Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File:                     LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier:          p0V72ZTdhOSErs7gkkzq7F47eYPkKozmcFWM8+up9sc=
Subject key identifier:   9E:C7:C7:74:89:4C:FE:D0:17:45:22:C5:C0:7B:85:C8:3B:9B:E5:EC
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer:       /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial:       01A002EF58A9AD8F1D66FD75D93C7BA63A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number:          1A09
Signing time:             Sat 15 Aug 2026 01:00:35 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:35 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:35 +0000
Files and hashes:         1: L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa (hash: +Gwjcjom9pqLSyIZJDE+ooi9DSzl5I6UWWhpsWsU6XE=)
                          2: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: ApnHRc+o20XlA0xytPcDKhoB7KzQX4gIYYchlgqQSUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:58:a9:ad:8f:1d:66:fd:75:d9:3c:7b:a6:3a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
        Validity
            Not Before: Aug 15 01:00:35 2026 GMT
            Not After : Aug 16 01:00:35 2026 GMT
        Subject: CN=9ec7c774894cfed0174522c5c07b85c83b9be5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:60:f9:ef:36:89:55:27:2a:2a:a5:fc:4b:
                    d0:b1:f9:fb:3b:29:a4:3e:bf:2b:8b:99:34:bf:3e:
                    fa:92:29:e1:aa:e0:ad:16:0f:62:f3:b9:fd:96:9b:
                    f1:4f:3f:d7:68:b6:e0:e6:18:90:66:21:8a:83:a0:
                    ea:d0:f8:37:c5:8f:8c:e8:64:23:c7:f0:e3:80:91:
                    e8:3e:0a:27:a7:83:4c:d3:a6:5f:cf:7b:80:bb:40:
                    5e:c8:78:76:82:8f:a0:34:8c:2a:f4:b3:b7:4e:ca:
                    7c:04:74:30:51:7f:4b:d2:0f:17:7b:e4:91:60:d8:
                    0c:83:55:89:95:ad:9d:d4:5c:8b:29:13:ed:b7:8e:
                    3f:84:83:fe:dc:f6:89:2a:96:a7:65:0f:e2:ff:c8:
                    b5:ad:94:be:a9:16:ff:01:b2:8b:2e:ce:2a:ab:99:
                    68:45:6f:8a:3f:ff:d4:f1:c5:4c:45:89:88:76:25:
                    1d:e6:94:65:49:fb:cf:e0:16:e8:32:d0:66:a9:61:
                    a5:d4:7b:d2:46:e0:a3:f2:d4:eb:ef:3a:b7:6c:ca:
                    81:47:a0:92:e2:90:7a:46:c9:fa:01:57:1e:e1:6e:
                    4b:f9:23:18:5e:0e:66:e2:2d:17:3b:07:25:54:4f:
                    63:bd:fd:35:1e:13:8a:a6:0c:12:0c:07:a2:9f:8a:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:C7:74:89:4C:FE:D0:17:45:22:C5:C0:7B:85:C8:3B:9B:E5:EC
            X509v3 Authority Key Identifier:
                keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:ac:1f:d2:e6:fc:96:7f:1b:c4:26:49:11:db:be:19:3f:
         ba:b4:fc:ba:5d:4b:f6:7b:57:c3:83:ae:08:13:8e:f2:8e:f2:
         7b:1a:44:a9:25:31:08:57:a1:78:47:8d:c1:6d:f0:f0:7d:42:
         4d:2f:b8:ca:09:a6:c8:19:00:c9:3d:b4:07:4c:24:de:96:2b:
         38:d6:86:3f:02:25:8a:4f:71:16:d7:ab:f6:ba:db:f6:10:63:
         97:5f:9a:24:f2:12:30:25:35:76:66:3f:e4:e4:76:43:79:9a:
         c9:ef:aa:41:eb:ec:66:11:d2:89:38:89:de:75:72:62:5f:e7:
         f6:48:86:5b:69:f6:e9:ca:b5:e8:3f:21:fa:c6:cb:60:cf:66:
         c3:bc:19:c4:ab:4d:a9:2f:2e:46:5c:5d:4d:61:71:5a:cf:bf:
         96:76:bf:d7:22:5f:19:b2:fe:96:9b:c9:8b:05:99:a4:3b:a4:
         44:0e:b3:9b:53:1a:47:39:2d:e4:d4:a2:59:21:1b:c1:e5:5c:
         8f:f2:77:21:0b:17:35:25:91:30:1d:5b:57:e1:35:1b:ae:10:
         28:1c:43:51:10:b7:54:53:6b:16:2e:e5:3b:ed:4f:53:4d:0f:
         75:17:b9:d0:34:c9:cb:45:b2:3c:2e:09:3e:b8:d3:df:ca:a8:
         5a:ff:10:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC71iprY8dZv112Tx7pjp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2I5Yjg5YmMwYmMyMTc1MjQ3NGU2NTBkYzM0ZjA2OWRh
NWMwYjMwHhcNMjYwODE1MDEwMDM1WhcNMjYwODE2MDEwMDM1WjAzMTEwLwYDVQQD
Eyg5ZWM3Yzc3NDg5NGNmZWQwMTc0NTIyYzVjMDdiODVjODNiOWJlNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOtg+e82iVUnKiql/EvQsfn7Oymk
Pr8ri5k0vz76kinhquCtFg9i87n9lpvxTz/XaLbg5hiQZiGKg6Dq0Pg3xY+M6GQj
x/DjgJHoPgonp4NM06Zfz3uAu0BeyHh2go+gNIwq9LO3Tsp8BHQwUX9L0g8Xe+SR
YNgMg1WJla2d1FyLKRPtt44/hIP+3PaJKpanZQ/i/8i1rZS+qRb/AbKLLs4qq5lo
RW+KP//U8cVMRYmIdiUd5pRlSfvP4BboMtBmqWGl1HvSRuCj8tTr7zq3bMqBR6CS
4pB6Rsn6AVce4W5L+SMYXg5m4i0XOwclVE9jvf01HhOKpgwSDAein4qgoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7Hx3SJTP7QF0UixcB7hcg7m+XsMB8GA1UdIwQY
MBaAFCzLm4m8C8IXUkdOZQ3DTwadpcCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWIt
MDYyYWVkNTEzODFjLzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWItMDYyYWVkNTEzODFj
LzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHqsH9Lm
/JZ/G8QmSRHbvhk/urT8ul1L9ntXw4OuCBOO8o7yexpEqSUxCFeheEeNwW3w8H1C
TS+4ygmmyBkAyT20B0wk3pYrONaGPwIlik9xFter9rrb9hBjl1+aJPISMCU1dmY/
5OR2Q3maye+qQevsZhHSiTiJ3nVyYl/n9kiGW2n26cq16D8h+sbLYM9mw7wZxKtN
qS8uRlxdTWFxWs+/lna/1yJfGbL+lpvJiwWZpDukRA6zm1MaRzkt5NSiWSEbweVc
j/J3IQsXNSWRMB1bV+E1G64QKBxDURC3VFNrFi7lO+1PU00PdRe50DTJy0WyPC4J
PrjT38qoWv8QxA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 11:41:50 2026 by rpki-client