Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File:                     LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier:          jB9z8fubF0nMcnZHBtQ3snu5Hz7WUmForO97fZCcW4k=
Subject key identifier:   FD:4E:42:2E:17:8A:5E:4C:B2:FC:B7:BA:BA:69:37:1A:7D:F3:D6:C1
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer:       /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial:       01A17D730C4381763B04845B72EE312EED37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number:          1ACD
Signing time:             Tue 27 Oct 2026 13:00:54 +0000
Manifest this update:     Tue 27 Oct 2026 13:00:54 +0000
Manifest next update:     Wed 28 Oct 2026 13:00:54 +0000
Files and hashes:         1: L5S5eEPo3Tlp2-Gu277L0fi4-x0.roa (hash: +Gwjcjom9pqLSyIZJDE+ooi9DSzl5I6UWWhpsWsU6XE=)
                          2: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: Dj8YN9indVbDF4W0bLj6Q0I3hXz/irpwuhvj+mYsi8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:0c:43:81:76:3b:04:84:5b:72:ee:31:2e:ed:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
        Validity
            Not Before: Oct 27 13:00:54 2026 GMT
            Not After : Oct 28 13:00:54 2026 GMT
        Subject: CN=fd4e422e178a5e4cb2fcb7baba69371a7df3d6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:69:4c:18:ef:34:63:d2:33:39:18:8f:08:
                    c9:d8:a7:87:00:a5:70:54:e6:7a:3e:6d:9f:61:96:
                    4b:20:eb:5a:00:00:bb:1a:38:46:a3:47:22:b9:eb:
                    b2:40:a0:1e:2d:f6:db:df:f8:e0:77:a4:47:77:3c:
                    dd:9d:9b:0a:a1:dd:e2:22:f1:ee:12:1e:16:da:d9:
                    aa:82:f9:bd:91:ac:ac:25:2d:db:a7:c3:14:b5:64:
                    f2:cc:92:b2:a8:3e:e7:80:7f:c4:bd:f2:78:65:76:
                    1d:55:6f:16:03:77:52:6c:99:6a:09:ea:f2:22:b2:
                    99:5a:e2:73:18:61:b2:73:d1:39:2e:da:31:c3:44:
                    f3:a7:be:02:d6:5b:f1:88:74:bc:0f:0f:c6:b9:2f:
                    17:5a:59:56:44:b6:ab:89:1e:8b:1b:7b:3a:c3:22:
                    74:5c:61:79:74:02:e1:20:97:49:0c:54:d6:47:5e:
                    fb:65:38:d4:dc:64:83:c1:94:e1:42:16:dd:c6:b5:
                    32:cd:3b:f5:2d:8c:f1:2d:9d:bd:21:56:0c:0f:9e:
                    22:6b:d5:fb:68:49:02:4b:24:48:ac:65:db:d9:48:
                    4e:ce:69:e3:bd:a7:d9:24:cc:95:2b:bc:3f:be:a6:
                    d9:47:ca:df:ef:31:0b:00:0e:98:36:b4:ac:1a:de:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4E:42:2E:17:8A:5E:4C:B2:FC:B7:BA:BA:69:37:1A:7D:F3:D6:C1
            X509v3 Authority Key Identifier:
                keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:43:bc:f8:dc:5d:27:72:58:49:1f:cd:9a:cd:61:eb:3e:a3:
         9d:27:a9:dc:ce:3b:76:3e:a4:a3:2d:40:56:b9:21:9d:f1:18:
         35:a3:ad:d0:aa:6b:1e:15:d2:65:8d:ef:a0:fc:4c:cd:15:e8:
         ce:e6:0d:84:3c:fc:d8:2a:58:78:f6:26:4b:a6:d6:ea:19:d9:
         0e:39:b8:fe:96:15:ed:cd:b8:40:f0:6c:78:26:c2:0e:01:ad:
         79:91:f3:52:47:8c:37:54:e3:f2:4c:9c:0e:a0:b7:13:46:7a:
         c0:61:f0:c9:71:7a:7b:fe:99:bb:f2:d1:1d:26:4b:50:c1:cb:
         49:64:80:d7:68:c1:85:f5:ec:36:eb:da:a1:51:bd:84:d3:a1:
         af:da:17:f5:22:e0:20:82:90:16:97:5b:86:19:36:19:aa:23:
         47:8a:36:f2:9e:de:73:ec:a1:d0:5e:90:46:2d:96:2e:5d:bc:
         4e:98:65:bf:38:f2:13:cd:41:21:50:ec:b6:86:6d:7d:7a:2d:
         ad:2a:5f:ac:d9:1f:52:71:fc:54:8b:e8:e9:f9:3a:43:6e:25:
         5c:f6:b7:67:8e:cf:ae:3f:36:db:be:82:3e:60:e2:1c:09:0e:
         f4:11:ac:67:70:e4:2b:2a:1d:23:fe:c4:eb:79:48:6a:30:78:
         01:79:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:34 2026 by rpki-client