Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          gzEJjGsuzIUFit9vwZQOmC0COIO/3KPobnwJC0gn3T4=
Subject key identifier:   56:8B:DD:99:EB:77:6A:DC:19:1E:DC:A1:8F:9E:9F:D6:D9:F0:5F:09
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       019D39AF680114B69C93A23A8205B91465F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          0592
Signing time:             Sun 29 Mar 2026 13:01:29 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:29 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:29 +0000
Files and hashes:         1: LUonv2RCWvu1zL14QrHsu9P2rS4.roa (hash: sYEwbsM2ctHv6cNHrCxgkHRsQW+if3GIsRAYyp3V97Y=)
                          2: S8keSl8NDHVc6KPmbXVZh56DkMo.roa (hash: gehjFU9x+RbJrI179PzTfPP1zreMHK8V8b0riuey5sI=)
                          3: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (hash: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE=)
                          4: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: qfPFitelfFcZww5O9joQjPL4FGPLyRQN2GmW9tH136g=)
                          5: rNttweQh2PLctodsZ8mGF8Xdou4.roa (hash: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:68:01:14:b6:9c:93:a2:3a:82:05:b9:14:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Mar 29 13:01:29 2026 GMT
            Not After : Mar 30 13:01:29 2026 GMT
        Subject: CN=568bdd99eb776adc191edca18f9e9fd6d9f05f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:44:f6:31:44:4e:09:dc:dd:f9:23:1d:74:
                    64:2a:78:5f:09:4d:1f:16:05:67:c4:cf:55:93:da:
                    fe:72:71:09:91:9d:a2:7b:70:ef:5a:2f:fd:ea:d8:
                    12:ba:a9:40:e5:67:f0:31:1c:44:c3:69:f8:ce:be:
                    5d:bd:77:8c:64:fa:e1:3c:cd:68:99:38:42:96:23:
                    be:94:56:c9:67:c0:cb:75:a6:1e:cf:a0:f6:a4:48:
                    d2:5b:03:6b:34:69:17:1c:46:12:9a:87:79:1e:e7:
                    e0:fe:e2:03:63:d7:90:63:47:ec:ce:31:ea:e9:71:
                    43:10:17:e7:fa:01:d4:a0:2a:b1:a5:50:62:bd:60:
                    e3:6b:bb:a1:fa:90:e6:ed:3a:48:42:3d:80:9c:97:
                    f6:40:5a:94:14:cb:90:45:b0:91:93:2e:11:9a:13:
                    2b:cd:87:dd:79:e9:d8:94:89:ba:7e:a5:7d:df:f0:
                    ed:37:0e:17:18:ae:4d:b5:0b:10:2f:6e:49:49:64:
                    d6:16:30:57:a4:9c:f9:12:5f:23:b7:37:e9:b7:7b:
                    69:a2:16:f9:0c:c6:ae:0a:41:54:02:c5:da:3d:39:
                    5d:6e:10:dd:6a:5e:e4:24:eb:c5:26:6a:01:31:45:
                    ff:f0:86:43:23:42:2d:6e:ba:a3:2a:69:ca:03:6c:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8B:DD:99:EB:77:6A:DC:19:1E:DC:A1:8F:9E:9F:D6:D9:F0:5F:09
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:02:73:3c:65:04:d6:51:31:93:03:43:d4:50:2a:1b:ca:a0:
         20:a6:ac:b6:87:a1:74:92:5b:83:f7:2a:e2:b9:ac:74:54:23:
         8d:a0:69:d1:f0:ba:21:16:a7:61:cf:02:b9:3f:89:bf:47:a2:
         c8:3d:90:eb:0a:8c:6c:e0:a1:51:af:58:23:d3:74:54:d4:c0:
         02:d0:1b:8a:6d:68:ab:16:9c:96:99:e0:df:e8:aa:5e:6d:70:
         62:0c:31:e0:ce:3a:df:ed:9e:b6:24:f4:2a:22:41:f6:ef:4e:
         18:ca:f4:15:52:4a:20:be:b9:2e:8c:b5:8c:f2:58:f5:96:0e:
         7a:cb:96:52:c5:8d:6f:4f:97:27:de:6e:21:07:b5:58:08:7e:
         20:9d:85:fa:e5:eb:33:dc:1a:d8:e9:3f:c8:87:42:1d:4a:3f:
         3d:24:2a:74:d4:1f:11:65:97:a2:64:51:86:47:f2:53:a9:c2:
         b9:97:12:b0:9a:81:61:a9:4e:de:30:4e:d9:d5:e4:09:79:a5:
         e5:3f:ff:94:d1:72:a6:70:ba:29:d3:b3:f3:1f:9b:8f:e1:99:
         e8:21:b2:60:eb:d6:9f:b0:22:d7:6f:bf:50:9e:fc:0c:85:66:
         8e:ce:d8:a8:b6:51:52:f7:0b:86:26:f7:81:91:20:ae:56:2c:
         67:51:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:45 2026 by rpki-client