Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File:                     LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier:          gI7T2aXNVwEFgkvS7CA/yVJODscZOXyH4pmhdvDz5+A=
Subject key identifier:   2A:E8:0A:94:D7:65:8C:D8:D7:7A:A8:EC:BE:07:C1:DC:E3:FC:DC:4A
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer:       /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial:       01A0E3D04FE19ADDC4084A9A16E0021DC35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number:          179B
Signing time:             Sun 27 Sep 2026 17:01:14 +0000
Manifest this update:     Sun 27 Sep 2026 17:01:14 +0000
Manifest next update:     Mon 28 Sep 2026 17:01:14 +0000
Files and hashes:         1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
                          2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: t1i6iwuOHzL+VXSv1qGSpwj2Xn+gNKsGYjJ040jiD2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:d0:4f:e1:9a:dd:c4:08:4a:9a:16:e0:02:1d:c3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
        Validity
            Not Before: Sep 27 17:01:14 2026 GMT
            Not After : Sep 28 17:01:14 2026 GMT
        Subject: CN=2ae80a94d7658cd8d77aa8ecbe07c1dce3fcdc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:22:c8:5f:b8:c5:d0:09:01:e4:dc:3f:15:
                    ea:39:78:dc:1d:bf:fd:3e:a0:e9:17:6f:0a:9f:8d:
                    5d:3f:55:77:8e:a1:2c:9b:72:95:f0:1c:fc:3b:1f:
                    93:c3:a8:b7:f5:a8:88:28:6b:b7:6d:4a:09:64:a6:
                    d3:84:ba:27:5a:94:b1:e9:21:45:e1:b8:40:71:52:
                    c9:fe:b4:4d:7f:bd:7a:ff:af:27:d8:7d:67:92:ad:
                    ff:80:dc:28:d0:08:3e:09:4c:67:e5:59:60:74:7f:
                    49:a8:28:41:c3:10:ba:4d:0e:7b:9b:52:65:73:cb:
                    b2:bc:ba:4e:24:4d:ac:ef:80:15:69:b3:45:2c:0f:
                    c3:60:19:eb:0f:b5:10:68:e6:1a:04:7d:d5:06:33:
                    e5:3b:69:7f:67:23:76:4f:3f:3c:9a:0b:6d:d0:d1:
                    98:64:cf:38:da:66:79:cd:42:00:c7:b3:01:a7:b5:
                    45:43:2a:19:1e:9b:45:ba:7d:dc:9c:03:e6:3e:7f:
                    6d:67:28:26:d9:34:69:a3:da:29:a2:12:e1:39:16:
                    5c:7b:ee:94:78:f9:a5:80:a6:d2:11:57:08:87:43:
                    db:9e:2b:e9:ca:43:af:4b:e7:11:31:6f:b3:aa:a0:
                    57:b3:8d:32:98:7a:8e:92:e7:bd:bf:bc:53:8b:26:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E8:0A:94:D7:65:8C:D8:D7:7A:A8:EC:BE:07:C1:DC:E3:FC:DC:4A
            X509v3 Authority Key Identifier:
                keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:e4:7d:d8:37:8f:ac:1e:0e:ee:33:76:e7:c9:60:ad:54:
         8f:e9:12:c3:d7:65:dd:69:6e:4f:f8:b3:f0:2c:12:dc:92:d4:
         e6:53:93:73:ea:04:60:20:f8:32:e7:a3:4d:51:3f:60:9e:db:
         df:dd:61:79:41:25:c5:3a:f6:66:7d:ff:e3:7a:75:6c:33:41:
         58:98:ce:d2:f0:19:17:f9:29:5b:65:ee:87:f5:9e:eb:9c:f1:
         de:7f:44:cb:7c:b4:d0:58:56:f7:cb:df:34:64:20:b5:ac:98:
         6f:aa:e3:a3:66:2c:c0:ba:b7:67:91:91:a3:2d:91:f3:6d:65:
         4f:0f:12:cb:de:dd:a6:42:b7:e5:53:89:cb:50:b8:82:09:2c:
         90:6a:8a:80:cf:55:48:8b:c2:8b:b3:90:ea:fc:71:33:a8:d6:
         ac:79:83:2d:37:7b:99:d1:94:00:d2:5f:d8:56:4c:6c:26:01:
         50:4f:b2:9a:69:bb:9c:9f:fc:25:2e:0d:6c:0d:f9:cb:3f:54:
         df:cc:6f:7e:34:bc:cc:3d:fa:37:58:74:09:20:20:cd:ec:62:
         95:3d:fe:48:b4:31:20:76:8c:e7:ea:82:2c:70:b9:ad:ed:b5:
         92:34:43:bd:a8:d1:46:77:dc:43:d0:3b:2e:3f:84:a5:f8:5d:
         8d:7d:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:12:43 2026 by rpki-client