Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          6q3eB12w2967Ru37+jjBCCl+p0gaFJKaBLDLZZ1d3Do=
Subject key identifier:   24:4C:C9:20:A2:08:57:40:6C:E3:D5:A7:3B:C4:7F:C2:DB:D3:C1:B2
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       01A0D8DF50C032395940C5BE5216BB828CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          0875
Signing time:             Fri 25 Sep 2026 14:01:48 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:48 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:48 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: IvC7BUSecrJ3fzk32+dfMgAtrUqVdSo0tQ2pShF9Ew8=)
                          2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:50:c0:32:39:59:40:c5:be:52:16:bb:82:8c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Sep 25 14:01:48 2026 GMT
            Not After : Sep 26 14:01:48 2026 GMT
        Subject: CN=244cc920a20857406ce3d5a73bc47fc2dbd3c1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:d5:e3:30:4c:68:29:46:38:45:a8:64:fc:
                    ae:58:d3:00:7b:7b:53:8f:25:ac:86:10:e1:02:1f:
                    56:15:09:a2:19:4f:e7:90:e0:18:39:a7:52:66:2d:
                    c7:7b:bd:e0:65:ce:c4:36:57:d5:ed:e2:88:90:b6:
                    4f:60:fe:b0:98:2e:46:cd:a8:e3:db:f4:39:fd:b9:
                    38:04:43:33:9f:0f:36:0c:fb:d6:e5:01:98:f8:f8:
                    8d:e5:09:fc:3a:85:f9:59:a2:f1:32:ac:26:89:2b:
                    6c:63:c6:70:82:45:7c:21:08:f8:78:f6:06:86:0c:
                    94:ce:64:63:4f:a4:dd:f4:44:a1:f6:f4:87:0c:7f:
                    ce:3b:1d:e8:50:63:73:5f:7b:10:c9:93:1f:d6:7d:
                    2c:0a:93:f3:3b:18:cf:43:97:50:f7:56:c4:e5:db:
                    12:27:01:3d:b9:40:49:0a:22:74:19:9e:39:c1:d7:
                    32:21:d3:25:e9:34:19:c9:9f:7a:16:df:97:b4:1d:
                    a6:b2:03:73:bb:33:4a:47:b4:d6:8c:33:79:ec:8b:
                    4e:89:64:5e:69:93:67:60:8a:07:f7:48:fe:18:e6:
                    c8:82:dd:9a:45:0e:9a:2d:dd:ae:44:97:30:e5:f9:
                    ed:e9:47:70:66:13:0d:ff:35:c1:52:c8:4e:a9:a1:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:C9:20:A2:08:57:40:6C:E3:D5:A7:3B:C4:7F:C2:DB:D3:C1:B2
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:85:da:f2:48:b0:48:63:94:d7:fa:6f:e2:e4:e3:d0:83:
         e8:ac:7a:09:e0:2d:d7:bc:84:71:57:67:39:f8:f2:23:10:27:
         11:df:76:3c:2d:d3:45:bf:2d:aa:62:bb:b3:79:43:0e:7e:d1:
         22:10:a6:a8:e3:e9:c1:e2:00:50:ea:fd:cc:dd:74:5c:d4:af:
         50:76:20:19:48:9d:04:e0:dc:4c:a9:2c:c8:52:d8:2f:67:13:
         52:62:13:41:5d:a4:e8:04:e8:46:d8:9b:25:fe:87:ce:27:eb:
         51:ff:66:90:1f:4a:72:18:fa:d3:5f:21:49:a4:cc:1f:7a:7c:
         ed:d9:2a:73:f2:5b:b6:62:6c:48:ba:81:c6:60:b0:1f:60:b5:
         ce:a7:2d:eb:3d:39:d3:b3:ed:35:bf:9a:23:66:c6:cc:a8:d3:
         f3:9d:1b:4c:16:df:5f:b3:01:82:5b:18:db:6f:d0:24:f5:14:
         86:9b:bf:cc:63:b3:cf:b8:21:52:01:52:f7:64:e0:ea:e3:5d:
         f4:1e:f8:6f:4a:57:9e:29:48:f6:30:14:53:32:d3:fe:9d:63:
         72:35:bd:84:8d:b7:4c:5e:0d:70:94:1e:4b:42:71:4d:23:8b:
         13:ef:98:1e:2b:f1:53:a5:d4:6b:7c:38:e3:34:f1:3c:f2:d2:
         36:5d:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:27 2026 by rpki-client