Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File:                     lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier:          BJKHMeDSgonoXXEuOSPqZ3PtP+ueHeGjE2i3E1icQvg=
Subject key identifier:   CE:0E:19:04:4F:2B:1E:C4:0D:90:D8:19:24:1D:AD:5B:B1:2F:CE:F4
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer:       /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial:       01A0EF2FC130E48AC6DC7C0549AF160BD5FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number:          0669
Signing time:             Tue 29 Sep 2026 22:01:19 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:19 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:19 +0000
Files and hashes:         1: 1n7UaGQqcjlKc-RwheHn58VAL2g.roa (hash: LsStmQogy/wtEZhVT3UaRq1oPn/P6s0GMZ58Y7YS8GQ=)
                          2: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: vKI9Wmg1Q/+t2GEG4u7VDdEkt9S7eX0YmFEom3QaGuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:2f:c1:30:e4:8a:c6:dc:7c:05:49:af:16:0b:d5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
        Validity
            Not Before: Sep 29 22:01:19 2026 GMT
            Not After : Sep 30 22:01:19 2026 GMT
        Subject: CN=ce0e19044f2b1ec40d90d819241dad5bb12fcef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:25:54:a9:27:29:98:8e:f6:43:b4:86:1e:
                    a3:d5:0c:21:64:ec:68:7c:9c:44:e6:05:c5:e8:bc:
                    d5:9e:21:0b:2c:20:b0:c8:47:59:45:59:52:65:64:
                    d6:c1:b5:bb:3f:34:a6:64:ce:9d:3e:65:fe:5e:bb:
                    10:c3:f4:f6:ab:01:81:6e:30:d5:20:91:20:cb:e9:
                    4f:bc:8b:b1:7b:ba:22:8a:dd:6a:54:0d:fe:63:b1:
                    91:34:7e:e1:44:5f:fc:d8:ae:66:07:9c:bb:41:77:
                    ad:ba:ca:ab:86:98:6c:5b:18:5a:0a:72:cc:c0:6f:
                    6b:21:5f:c9:b9:a9:a6:59:6f:7c:30:8f:2e:1f:5c:
                    a9:1d:1b:2c:df:a0:36:21:24:e9:04:a0:f1:13:d2:
                    4d:8b:33:98:eb:ae:a7:e1:3f:dd:71:f5:0b:9d:cb:
                    85:76:9e:d5:8e:a9:ee:70:c7:5c:e0:eb:13:c7:b6:
                    2d:99:72:43:06:3e:78:a4:a1:97:6c:73:af:de:f6:
                    04:7e:5b:54:1e:77:2e:02:0f:0e:16:59:73:7b:4b:
                    43:55:f2:29:46:fc:d5:42:08:9e:ce:96:f6:b6:2c:
                    ca:ec:47:67:ba:f3:cf:bc:3a:e4:60:af:b0:79:6e:
                    da:6a:15:22:17:fa:cc:05:c4:e7:83:83:e7:bd:6b:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:19:04:4F:2B:1E:C4:0D:90:D8:19:24:1D:AD:5B:B1:2F:CE:F4
            X509v3 Authority Key Identifier:
                keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:96:a9:62:04:54:95:94:a4:0f:eb:b3:c7:67:81:1d:1d:6e:
         56:ed:b6:fd:18:d3:ce:13:07:bb:7c:3c:3f:c4:e9:61:bb:a0:
         17:cd:7b:c8:c6:92:8c:30:96:bc:b7:a0:43:15:17:b1:10:3e:
         06:3f:59:28:fc:20:2b:a0:32:c9:c1:df:da:44:3e:79:70:83:
         55:eb:44:d6:61:bc:79:01:61:01:25:e7:c8:03:11:29:a2:73:
         fb:e2:6f:ab:38:ba:24:66:66:12:83:85:ca:ee:96:d6:8f:d5:
         8a:6f:8f:23:6a:32:55:ef:92:90:ab:ab:19:de:2c:7a:ce:d7:
         8f:e1:13:d3:1f:8a:77:de:58:59:70:b9:7a:e8:82:56:1a:fb:
         61:02:0b:86:5a:b8:63:4b:fb:d4:f0:27:83:1f:98:7b:fc:e6:
         a3:05:4f:b2:31:a6:84:d6:56:50:51:99:0f:ec:f9:2b:8d:29:
         ee:52:15:80:39:97:cd:59:5e:32:8c:ba:e6:1b:93:48:86:d8:
         20:79:fe:b1:aa:81:2f:af:f5:a1:f1:d6:74:61:32:1a:1e:bf:
         68:c7:8f:36:87:f6:7d:67:57:47:2e:cb:34:c2:05:66:c2:63:
         33:c6:d1:24:24:12:c3:43:c6:81:84:0a:6b:a2:bf:ab:30:b7:
         d0:e3:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:24:14 2026 by rpki-client