:             Sun 27 Sep 2026 02:01:29 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:29 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:29 +0000
Files and hashes:         1: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: vLdwSpUmQqPTLl2qIAn13TnzikU3wGYhbDI33UyP9d8=)
                          2: pz4XEwrMbdg_cx_AdmXuju5dUJo.roa (hash: oHNUzHLoaTml1g0VmhwxJ9UogXzKrXPobmrpdng65ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:8d:dd:e5:22:9a:ca:96:da:ed:05:01:1c:b6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Sep 27 02:01:29 2026 GMT
            Not After : Sep 28 02:01:29 2026 GMT
        Subject: CN=6fb46072c020ff0d8140172be5959e2e9ec07cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:54:38:a7:80:a8:b0:7f:40:2d:e2:03:6c:
                    eb:fc:6b:f8:3b:c6:85:dc:de:d6:5e:cf:8f:3d:5c:
                    1f:a5:eb:de:64:75:79:97:ae:82:81:e7:cb:0e:79:
                    74:9c:88:78:28:fd:1c:fa:53:74:34:0d:9b:c7:79:
                    1a:5d:85:74:d0:4e:95:3f:11:a8:6f:1c:25:1a:66:
                    79:f8:43:c1:1e:4f:93:72:99:f2:81:25:df:2f:7c:
                    a1:68:1c:39:1c:df:bd:f1:f9:3d:8c:ea:d1:fb:8d:
                    a5:a6:97:67:95:6f:d8:72:44:cb:3d:04:a8:5a:69:
                    bc:9d:a7:cf:40:44:5a:79:e1:64:3e:cb:a7:fa:81:
                    d7:82:71:4a:d5:24:80:76:fd:6e:b7:f9:7d:9b:aa:
                    fc:f9:2d:e7:0f:21:95:c4:90:a7:fc:14:4d:4c:78:
                    38:9f:a1:bf:6b:3a:e5:82:eb:72:de:ba:c6:cc:ca:
                    00:8b:53:98:ad:d3:2e:57:fa:d9:13:5e:b7:bf:31:
                    31:56:1a:c3:91:89:f2:9e:26:ae:c2:68:b9:26:d1:
                    e4:b1:da:f2:62:04:99:16:ef:44:c1:e1:ee:a9:b5:
                    72:e6:db:92:c5:a5:ff:37:09:b2:8c:6d:5d:fe:25:
                    b7:53:56:5f:cf:c1:4c:92:62:1a:6a:70:fb:ef:6e:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B4:60:72:C0:20:FF:0D:81:40:17:2B:E5:95:9E:2E:9E:C0:7C:C5
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:0e:86:b7:ea:ef:fd:29:04:d8:45:1e:18:7e:56:f7:b9:
         ad:01:95:90:c2:a9:56:be:52:db:0d:fe:6c:68:a7:04:33:74:
         16:e8:cd:41:df:ba:1c:10:ab:8c:29:01:cf:ea:93:9e:fc:49:
         69:a5:fc:58:d9:e4:fd:bf:a0:02:f4:13:67:c9:7f:4a:ed:6c:
         b6:49:38:f8:d2:8d:bd:76:0e:4d:f6:0a:0b:91:e9:19:da:dc:
         71:8f:a1:6f:f2:49:b4:d3:7e:4e:20:9c:0f:29:04:7e:85:c4:
         33:44:22:4f:e2:9b:77:26:10:d6:c1:7d:b0:26:96:19:02:53:
         92:2a:4c:00:21:d3:ef:75:81:56:14:32:49:12:8f:af:07:80:
         8a:09:a5:9c:36:72:93:17:15:9d:b3:de:16:a0:e3:96:71:a5:
         99:e7:3f:5a:95:74:60:be:0f:2d:af:2a:44:1e:62:23:f8:d4:
         8c:f6:82:7f:f1:25:ba:d3:03:67:ca:25:72:ed:e5:93:ca:62:
         85:1c:fd:12:cc:ff:9f:85:c0:52:fb:a7:49:1a:a3:0b:6b:22:
         8b:e6:19:48:cd:b2:40:77:14:5c:a7:ce:32:d0:7e:fe:b2:b9:
         de:c7:4e:f7:ac:96:d6:84:70:86:f0:6a:94:37:3d:c4:09:15:
         10:cd:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:45:57 2026 by rpki-client