Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File:                     LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier:          HvhyUgpIbf8zTgzxcdTMl0TmWhb9/oKe0c1Oa/2NvuI=
Subject key identifier:   03:65:97:7C:95:1D:62:36:9C:86:32:3E:5F:D9:21:0C:3B:AA:FF:BF
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer:       /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial:       019D2884658AE64E0A43E2CE84E8202780C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 05:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:58 +0000
Files and hashes:         1: L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa (hash: +Gwjcjom9pqLSyIZJDE+ooi9DSzl5I6UWWhpsWsU6XE=)
                          2: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: eRldmpmZj6Fzd3WHOMpzwB1WBmljQPZ38QnqjdnKhkc=)
                          3: RtXoXW5dRgaOApOfO1ZJckphPdA.roa (hash: YTilLPT9OVAklz8VhwrR7q/NmO3vhbipLLdXbu+OrYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:65:8a:e6:4e:0a:43:e2:ce:84:e8:20:27:80:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
        Validity
            Not Before: Mar 26 05:00:58 2026 GMT
            Not After : Mar 27 05:00:58 2026 GMT
        Subject: CN=0365977c951d62369c86323e5fd9210c3baaffbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:64:d2:f1:26:e1:41:0f:f6:25:2a:86:87:
                    f7:b3:77:de:dc:d3:3b:1c:7e:2e:f2:3c:59:7c:cb:
                    ca:58:5e:21:ad:03:4b:9a:a5:04:58:78:ff:59:97:
                    2b:22:54:dc:3c:f1:c3:85:f9:4c:8c:96:1d:7a:9f:
                    1e:20:0d:4a:13:f6:4f:15:9c:57:63:1a:13:fa:13:
                    26:42:39:d4:46:26:69:f3:86:cc:0d:7c:44:f6:6d:
                    8c:35:9c:79:6d:a7:7d:8e:b1:00:c6:5e:b6:9e:c1:
                    81:79:c1:d8:a0:00:c1:4c:3d:82:fb:4d:e9:33:ea:
                    2a:c3:c2:b4:38:c5:23:b3:22:4c:ed:04:ed:dc:fd:
                    bc:72:79:b9:c3:0c:91:ce:b7:5a:21:d7:26:d3:f5:
                    bf:78:cf:99:d7:58:1f:91:b2:ba:4a:7b:95:c3:41:
                    3f:2c:88:0d:3d:ac:a9:07:c2:78:62:54:ed:7f:03:
                    7f:e4:55:ab:85:58:37:6c:1f:f3:58:9a:90:8e:e7:
                    40:0f:44:64:3c:cf:b5:20:37:04:cf:4a:9f:67:bf:
                    92:99:75:c0:4a:f5:e4:24:14:f2:e5:ca:30:79:6c:
                    bf:96:5d:12:dc:cc:6d:0f:c7:68:80:c5:ee:ac:d8:
                    39:e2:32:9b:4e:3e:24:33:f8:f0:2c:23:93:c6:fc:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:97:7C:95:1D:62:36:9C:86:32:3E:5F:D9:21:0C:3B:AA:FF:BF
            X509v3 Authority Key Identifier:
                keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:e0:7a:63:ab:55:45:09:34:96:ae:36:c1:b1:b9:b8:9d:
         f5:f8:c3:5e:79:1f:26:9a:a5:5a:30:4b:ba:8a:e1:01:54:5f:
         6d:18:76:9a:f0:90:d5:91:fe:6f:43:1c:9f:5e:7b:13:6a:26:
         97:a0:33:9f:c0:c8:6e:78:33:10:bd:e3:b5:98:4e:c3:7b:5f:
         1c:27:44:5f:d6:21:9e:53:31:8f:a6:2c:61:c1:9c:76:21:69:
         d7:55:c2:cd:8a:7f:37:b0:17:f5:74:8e:46:28:a5:4e:d8:65:
         1d:97:28:27:b8:71:69:10:c9:99:31:88:dc:c1:16:40:1d:88:
         1b:28:bf:2e:3c:00:d2:b6:ed:ff:37:c7:97:08:ba:c1:c6:30:
         07:51:25:2c:55:cf:d5:87:91:84:7b:69:e5:62:f2:91:aa:14:
         d5:4f:40:08:2e:58:74:10:7e:aa:bc:c7:2b:df:52:fb:33:f7:
         cd:a6:6c:a0:cf:9a:3f:c5:13:0c:70:71:d7:3c:78:74:2b:b1:
         cf:70:9f:d2:bc:db:37:6d:d7:42:59:66:03:43:85:cb:b1:4d:
         f0:f8:ba:11:6e:4d:12:b7:dd:87:7c:69:73:89:05:e1:cf:a7:
         c8:dc:af:b5:95:07:ec:83:c0:41:5e:4b:11:5a:e2:85:00:38:
         68:0f:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:17 2026 by rpki-client