Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          uvy0awvfspt7/WWRY9aaTf7mP7vvSsVWWAUOJKUluJI=
Subject key identifier:   D6:A6:54:08:BC:3F:1F:64:04:3F:24:2C:F1:A6:C4:1E:34:07:1B:DF
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       01A11CE394CE177C7C3AB01423B1EBD78EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          1A93
Signing time:             Thu 08 Oct 2026 19:00:39 +0000
Manifest this update:     Thu 08 Oct 2026 19:00:39 +0000
Manifest next update:     Fri 09 Oct 2026 19:00:39 +0000
Files and hashes:         1: Dl93bq_-cgvRcw-PhtUvvM6vei0.roa (hash: c9+943kBN1nH/iz48xI8TW6h5ATYqwjyAVBz6mPrBUM=)
                          2: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: gn47jCEIr32pNPeZg9AV69D9Zrln6Y7b7Z9UK0Y4PGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:e3:94:ce:17:7c:7c:3a:b0:14:23:b1:eb:d7:8e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Oct  8 19:00:39 2026 GMT
            Not After : Oct  9 19:00:39 2026 GMT
        Subject: CN=d6a65408bc3f1f64043f242cf1a6c41e34071bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:2c:98:f8:0f:1a:53:40:85:5e:4e:93:fa:
                    94:5b:76:cc:41:03:f5:a5:42:54:70:07:8d:e0:65:
                    9e:64:d8:37:90:d7:5a:68:3c:96:1c:10:7d:e2:f8:
                    43:75:a6:74:aa:6a:17:a9:08:d6:e0:13:cc:5a:03:
                    cb:57:58:f0:6c:ed:0a:df:8b:44:f4:e3:97:ff:7a:
                    20:92:bc:d3:16:bc:09:8b:e7:e1:f6:01:34:c4:b6:
                    ea:88:af:5c:cc:62:7c:ae:ea:1c:4d:43:de:81:86:
                    de:06:6a:48:15:41:2d:d4:ec:4c:46:d2:20:08:4f:
                    44:fd:7e:3a:99:4d:aa:8d:44:6a:4a:4e:7e:da:56:
                    20:bb:ad:d0:1c:b0:d5:4a:6b:56:31:12:66:c7:92:
                    a3:e1:8d:05:83:7c:a8:c0:af:d1:67:32:00:58:48:
                    0e:15:ee:6b:97:2d:c5:be:9d:e8:f2:4b:62:68:14:
                    be:4e:15:02:b9:1d:6b:d8:1f:9f:dc:03:a6:8a:0a:
                    19:d0:64:e0:ce:1e:49:6c:c6:26:79:cc:61:88:4c:
                    65:be:1d:28:44:0a:ad:98:9f:71:6a:9d:ee:36:49:
                    3f:e0:18:82:34:ea:a2:31:98:16:a0:13:ba:60:4e:
                    1d:2b:73:31:a6:ea:91:cc:e7:19:9f:fd:23:55:38:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A6:54:08:BC:3F:1F:64:04:3F:24:2C:F1:A6:C4:1E:34:07:1B:DF
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:cd:01:db:64:92:5e:d9:93:d7:40:aa:6c:ca:c4:33:9c:
         e3:fb:be:24:08:30:5a:4c:76:ad:db:a0:7f:1a:e3:48:e4:42:
         a2:2b:fd:16:4e:4d:aa:c0:27:d0:2a:1f:f2:b4:de:35:12:2f:
         1d:0b:14:30:21:9a:24:fb:56:79:7d:66:e3:26:93:e6:7a:a7:
         86:bf:05:b6:a4:52:09:a0:3b:28:8f:b8:d2:73:4f:8b:74:55:
         ad:27:06:b1:69:51:9c:4e:cd:17:30:a1:07:e3:16:20:46:bd:
         40:de:b6:18:09:f5:f2:2d:61:99:f5:63:45:dd:44:1a:0e:b8:
         f5:b2:96:da:91:6f:c3:7c:de:eb:be:b9:bf:8e:ac:9d:75:5a:
         f8:7e:8b:61:45:88:c0:34:75:fc:92:d4:e1:cc:24:8f:c0:39:
         4d:9b:fe:1e:bc:4e:34:4c:20:07:a4:f1:a3:9a:74:06:3b:8a:
         e7:f3:4d:7a:de:58:67:31:63:c7:e9:c9:20:09:13:b8:e2:5f:
         15:1c:cb:da:eb:72:04:95:da:d7:ec:d1:58:b5:c3:74:56:cf:
         f5:b4:77:ab:04:15:a5:32:c2:a6:51:56:c6:4a:91:36:78:9a:
         63:7c:e1:37:22:f9:4c:53:89:ba:64:3c:9d:f5:5e:36:63:bd:
         9c:b8:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:37:34 2026 by rpki-client