Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File:                     lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier:          ewljZMlHpsN/S3fZlmOiFUFkC2WNrMeMK8Wy4S3sElc=
Subject key identifier:   5D:A2:DF:DA:37:ED:E9:16:C8:A6:B6:85:7F:12:13:91:7D:AF:66:B6
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer:       /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial:       019EE7B2616399877386786356B450FDC27B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number:          055C
Signing time:             Sun 21 Jun 2026 01:01:27 +0000
Manifest this update:     Sun 21 Jun 2026 01:01:27 +0000
Manifest next update:     Mon 22 Jun 2026 01:01:27 +0000
Files and hashes:         1: 1n7UaGQqcjlKc-RwheHn58VAL2g.roa (hash: LsStmQogy/wtEZhVT3UaRq1oPn/P6s0GMZ58Y7YS8GQ=)
                          2: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: j7hYkPPTNc8KMA0IA0zWZS1hvVpTyz3mgSeaZj2b6JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:b2:61:63:99:87:73:86:78:63:56:b4:50:fd:c2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
        Validity
            Not Before: Jun 21 01:01:27 2026 GMT
            Not After : Jun 22 01:01:27 2026 GMT
        Subject: CN=5da2dfda37ede916c8a6b6857f1213917daf66b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:e9:f3:4d:90:11:6a:a0:f1:74:da:62:c5:
                    28:ca:cd:2a:b6:5d:27:06:04:23:2b:29:88:90:1c:
                    e1:91:9a:10:58:96:02:1d:5a:af:46:40:dd:ac:48:
                    82:95:aa:d3:6b:86:9b:0c:0f:66:2e:42:06:a2:f9:
                    a2:4b:dc:d3:86:20:d8:2b:ef:b6:c9:40:d6:26:e5:
                    5e:bc:16:cb:a9:5c:30:3a:a0:1e:3f:d7:73:50:27:
                    da:17:2e:55:15:08:88:30:96:19:16:5e:43:c5:1a:
                    ca:c8:7f:fd:3e:51:f0:5f:8a:26:58:de:b3:1e:f9:
                    f8:17:09:af:ff:23:63:89:e4:c0:f8:d6:a6:29:5e:
                    12:f2:b3:8e:91:f2:29:ec:4b:22:aa:8c:9f:c2:40:
                    33:4c:a5:83:60:bf:9b:a8:82:41:3d:0a:a1:4e:71:
                    48:ef:18:fb:16:1a:6c:4a:76:e5:f8:4a:97:35:c7:
                    6f:c9:1c:fe:d5:c2:9b:fd:6b:53:87:7c:5e:07:bf:
                    74:9b:da:16:20:a1:2b:88:2d:58:f0:25:3b:84:e1:
                    a1:78:fa:76:80:a1:95:2e:99:45:41:d1:83:ef:6d:
                    a6:2f:bc:d2:65:57:1d:10:22:4d:99:7b:84:3f:f7:
                    b8:8b:53:a1:9b:b8:7c:d3:84:6e:4a:b6:91:25:0d:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A2:DF:DA:37:ED:E9:16:C8:A6:B6:85:7F:12:13:91:7D:AF:66:B6
            X509v3 Authority Key Identifier:
                keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:73:e7:84:f2:4b:32:85:36:0e:47:85:fe:03:dc:c6:c9:a0:
         10:40:cb:c2:c2:c5:3e:7a:6c:57:2e:2c:bb:d3:f9:26:77:2d:
         5e:07:79:18:23:07:af:70:ee:31:61:5e:72:5b:0e:49:74:49:
         e8:cf:ca:aa:73:89:36:2f:c3:08:0f:4e:0e:09:e6:06:b1:03:
         a1:8a:22:76:38:cc:ee:38:0a:ef:f0:c3:51:4a:35:3c:e2:ba:
         23:19:4a:19:cd:51:04:ed:77:22:ba:bc:4c:be:c9:25:b8:ea:
         07:c4:09:9d:da:15:de:1e:42:38:96:79:57:9c:53:89:3d:69:
         4f:e9:45:b6:54:80:96:04:f8:30:f6:87:b7:73:07:41:2b:50:
         90:19:b0:1d:83:0a:0c:11:3a:75:d5:ec:24:0f:44:46:a3:c4:
         3b:7e:80:d5:1d:1d:d9:37:b8:b6:78:c2:73:00:f7:65:e9:65:
         0d:ed:29:e5:ee:a6:19:d5:3b:b5:a2:b3:86:1b:83:35:a4:05:
         36:df:cb:c4:97:db:ff:eb:69:99:e7:6b:fa:40:88:32:88:54:
         69:8a:e1:7d:ed:f8:56:75:9c:30:41:fc:33:bf:1b:97:52:af:
         f9:f5:34:72:52:55:8c:85:64:9d:07:91:f1:4b:00:37:c2:21:
         00:25:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 05:52:51 2026 by rpki-client