Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File:                     LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier:          KjbEgn75VIBfroxmOOaVNw3+yUV0oIa3Es9uQoB5dfg=
Subject key identifier:   11:8E:75:BB:B4:4A:8E:E6:49:38:C4:A3:98:55:3B:EB:3F:5C:FA:F9
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer:       /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial:       019F9248C3AF6AEEB1BA965750E3BAA0B321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number:          0F8F
Signing time:             Fri 24 Jul 2026 04:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:09 +0000
Files and hashes:         1: 5qdQSXMecDihyNRRqtb0g1GYQQM.roa (hash: TGfWFcxitE8Z9AQAzw+iDeKkGzeTKjsma5tXWrC3vTk=)
                          2: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: WCqaBYRZoWlzrnl5tlbU/ItM+5RJuGUhslh1ncKl5gE=)
                          3: RJ4Jr5ARvg8uzwT__ax2jQCYRoU.roa (hash: iIWthZznSIIagTpHDFsUxljMcVGImDYRq7Y0D9Bst2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:c3:af:6a:ee:b1:ba:96:57:50:e3:ba:a0:b3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
        Validity
            Not Before: Jul 24 04:01:09 2026 GMT
            Not After : Jul 25 04:01:09 2026 GMT
        Subject: CN=118e75bbb44a8ee64938c4a398553beb3f5cfaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:56:e9:1d:07:bf:b4:d8:da:bb:4b:57:10:
                    34:fd:55:1d:ff:7e:45:26:f1:e7:28:e6:8f:a3:a8:
                    9e:32:aa:75:50:a9:7e:24:82:06:f4:78:5a:fa:2b:
                    77:1d:d7:6c:30:93:4c:91:22:b7:98:73:36:f3:19:
                    d7:ea:0f:26:a5:36:a7:c9:c6:d3:88:7a:f8:0c:e0:
                    a5:f1:b4:1f:e4:68:83:eb:97:06:a8:69:41:ae:d4:
                    3b:74:1b:85:72:13:cd:5e:1b:20:80:a4:0f:a7:28:
                    95:b6:bd:7b:30:61:f8:46:ee:8e:92:e4:6c:69:08:
                    55:44:5a:b6:ea:41:1f:0e:58:10:3d:3c:29:a2:9c:
                    e9:f7:41:e2:e4:ab:a5:b2:8d:68:2a:44:b0:6e:d7:
                    6f:f0:de:39:93:fd:8f:e0:73:45:5e:6f:ff:3c:dd:
                    0c:e5:2c:2b:74:fc:2d:6f:a6:2a:2a:ed:f6:41:b5:
                    9d:27:dc:a3:22:a2:51:98:58:d0:68:09:10:bd:39:
                    49:2f:19:59:f4:97:cd:df:f8:25:91:c1:00:8b:e5:
                    82:1d:9b:2b:7e:0c:01:08:5e:39:6b:97:80:14:bf:
                    54:b3:39:5b:9b:2d:e1:04:ff:e3:3d:e8:db:5b:c3:
                    27:b5:83:e8:98:28:63:ed:26:d1:a6:6a:f0:d1:74:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8E:75:BB:B4:4A:8E:E6:49:38:C4:A3:98:55:3B:EB:3F:5C:FA:F9
            X509v3 Authority Key Identifier:
                keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:40:4d:24:3c:64:64:6c:75:fb:29:18:02:ac:6d:29:0e:
         74:f7:4c:08:13:a9:d9:2b:c3:7f:bf:85:c5:96:19:29:52:43:
         32:2f:68:4e:bb:d4:59:b6:92:15:cf:c3:eb:b5:f5:95:d5:97:
         b5:42:e5:aa:4f:99:06:c8:d4:61:fe:40:df:21:6c:a7:51:6c:
         ac:2e:19:30:8e:9a:09:89:25:6a:1a:11:d1:12:5b:3e:08:5b:
         d1:f4:a6:2a:62:98:76:6d:29:66:ed:db:77:38:b0:50:f8:70:
         44:c2:3f:79:a8:a4:1f:82:c5:22:06:99:a7:43:e4:bd:ff:3a:
         bd:31:f2:a2:98:81:2c:38:3f:26:95:2a:64:6e:6b:c4:d2:89:
         a7:5d:b1:22:fa:68:26:9a:a1:d7:65:4f:6d:f9:e5:81:ff:d3:
         ed:88:3d:82:07:68:a7:a1:22:27:76:be:09:4b:ff:06:e4:1a:
         b7:c6:aa:48:e7:04:ef:a8:2c:70:af:bf:72:ec:98:db:35:bf:
         7d:85:9f:d0:0b:96:ee:d6:0f:a0:33:22:07:8a:39:3f:75:01:
         2e:bc:c4:96:e0:2f:2e:15:5a:e3:7b:91:f5:f3:e4:c0:58:49:
         08:c4:0d:19:d1:78:e1:c4:50:58:55:46:64:7f:30:39:ce:44:
         cd:f0:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:18 2026 by rpki-client