Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          vVByHBW2TqySYXhw2pYJifsdMuarTsAHcX5+nuzjFdo=
Subject key identifier:   BC:DD:2D:82:74:E2:38:F7:58:56:05:8E:DF:B4:A9:C7:D0:56:57:DA
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       01A1743935C44D96AE3280D434EACCDD8756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0B79
Signing time:             Sun 25 Oct 2026 18:01:08 +0000
Manifest this update:     Sun 25 Oct 2026 18:01:08 +0000
Manifest next update:     Mon 26 Oct 2026 18:01:08 +0000
Files and hashes:         1: 99amBODsi9s5b9k8-QBJkKF-3q4.roa (hash: OHHvjBhCrGH4FeeziC6XYn1JSgPeAHm7eeCU0qJDW20=)
                          2: EPLdVGqgndROjM1h4IO_FWuwnaY.roa (hash: /YB21bOG3+IaQBnf7/CbNsMYZ3z/ogc3ZIoAgo5ItaU=)
                          3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: szR6nhWydgnOcstwd66J/6trm8jMmCTkmD362IBGd0o=)
                          4: UjuNFxeX8fazTAfeX2snVIKavtY.roa (hash: k2bGDOF8FeZvoCzGHZtaXm0p6TSR5w0hxHzqhmBjQ+A=)
                          5: fbal2Br98lSXtg0RnGPPTjowGa0.roa (hash: RIojxTuuDh3dUT1tXWggbfWitD+sBxAZGS6Rfs/+xC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:39:35:c4:4d:96:ae:32:80:d4:34:ea:cc:dd:87:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Oct 25 18:01:08 2026 GMT
            Not After : Oct 26 18:01:08 2026 GMT
        Subject: CN=bcdd2d8274e238f75856058edfb4a9c7d05657da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:40:61:f0:c6:00:44:20:6a:4b:48:2d:c1:
                    75:06:9a:73:62:9c:89:bc:dc:08:74:08:35:d4:bb:
                    b9:7d:9a:01:fb:31:f1:a7:64:a0:bf:11:55:fd:cc:
                    18:c2:1b:0e:5f:b7:88:99:78:b4:e1:25:f6:5a:55:
                    05:d8:27:4f:f5:7a:fd:44:93:0e:72:c0:7a:31:bb:
                    a0:7c:3e:40:9e:ee:7b:83:f0:47:f2:c9:b3:04:f7:
                    5f:9b:9d:98:c9:8f:94:69:06:8d:f2:f2:13:c7:8a:
                    42:45:86:0a:88:95:57:63:de:b3:7e:e1:e4:85:79:
                    c7:8c:b2:0e:98:e4:84:d7:fc:d8:64:48:6f:49:65:
                    b2:c4:36:b6:5d:0b:55:8d:38:be:a0:f8:6b:3c:98:
                    72:a0:f1:82:7e:9a:fb:02:70:d1:5c:0c:71:85:f4:
                    21:4c:d6:5c:31:2a:48:01:ff:de:72:ac:72:43:3b:
                    79:64:c3:c9:17:f9:ac:f2:ce:31:35:1e:7a:5d:c5:
                    93:81:06:97:0b:ab:b1:a4:7d:33:e1:e1:16:20:11:
                    03:aa:79:c8:25:b0:87:d1:a4:3a:6f:db:66:e9:6d:
                    ee:61:58:74:f1:46:37:82:70:fe:92:99:78:e0:cd:
                    30:db:3c:b3:26:61:da:89:41:95:ab:04:ae:b5:e3:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:2D:82:74:E2:38:F7:58:56:05:8E:DF:B4:A9:C7:D0:56:57:DA
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:5a:e4:f2:24:24:48:b5:4d:42:8f:cf:f9:09:fa:60:c9:
         1c:0b:ac:32:a3:b0:32:87:c8:c5:75:aa:6f:dc:4e:c6:44:8e:
         05:aa:53:f1:bf:cc:84:63:b2:80:a2:66:96:38:76:78:bc:a7:
         c4:86:1f:db:73:2b:19:cb:4b:28:8b:c7:ca:5a:b7:d9:90:aa:
         3f:0e:07:d4:09:88:09:23:e4:40:cf:1e:65:7c:33:4c:00:55:
         21:0f:a1:2c:a0:f1:91:ac:44:70:1f:a9:fe:2b:29:35:4e:1e:
         e0:9a:e5:7c:61:97:8f:bb:e7:10:66:7f:38:48:0b:df:cf:79:
         9b:3a:64:c0:ce:e6:dd:da:3b:d5:06:8c:a3:fd:21:4d:e2:85:
         1d:fe:8b:c4:75:83:c7:c4:c2:ac:3f:fc:9f:17:4f:79:5a:a0:
         d8:7a:1a:f7:8b:2c:35:2f:27:05:c4:0a:37:ad:33:c5:f7:ca:
         4a:69:e9:c9:9b:92:ad:15:47:23:83:1c:f7:f4:b0:83:51:13:
         5e:3c:06:12:56:37:d9:00:3d:52:a2:24:25:9b:a6:c6:86:b5:
         6e:7b:78:b8:45:64:58:07:9e:4d:4f:c4:e4:83:9d:0e:8e:7b:
         dd:69:8a:ab:20:38:94:45:d8:3d:dc:c3:61:4a:1e:e8:6a:91:
         0b:00:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:06:20 2026 by rpki-client