Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          mrFbpT/RQEcpkJWj3leB+vighdpycDLeX6VbGX+fhl8=
Subject key identifier:   8C:89:CA:21:CC:E4:61:C7:B2:8A:4C:0D:CA:83:ED:85:E4:B8:15:19
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       019EC25C152B580FABE5F34B61CF3B8292F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 19:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:15 +0000
Files and hashes:         1: Dl93bq_-cgvRcw-PhtUvvM6vei0.roa (hash: c9+943kBN1nH/iz48xI8TW6h5ATYqwjyAVBz6mPrBUM=)
                          2: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: qSod6udxSXqH59vV2VtSJpy7xyhULicHGAO1B7hBmXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:15:2b:58:0f:ab:e5:f3:4b:61:cf:3b:82:92:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Jun 13 19:01:15 2026 GMT
            Not After : Jun 14 19:01:15 2026 GMT
        Subject: CN=8c89ca21cce461c7b28a4c0dca83ed85e4b81519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:54:42:57:7d:0b:36:32:24:e2:ed:30:87:
                    a7:ae:ec:79:b6:0c:e7:88:a0:fb:c1:be:4e:b2:1a:
                    d1:9b:0c:53:cf:5b:7c:f6:df:7d:04:09:35:3e:17:
                    fc:e8:3b:de:78:97:28:33:19:0a:7e:46:3c:8e:90:
                    3a:57:4c:e0:2a:f8:67:e3:5d:f1:dc:a2:57:6e:d8:
                    00:dd:e1:10:cb:7b:ad:ab:d1:87:ac:31:c9:e8:48:
                    e5:5b:14:6f:e8:10:de:85:81:c8:af:57:22:39:ba:
                    d8:5d:da:73:e9:a5:bb:e6:83:f1:3a:4d:a5:c8:3e:
                    5e:f4:b8:f4:a2:d2:31:c9:6c:83:86:c4:6b:3c:42:
                    fa:f3:73:d1:77:78:32:f2:2d:a5:1e:19:a6:00:bc:
                    da:a7:2a:fb:21:66:88:fc:11:47:84:89:d5:4d:25:
                    3d:51:93:ae:39:c0:f0:0e:45:99:87:ff:dd:e4:90:
                    2d:3c:42:67:25:9f:47:5f:4a:75:c3:51:82:1b:4b:
                    94:48:d7:e4:f1:ad:43:cd:f1:da:22:35:66:bd:ce:
                    ab:c2:5a:87:4e:2c:43:44:84:7d:fd:e6:73:c4:ab:
                    8c:8a:f8:ab:87:94:d1:6e:4c:47:08:3f:a4:30:39:
                    d6:86:31:12:ad:4f:86:0e:b3:b1:7a:5b:15:eb:f3:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:CA:21:CC:E4:61:C7:B2:8A:4C:0D:CA:83:ED:85:E4:B8:15:19
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:c0:6a:df:e7:78:4c:89:ad:c3:a3:f2:17:03:f0:39:e7:
         6b:60:ab:1c:e0:13:d8:ba:ed:f9:80:b6:b1:e8:95:fb:c2:b2:
         a3:b3:97:b1:37:90:e5:76:61:6d:05:5d:3f:98:aa:43:d4:79:
         bf:76:c8:28:f6:45:89:4f:d8:e8:fd:4b:5c:0b:44:12:6c:9a:
         c1:6a:7e:78:2e:60:73:5d:6c:7f:71:fe:e5:f0:bc:fe:6a:54:
         a4:91:f6:3d:05:c6:b5:12:d5:3e:34:44:26:fd:64:1b:c2:ef:
         f1:cc:74:55:5a:45:50:27:7a:f0:01:b4:a0:80:b0:22:1d:36:
         f9:83:ac:fe:32:95:6f:6b:93:e9:f3:db:bd:b2:6e:f0:88:64:
         30:8e:c8:d1:d9:d2:75:f8:2e:9d:72:f5:68:ee:28:1b:97:71:
         78:0a:1d:23:18:d7:60:77:de:f0:40:a4:23:27:05:0d:ee:7a:
         06:9e:57:0b:56:68:77:92:72:8a:b0:5f:e9:24:39:2e:d2:74:
         6e:3a:22:11:95:0b:eb:de:ff:50:bc:79:9b:f1:d9:8c:ac:15:
         f0:86:48:43:72:fa:2a:90:b6:fc:d5:49:fa:ea:ce:76:04:b6:
         ad:9c:71:c1:b1:0b:d8:b7:be:5d:8a:c6:aa:a0:40:e8:08:f9:
         27:6a:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:14 2026 by rpki-client