Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          kqrBPQl8m8dnyMlmD9qIsRHle4abWLMv6+Yu9vuXao4=
Subject key identifier:   27:E2:4A:94:2A:B1:2B:80:7C:56:05:B5:A4:8A:F8:5E:68:88:0B:16
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       01A17E86011714C52C2745EC33618912C69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          1A1C
Signing time:             Tue 27 Oct 2026 18:01:13 +0000
Manifest this update:     Tue 27 Oct 2026 18:01:13 +0000
Manifest next update:     Wed 28 Oct 2026 18:01:13 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: J6fPQnH0HIvQDZyOtQC+FvgziiY+LaZxIhnnWmQNwLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:86:01:17:14:c5:2c:27:45:ec:33:61:89:12:c6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Oct 27 18:01:13 2026 GMT
            Not After : Oct 28 18:01:13 2026 GMT
        Subject: CN=27e24a942ab12b807c5605b5a48af85e68880b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:96:a8:10:2f:b2:37:3e:03:16:de:71:36:
                    ee:67:18:95:da:a0:6c:68:d6:99:4f:ee:7b:c9:11:
                    77:e5:ae:61:b9:3f:91:fa:0c:68:21:ae:9d:88:0c:
                    25:38:6f:e5:f8:66:e9:c5:45:c6:de:69:47:af:92:
                    9f:86:72:cc:2c:a7:07:81:5b:b0:c0:d3:8e:e4:f1:
                    f7:96:2e:f3:e3:ce:29:5f:10:a7:3e:32:0c:52:a2:
                    66:a8:32:47:c9:12:1b:43:4b:3b:bd:d7:c3:df:c2:
                    c8:64:7e:10:a0:18:a6:a0:45:66:f3:51:8d:1b:0e:
                    49:e1:89:01:65:f8:53:5a:b9:67:92:1f:e8:f9:00:
                    a4:28:ec:cc:2d:87:5d:4d:35:16:6d:6f:44:5c:ef:
                    ce:42:d9:a2:01:17:cf:f5:97:20:08:47:6c:d9:cd:
                    d0:d3:af:00:28:0e:e3:4a:e9:5b:27:55:28:34:2c:
                    6b:f4:0b:da:46:a3:ab:ee:ac:ea:77:d7:5f:8b:21:
                    87:b0:db:b9:b9:0e:59:95:f5:3e:f0:a1:62:4a:ad:
                    74:55:b3:53:dc:21:df:1b:2c:e3:db:0a:f4:ed:99:
                    8b:81:0a:8c:ec:83:0a:e2:89:d6:3f:48:b3:af:93:
                    9c:f6:a1:a9:19:39:b8:ce:50:11:e8:4c:50:e2:8c:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E2:4A:94:2A:B1:2B:80:7C:56:05:B5:A4:8A:F8:5E:68:88:0B:16
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:06:20:60:cd:fa:70:c0:3e:d9:14:32:1f:19:2a:35:a5:5e:
         08:53:ba:cb:dc:b8:34:65:86:0b:c5:e5:e4:84:68:3b:68:28:
         b4:48:a6:a9:1c:77:d7:22:2d:99:e1:4e:48:74:60:3e:0c:82:
         c3:46:f0:76:5e:ab:96:42:89:32:46:1f:8a:c2:ef:6e:09:31:
         cb:45:4e:69:02:3b:8f:00:9a:9f:dd:44:0a:2a:d3:22:04:ff:
         21:3f:4f:75:92:23:8b:0b:75:cc:82:74:87:12:e6:36:b4:ca:
         52:a1:21:38:e1:da:6e:e4:cf:22:7a:30:53:53:be:74:85:11:
         97:25:d2:f9:bd:9c:f4:ee:fc:34:f5:58:34:4e:9e:b1:d3:f0:
         d5:83:d1:7c:ef:a2:a0:e8:c5:39:39:8a:03:ca:72:94:36:16:
         92:99:47:04:31:fe:b3:e6:2f:28:ad:4a:40:b0:7e:3a:c0:32:
         c3:84:19:87:2f:4c:89:0a:44:b0:89:e2:75:8e:00:93:2b:6b:
         d3:46:fc:1e:c6:0c:29:f6:9f:20:f6:90:36:a1:27:0b:0d:d2:
         e3:39:29:ba:7f:7c:04:dd:c2:a7:e9:91:48:d0:c7:9c:c4:9f:
         4f:60:9e:83:60:2c:84:77:59:d7:5c:b2:3b:73:bf:52:e0:e4:
         fc:48:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:04:15 2026 by rpki-client