Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          7ZwXuPfYQIQzvKhUqAVe33z2bGoKOfJPIY9bIRE857c=
Subject key identifier:   61:C1:46:BF:52:A0:7D:BE:FC:3C:60:D2:32:D6:30:F6:5E:01:CD:F7
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       01A0D760181DE3BE4BE8118ED6573DFBCE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 07:03:14 +0000
Manifest this update:     Fri 25 Sep 2026 07:03:14 +0000
Manifest next update:     Sat 26 Sep 2026 07:03:14 +0000
Files and hashes:         1: Dl93bq_-cgvRcw-PhtUvvM6vei0.roa (hash: c9+943kBN1nH/iz48xI8TW6h5ATYqwjyAVBz6mPrBUM=)
                          2: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: tnr672Zl3htg36RzzBjIdrPMdorKg8Dl00JZhWnPOFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:60:18:1d:e3:be:4b:e8:11:8e:d6:57:3d:fb:ce:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Sep 25 07:03:14 2026 GMT
            Not After : Sep 26 07:03:14 2026 GMT
        Subject: CN=61c146bf52a07dbefc3c60d232d630f65e01cdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:d5:fb:95:f6:c9:08:19:68:07:55:38:2f:
                    b6:fe:7a:b4:85:fc:19:79:46:8f:ef:2e:12:34:a1:
                    c7:46:dd:49:64:09:3b:36:d5:08:c6:59:08:ff:31:
                    99:3d:78:5b:37:be:be:87:2b:5f:e5:9c:00:53:88:
                    17:bb:9c:fa:fd:e1:c8:2e:29:8d:ac:ec:d2:2a:94:
                    85:95:b4:93:f8:43:fd:a0:9c:3a:e3:99:1b:91:69:
                    40:fb:5c:3d:10:fa:51:c3:26:19:9e:d8:60:83:80:
                    3d:34:ba:8f:a0:71:00:2a:44:8d:5d:ec:99:05:11:
                    e9:74:37:4e:82:f7:39:ac:4a:32:12:4d:c0:a8:01:
                    a3:f0:de:c3:d4:00:b1:ce:87:f2:8f:87:c9:97:df:
                    a0:8c:40:98:d8:be:ef:57:d2:91:25:0e:28:ec:2f:
                    9c:87:d3:a5:7b:f9:04:c9:6d:f5:df:68:fb:cc:4d:
                    ee:7b:a0:9b:7e:b9:a7:98:fa:71:c2:2e:80:2e:70:
                    ef:7b:38:80:61:02:87:35:64:a5:a8:72:46:ce:42:
                    b1:0d:56:26:3a:67:6b:5a:d5:e9:6f:55:e7:d2:be:
                    17:be:31:94:bd:43:e8:01:7b:28:fa:4d:c3:ef:45:
                    c2:2a:44:06:6a:27:dd:a1:0f:15:b7:10:e0:9a:8d:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:46:BF:52:A0:7D:BE:FC:3C:60:D2:32:D6:30:F6:5E:01:CD:F7
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:4f:b1:07:4b:2d:2d:43:4e:d4:5e:54:ee:35:a1:0f:fd:
         44:e2:70:93:ec:7b:e4:1d:d3:f7:5e:4a:21:65:f8:c5:6c:69:
         24:b7:54:83:67:f4:ca:d3:49:32:6a:a2:93:46:d4:20:23:b0:
         e0:01:2e:4c:1b:78:29:62:84:df:6a:af:ed:a4:90:09:aa:2c:
         9d:9f:b1:0c:81:9d:c6:4f:ee:18:10:14:13:3a:f9:e0:7e:af:
         35:42:e8:94:ec:75:86:0e:9a:a3:10:31:42:22:c1:04:01:c0:
         0b:0f:57:4d:24:de:eb:68:e0:9e:79:9e:64:0a:d8:17:4c:00:
         1b:64:5f:71:97:6e:07:4f:a4:79:03:bb:47:da:5e:67:45:b7:
         d9:61:8f:ef:65:c4:a4:b5:df:43:70:fd:4d:71:e3:3e:69:ab:
         2d:1a:60:92:26:01:5b:0f:e6:cc:82:8c:06:a9:0f:f2:e1:16:
         23:11:9a:6b:46:15:0f:6f:cb:e1:89:5e:36:26:0e:a6:73:bf:
         b1:d7:0f:b6:3e:7c:6f:fa:2e:24:29:35:a0:91:60:e0:9c:09:
         96:4a:bf:84:7a:67:5a:ad:04:c0:ec:43:d6:32:bb:e4:8e:f8:
         dc:4a:91:e4:90:13:96:11:15:7f:6a:36:09:09:37:8b:24:e6:
         ea:23:eb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:51:21 2026 by rpki-client