Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File:                     LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier:          ToUp0gfNW9xUdlmUvq1O9dgf764vx7wCqOWM7ToCqBQ=
Subject key identifier:   0C:AB:2F:BF:13:BB:D4:E4:EE:AA:5E:F1:DE:CF:90:A3:48:F2:4A:DC
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer:       /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial:       019D389BE62AC306CA314DF787F4069EAC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number:          123A
Signing time:             Sun 29 Mar 2026 08:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:34 +0000
Files and hashes:         1: It7uM3Rh24ZsaT0gP_5DTgns11A.roa (hash: ygKGw/KKIh+Ljlm07a0ZbILTTd125kn6NartFxH8sag=)
                          2: K4tPBn3mDHxWQQ0mC5UfSt8RbNI.roa (hash: EPXhFOqzbmGAC3xjCqN6fTup4RvNIb3pcFL4UJPyUsU=)
                          3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: RIhZsDmPx5RUH/FsX5W38Nmlm6IKjQWn1t6IFzUSeM0=)
                          4: k_oJvHDBdkcghP_1JMBPzqmqbTk.roa (hash: TNK8uQBOEOR3wyZ9LMW27yN2zoLPzBis8BAPSJ0G5tg=)
                          5: rFArsoFoYLfY2C4kISkWl1SGheo.roa (hash: eYlc685oKXF5uazF6hY6BaH41ateFLDviGpvTWxuxyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:e6:2a:c3:06:ca:31:4d:f7:87:f4:06:9e:ac:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
        Validity
            Not Before: Mar 29 08:00:34 2026 GMT
            Not After : Mar 30 08:00:34 2026 GMT
        Subject: CN=0cab2fbf13bbd4e4eeaa5ef1decf90a348f24adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:8a:6a:26:5e:97:66:50:02:dd:40:d4:b8:
                    19:a9:fa:ed:1d:1e:5d:9f:26:d8:ab:77:03:29:06:
                    69:30:cf:69:0b:f7:1b:2a:75:18:ae:06:c8:c0:6c:
                    38:b1:a1:f4:5f:68:64:83:0c:8c:38:ca:8a:92:39:
                    f7:a0:1a:22:5d:ff:3b:ff:e9:76:33:58:3c:9f:c8:
                    a2:ed:9d:68:d6:98:dc:19:b4:92:09:73:dc:9b:3e:
                    1b:38:38:f7:b8:61:39:92:12:4b:fa:f5:0e:18:ee:
                    1a:41:ba:a2:5b:50:a7:b0:5c:82:ab:bb:ea:ff:66:
                    4a:6c:1c:e3:95:57:06:09:74:2f:c6:fe:b4:98:ee:
                    59:12:2b:fa:d3:c0:dd:e7:ed:6e:de:f6:43:43:5c:
                    50:1a:b3:3e:9b:5d:0c:ce:a9:b0:ff:88:c8:7e:3c:
                    1b:d7:cc:6a:f9:e7:99:60:d4:de:bf:47:0e:b6:87:
                    0e:a1:29:f8:37:07:7d:f4:01:db:3b:b0:ff:19:4c:
                    be:9f:bf:8d:ed:ec:43:09:f5:d8:3d:e0:e1:f4:df:
                    60:c8:6b:30:43:9c:94:34:33:68:ff:f6:d9:96:d5:
                    b8:ad:73:ae:9a:78:e5:0e:b1:9a:51:c1:0e:34:b3:
                    f3:43:05:6a:c9:d9:ba:e1:0c:f3:c2:3d:ff:10:42:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:2F:BF:13:BB:D4:E4:EE:AA:5E:F1:DE:CF:90:A3:48:F2:4A:DC
            X509v3 Authority Key Identifier:
                keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:25:f5:39:d7:82:a2:ed:99:9e:a2:82:ba:53:2d:be:8b:9c:
         69:2a:cf:dc:f7:90:5f:c4:03:83:ff:23:64:c0:ae:3c:17:48:
         d5:8d:39:28:2b:14:26:37:65:a7:e8:23:81:34:8b:c2:73:16:
         3c:c0:23:5d:9c:88:80:5a:30:14:32:d5:7b:6a:05:0e:d8:c1:
         da:3b:61:10:ba:09:b2:2f:41:ff:25:c0:23:24:3e:16:2d:21:
         22:67:8d:e1:c3:8e:7d:30:cd:37:41:d7:ab:7f:77:c9:18:5a:
         c5:fa:01:b9:34:6b:a8:7c:2a:30:94:d3:7a:d4:71:21:bf:c6:
         42:39:0c:29:29:00:b3:89:96:a0:74:65:bd:5f:bb:9b:b6:a8:
         d5:fb:61:47:61:fe:1f:cc:bc:99:db:09:7a:bf:04:a0:6e:94:
         4c:d9:9f:62:84:45:51:cb:f6:ce:c6:a0:4b:59:cf:58:4f:30:
         7c:2c:f2:6b:9c:be:18:8d:ce:7e:9a:8b:2c:d4:a1:40:52:e0:
         3a:06:5a:47:dd:98:44:fb:6d:de:4b:3d:cb:c6:16:45:64:9a:
         e8:c8:87:bc:3a:d4:47:3b:e9:e4:94:cd:e5:bd:27:05:23:d2:
         bc:0b:6e:44:00:17:cd:1f:de:c3:5e:8e:f3:26:ac:ef:80:44:
         82:8b:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:29 2026 by rpki-client