Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          eVS0bTpF6nUrGex/lMVlgkYZFYiQkxbAoNZI/8tAGto=
Subject key identifier:   D1:F4:C8:35:9A:D8:75:8C:87:EA:51:44:7E:7E:F8:6D:C9:89:AD:E0
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       019CE6DAF9FDAA2619F155C7F9AE6682246E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          1868
Signing time:             Fri 13 Mar 2026 11:00:36 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:36 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:36 +0000
Files and hashes:         1: 84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa (hash: rNTsCrnkBSEotffzabMsfyCIf6z9oVHssU96RenS0Ts=)
                          2: LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa (hash: ok1BqU/j817hL0rg14Y5eXLHkWWn2Jj6wQeonBm4dcs=)
                          3: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: BynRmMupS3haoIYlc5h55Wah+UyykVN+9+WjlLdHoh8=)
                          4: MBwRKSHfxRIenZ6VTtp6s77mU-g.roa (hash: ZUftLriouLT0rVggX9Wl5+VKJOkkEmSY4zXobVbg1VA=)
                          5: XIo_9-qFy5wjas20w7MdEaNT8T8.roa (hash: mjSD46sU4dPzZBYqQEdjYI8aGEpVPeI7VUJMRwMVNGY=)
                          6: aZBPshcpYuW3uiPNklELJKpWxB0.roa (hash: FDs/jppjg3SFmpeDxF8pcdK8smBMdmkqoES9cLDqS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:da:f9:fd:aa:26:19:f1:55:c7:f9:ae:66:82:24:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Mar 13 11:00:36 2026 GMT
            Not After : Mar 14 11:00:36 2026 GMT
        Subject: CN=d1f4c8359ad8758c87ea51447e7ef86dc989ade0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:04:53:71:94:36:fc:27:f2:cb:fd:78:da:
                    4f:19:21:32:1e:1d:3c:5c:72:a0:6e:06:22:f7:80:
                    20:4c:9c:b5:20:d9:dc:13:05:36:39:d6:8d:43:fe:
                    36:1d:1e:f9:38:ef:59:bf:a2:da:bb:3e:8a:36:de:
                    cb:c5:9f:8b:73:4b:db:0d:8a:6a:83:4d:c6:d9:5d:
                    db:62:74:97:c6:0e:1f:31:38:19:b8:67:d6:78:23:
                    d6:1b:fc:7c:b9:5b:6b:80:17:df:cd:21:b1:4b:96:
                    83:4d:39:b2:d0:d7:04:73:fe:9b:e1:27:f2:7e:1a:
                    49:4d:83:f7:8f:35:8f:c8:ce:47:f6:ed:6d:c3:5e:
                    7d:47:09:42:e6:44:c9:b0:0e:8a:d8:17:f1:76:9e:
                    4d:cb:2f:75:2a:86:f1:07:c0:3d:f5:00:a6:bb:b8:
                    e5:dd:5d:d1:da:94:b0:8b:37:55:aa:7e:ac:c4:21:
                    18:64:7e:a3:94:78:11:6c:d8:be:62:81:01:a2:90:
                    a8:78:dc:c0:03:32:9d:8f:8c:c8:da:44:e4:8d:f7:
                    5f:b2:99:46:99:92:ce:2f:6e:9d:48:2e:63:49:f4:
                    cd:75:37:c8:0d:76:79:e1:77:68:ea:00:2c:04:1a:
                    24:43:e3:20:da:86:fb:38:2f:e3:bb:52:28:2b:b8:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F4:C8:35:9A:D8:75:8C:87:EA:51:44:7E:7E:F8:6D:C9:89:AD:E0
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:6e:1d:80:28:dc:12:8a:09:4c:5a:a0:d3:91:da:2d:85:
         7b:09:61:0b:a1:16:bc:ec:42:43:19:a0:48:5f:c1:51:68:57:
         71:6e:64:3b:fd:05:da:06:2c:d9:bf:fb:e9:d0:ff:db:39:10:
         7d:57:72:99:00:fa:7f:ad:b5:60:84:96:2e:30:4b:95:12:b9:
         88:ab:c5:d9:20:2f:47:16:fa:36:cb:be:c5:de:88:6c:9a:61:
         e0:c9:16:7f:55:bf:11:a1:c0:bb:f5:9e:01:64:9b:0d:12:5f:
         0c:d1:15:7a:eb:01:a6:21:50:50:2b:3d:aa:e5:98:e2:e3:59:
         91:38:a9:70:1c:32:ed:1b:ca:dd:1d:a5:df:b0:17:b4:82:a8:
         9b:98:6e:4b:87:74:79:4d:52:1a:b6:dc:9b:cb:91:bf:71:e5:
         08:65:03:72:8d:e5:88:3c:26:dc:29:bb:a5:bc:e6:1e:d3:e0:
         52:38:a4:09:c4:d2:6a:7a:c1:be:8a:2c:eb:53:5a:80:f3:5e:
         df:01:77:06:8b:a3:c7:cb:c3:19:23:e7:f2:6e:6d:6d:35:11:
         d9:13:bb:c9:a1:85:bf:02:75:b3:81:64:7b:bc:ff:78:98:60:
         0d:20:45:1a:53:1d:dd:a9:33:31:9a:d3:e7:d0:88:a6:0a:f0:
         c3:32:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:56:22 2026 by rpki-client