Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File:                     LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier:          un0NvWyrkCL1Gh000XpBSENh4D4FfKQ5MT5fPnOChSg=
Subject key identifier:   0E:39:17:BE:FA:F6:B3:C7:D8:C2:4E:C4:CD:36:F6:D0:12:A8:A9:6E
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer:       /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial:       01A0EF9D59F2EFEB83856DFFDFEDC50AB6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number:          122E
Signing time:             Wed 30 Sep 2026 00:01:01 +0000
Manifest this update:     Wed 30 Sep 2026 00:01:01 +0000
Manifest next update:     Thu 01 Oct 2026 00:01:01 +0000
Files and hashes:         1: 3WItZ4mhefefk4OFRU301cRZ_vQ.roa (hash: dtdvArxYE5qEj5Mf66z8Nr0a//V3Hh8mgQw7uOvKT6M=)
                          2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: yKn/vRiM7TMsV9HWlqWdDa0HRKULHS4L95anDVDATFk=)
                          3: Mv-NoCa1EelRUFT0hvPhyRkrLpw.roa (hash: wlZIyNLsdHzsIA3vozVQVDyqbFP1tAuUqu4nL50r+XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:9d:59:f2:ef:eb:83:85:6d:ff:df:ed:c5:0a:b6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
        Validity
            Not Before: Sep 30 00:01:01 2026 GMT
            Not After : Oct  1 00:01:01 2026 GMT
        Subject: CN=0e3917befaf6b3c7d8c24ec4cd36f6d012a8a96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:ef:5f:0d:85:e2:0b:e3:d7:33:5e:8b:e5:
                    1d:4a:26:1f:57:c6:f5:b4:45:d2:85:a0:68:fb:00:
                    ce:2d:5a:53:ca:62:d2:97:d7:ec:24:c4:4d:a0:2a:
                    30:55:f4:f8:c6:6d:69:3a:75:7b:1f:b2:f1:a1:b5:
                    35:fe:fc:fe:4d:60:c4:0c:19:90:c2:bf:b7:95:fe:
                    28:c1:e7:ac:c5:66:9e:6a:93:57:4e:94:65:47:b0:
                    61:a8:00:c3:59:7b:c5:ba:bb:10:c8:fa:27:34:ee:
                    68:b5:eb:ea:f0:42:d5:d6:10:eb:da:47:83:61:64:
                    4f:e0:20:10:15:66:10:68:a9:fc:bf:52:bd:ac:b6:
                    41:c1:19:22:a5:c9:ca:41:fd:32:21:df:86:33:6a:
                    68:5e:bb:64:b1:40:cc:6a:8e:77:5f:24:48:66:51:
                    96:02:90:38:b2:14:90:f2:c5:5d:6a:a9:5e:73:98:
                    e4:ff:de:f9:c0:81:2e:c0:67:f8:57:5b:d1:9f:16:
                    75:cc:78:f8:83:16:c0:d1:0e:cb:fd:9b:29:ca:c3:
                    14:c7:3b:32:35:3b:b0:9d:b4:6c:44:b8:4b:2f:b1:
                    54:e4:e3:2e:32:ac:83:c4:25:fb:c9:1a:49:10:77:
                    ce:43:3e:83:33:51:e1:0c:9a:85:41:21:84:f4:ce:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:17:BE:FA:F6:B3:C7:D8:C2:4E:C4:CD:36:F6:D0:12:A8:A9:6E
            X509v3 Authority Key Identifier:
                keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:7c:5b:8b:b2:9f:dc:1e:02:06:fc:a4:41:af:10:32:19:92:
         a8:5f:ff:ea:ee:99:1e:73:d1:2d:43:1d:ca:ec:5a:df:84:f4:
         ee:7b:9a:5e:06:e9:56:2a:de:5e:54:9a:b7:cf:37:6d:f5:08:
         a3:00:4c:47:19:c7:4f:68:67:68:8a:17:0f:92:5e:84:23:85:
         cc:fc:79:83:ea:2c:a5:08:62:aa:a0:49:a1:e0:25:29:cf:f3:
         ae:32:ce:bf:c2:b0:2a:d1:7a:4b:82:f9:ec:69:6a:d1:10:49:
         20:c7:40:b1:30:66:66:59:90:30:9a:9f:cc:95:bb:d0:5f:4f:
         08:f3:de:d8:76:de:97:88:7a:23:13:b0:51:d8:96:74:55:39:
         1a:28:75:fc:e1:09:08:ff:15:95:ea:74:5c:fb:d0:61:c5:90:
         0a:1a:03:49:bd:af:58:8f:32:c2:3b:8f:4d:b3:cc:f7:a6:10:
         13:57:ce:bd:d4:33:a1:bb:53:df:9a:cf:97:52:9c:8e:43:a6:
         6b:2c:ee:05:aa:0d:a9:76:4d:5b:3f:21:c6:84:bd:55:dc:43:
         60:59:35:01:10:8d:aa:10:2d:e9:a9:b5:89:4d:1d:22:68:24:
         f7:99:b7:6c:21:8b:4b:55:ae:a4:e0:6e:c1:ec:1f:ea:dc:f2:
         8e:c3:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:38:42 2026 by rpki-client