Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          O1WFjXOIhj89jj/as44eLYfmFjupY1c+Q17kCUkhGCM=
Subject key identifier:   79:B5:B0:A4:04:8D:A6:EB:D6:26:B7:7C:5B:25:FF:B5:ED:F2:BC:45
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       01A08B9ED86FE182840B68CEFBBAD20E902B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          084D
Signing time:             Thu 10 Sep 2026 14:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:38 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: /TinnKsZiN2HK+o4tyq/Ad7iFQv5MRgig1dz30qPYlI=)
                          2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:d8:6f:e1:82:84:0b:68:ce:fb:ba:d2:0e:90:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Sep 10 14:00:38 2026 GMT
            Not After : Sep 11 14:00:38 2026 GMT
        Subject: CN=79b5b0a4048da6ebd626b77c5b25ffb5edf2bc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:01:1b:5a:18:23:30:fb:42:ec:20:4c:1a:
                    73:b3:32:24:e9:b0:38:74:66:b8:39:f9:15:16:ed:
                    e1:67:b7:50:7b:fa:34:0e:94:4d:e0:a1:7e:bd:53:
                    ff:0f:51:d4:7e:27:a2:44:5e:bb:91:53:b2:4a:3a:
                    b1:dc:49:b6:3d:a7:36:38:8f:64:dd:f6:da:ab:be:
                    f2:03:01:85:93:1c:a2:d5:a6:2d:7d:ab:9a:59:3d:
                    77:f1:b5:a1:5e:82:07:cc:36:b3:16:8d:4e:f4:71:
                    81:52:95:9c:1f:98:13:12:37:32:61:6a:84:f6:97:
                    51:3f:9b:e1:5d:d8:c7:61:de:34:03:d0:25:03:e9:
                    ae:ad:63:26:de:1a:dc:4b:9d:bc:f7:36:4b:a2:0e:
                    a7:fa:fb:27:d9:6f:9a:0c:8c:bc:a9:94:0f:29:85:
                    fa:fa:cd:c6:b2:0d:a5:4b:ca:68:79:49:58:f2:92:
                    71:9d:35:24:c3:7d:98:94:82:0e:1e:55:e0:49:bf:
                    6b:42:d0:86:5a:00:20:16:38:36:23:78:cc:a0:7f:
                    8f:f1:0a:ed:ec:2e:7c:4e:d4:b1:04:74:fd:e6:95:
                    ed:44:22:ff:00:66:30:d3:32:e3:ee:91:b7:54:6f:
                    f5:14:da:5c:82:4f:c0:7e:7e:2c:a8:d9:4d:6e:56:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:B0:A4:04:8D:A6:EB:D6:26:B7:7C:5B:25:FF:B5:ED:F2:BC:45
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:fd:99:77:91:a0:1f:68:53:ae:06:10:32:4b:cd:76:ca:
         66:e0:77:1b:54:2e:12:ed:b9:83:c3:e7:23:f2:ec:16:4b:e8:
         da:29:c3:25:63:8b:dd:ae:a0:97:bd:d9:b8:64:12:be:26:19:
         9c:db:06:3a:7f:ea:a7:08:12:29:f6:80:15:2c:32:5f:3c:1c:
         39:4b:bd:2d:4a:bf:e9:f7:1d:29:59:29:f3:c4:c4:9e:95:0f:
         8c:dd:8e:30:93:86:99:d1:42:78:96:b1:8a:0c:f1:86:52:58:
         61:53:fc:d3:26:ac:ef:71:e9:1d:36:af:1f:29:c9:53:11:0e:
         69:2f:35:1f:25:d3:e9:86:bb:fc:d9:9b:59:07:71:6d:74:18:
         35:09:ef:0d:a4:56:65:d6:34:8e:9b:2d:e9:1d:a5:93:68:32:
         9f:46:18:fd:89:82:03:86:45:6a:e9:63:e0:88:7e:68:0b:47:
         2c:b7:b4:1c:79:fd:9b:69:60:44:b6:79:72:4d:75:ac:2f:4d:
         bc:cc:af:83:86:06:20:40:58:a3:bf:09:4b:bc:37:77:46:1d:
         4f:1e:33:4e:cd:ea:00:4f:07:79:a7:fb:32:36:b0:e8:95:10:
         6a:f3:d9:0a:34:d2:2d:69:30:23:a8:b8:26:80:e4:64:af:dd:
         58:af:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:15 2026 by rpki-client