Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          IRzzktFvVCuMooWoaBHCh4Y52fAxYUIFbZ0fo1gxQks=
Subject key identifier:   DD:2F:9A:B1:5B:7F:9F:22:3A:FC:58:D8:84:EC:99:FA:0B:F8:D5:22
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       01A0E5F5999F22F188B6435B85A46F1FDF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          19CD
Signing time:             Mon 28 Sep 2026 03:01:12 +0000
Manifest this update:     Mon 28 Sep 2026 03:01:12 +0000
Manifest next update:     Tue 29 Sep 2026 03:01:12 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: mLsU2kxhSK8j3yeOdH8NWAM7WpoATvgDW/B/HnP6nEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:f5:99:9f:22:f1:88:b6:43:5b:85:a4:6f:1f:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Sep 28 03:01:12 2026 GMT
            Not After : Sep 29 03:01:12 2026 GMT
        Subject: CN=dd2f9ab15b7f9f223afc58d884ec99fa0bf8d522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:49:42:33:ac:48:cd:ab:ab:37:a1:1a:06:
                    22:e4:cb:f4:c2:90:14:8b:6f:ec:55:b5:22:71:e5:
                    8d:d1:f2:31:49:94:18:3a:bf:42:b2:0a:f4:2b:89:
                    7d:f2:a8:93:5b:a1:ec:b5:73:95:96:7a:56:b3:b5:
                    31:2d:cd:17:e4:50:b6:28:7d:06:4c:46:10:67:65:
                    1c:4e:e6:48:18:45:f5:3c:aa:59:af:10:c4:53:01:
                    a9:c7:62:1f:61:d4:f8:74:eb:b7:0a:7d:f7:bd:a0:
                    5f:8c:40:83:a4:bc:25:34:2c:c7:14:af:76:82:3a:
                    f1:5e:a9:06:0e:5d:a1:a7:93:f6:a9:1b:ca:78:99:
                    ed:ec:c9:f1:b0:10:44:41:ae:82:4d:e5:12:7c:6a:
                    46:08:09:1e:59:8e:f6:50:5d:d5:86:62:7d:8b:63:
                    f1:89:89:04:07:05:9d:02:f5:ef:1b:11:83:53:68:
                    29:ba:37:5b:e7:a6:85:fa:b6:6d:e4:b5:9c:c0:b1:
                    7d:e7:be:0f:a7:a4:dc:a1:87:b9:d2:96:0b:01:54:
                    cf:b7:52:ea:31:9c:b9:3f:54:75:4a:5d:c8:09:05:
                    db:64:8a:7e:e2:d3:76:cb:ab:15:a0:b2:56:9e:56:
                    da:a3:64:04:07:0b:18:4b:11:04:2b:b8:f9:e6:23:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2F:9A:B1:5B:7F:9F:22:3A:FC:58:D8:84:EC:99:FA:0B:F8:D5:22
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:24:01:55:6a:73:e1:a9:99:5d:76:8c:b8:08:a1:ba:f7:1f:
         6c:69:22:38:4d:07:44:0c:f2:3e:71:18:90:ff:f0:65:e0:da:
         d2:5a:38:35:1c:5e:ac:bd:2e:a2:fa:8f:db:b9:c8:71:b0:c9:
         5b:b1:83:66:37:0d:15:0a:ce:bc:85:24:71:cb:17:42:83:90:
         74:0b:68:43:cf:6b:f9:db:b1:41:42:7f:cc:44:1d:cb:53:f0:
         e7:01:07:85:57:5d:73:e6:82:08:36:fe:a1:1a:29:8e:4d:18:
         a0:26:6a:21:f4:02:3f:28:2f:a7:e0:d0:76:11:56:71:61:d5:
         1a:19:89:91:8c:ec:f6:99:19:cd:b5:aa:02:4a:cd:42:79:80:
         a0:63:b5:c1:13:b2:fb:f1:de:ad:86:64:11:69:a4:4a:81:ae:
         3f:b7:52:bd:86:d8:fd:7c:3c:66:f2:98:81:b4:0c:8c:cc:f4:
         6b:27:37:99:b7:93:34:80:fc:99:36:43:3c:ec:45:05:19:e7:
         03:ef:46:66:41:e5:4b:0a:0f:ed:9c:55:f3:b5:8d:ad:d3:09:
         ce:80:d4:7a:02:d1:7c:7b:d1:38:ef:85:05:91:06:dd:dc:18:
         33:2d:1e:9f:11:e8:f0:d9:5e:ce:f8:8e:4a:df:21:61:77:16:
         88:b8:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:38 2026 by rpki-client