Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File:                     LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier:          exk73vA4UdxVr++pNSkipjY/l1fjcpdLMRCJVdgxkfY=
Subject key identifier:   EC:D5:7B:BD:A1:D1:DE:84:FF:3B:84:B2:C7:DF:E5:F0:8A:0D:92:BC
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer:       /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial:       019EBE47C2127694105F0936385F4DC8A795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number:          16A5
Signing time:             Sat 13 Jun 2026 00:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:34 +0000
Files and hashes:         1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: h25r9nZ5VuQPXxJRp7QqIgHSohcP1Vcozyba+yPHZlI=)
                          2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
                          3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:c2:12:76:94:10:5f:09:36:38:5f:4d:c8:a7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
        Validity
            Not Before: Jun 13 00:00:34 2026 GMT
            Not After : Jun 14 00:00:34 2026 GMT
        Subject: CN=ecd57bbda1d1de84ff3b84b2c7dfe5f08a0d92bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:21:74:ef:79:52:9c:a6:56:46:7f:31:f3:
                    e3:4a:5a:b4:b4:2d:9a:18:b9:27:3b:53:8f:83:99:
                    78:40:ab:ac:a9:01:66:ba:9b:51:a1:cc:04:77:2c:
                    43:2c:93:57:6f:15:37:bc:7d:47:e5:34:a4:ec:16:
                    ab:8b:2e:25:19:1e:71:8e:9d:34:3b:78:12:cc:bd:
                    93:16:ad:a3:74:1f:2c:d4:6e:44:b4:ee:c6:36:05:
                    9e:61:a3:a0:a7:b3:f0:d3:a9:95:4d:57:a4:b2:ec:
                    22:04:6d:c5:f0:ff:01:fc:11:c3:27:99:5a:03:4b:
                    6a:fe:3a:b7:78:c2:40:c2:9d:dd:a1:1e:34:9d:b2:
                    b8:93:8d:ab:b1:d0:4e:8a:ba:bd:4b:7a:c9:7b:a1:
                    34:7d:9f:83:f5:f6:54:4e:85:6d:42:33:96:ad:29:
                    a8:9d:b3:68:fc:f3:15:74:09:06:67:24:85:c0:26:
                    d6:ea:c6:5c:c8:9b:0b:41:7c:b6:be:11:a5:fb:df:
                    9c:3b:5c:a7:93:20:68:48:34:90:aa:02:d0:73:fd:
                    34:49:f9:a7:cd:c1:e9:d6:39:19:78:1d:89:58:9f:
                    33:d6:a5:69:62:13:3c:31:c9:b8:ec:5c:e7:6f:0f:
                    3f:98:81:53:0f:d5:08:eb:40:c6:da:ef:9a:2e:2b:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D5:7B:BD:A1:D1:DE:84:FF:3B:84:B2:C7:DF:E5:F0:8A:0D:92:BC
            X509v3 Authority Key Identifier:
                keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d0:59:ee:b6:86:44:03:4c:17:52:b0:0e:a5:d3:41:81:b2:
         41:c2:82:1e:6f:43:65:f6:54:fb:28:05:9b:53:0d:69:b5:9c:
         cd:12:b5:f0:7d:1c:17:68:ef:48:7f:71:5f:50:cd:75:9d:fd:
         3a:20:20:27:d0:f0:8a:e4:53:a2:b7:a4:67:61:76:b5:2b:ed:
         b2:37:91:28:ef:a9:3f:8d:68:07:fc:8c:9c:a2:9d:15:c3:ba:
         ba:7f:0f:b6:96:5c:6d:02:3a:c0:9e:39:63:78:0c:34:1c:ef:
         30:f4:00:f4:ae:6b:93:e5:8e:19:83:c4:82:ee:15:68:af:b1:
         fa:d2:c4:0c:37:41:10:73:aa:10:10:a6:b6:fc:4f:26:36:3c:
         0e:f4:a8:05:27:43:11:bb:60:16:99:0c:45:26:5f:5c:6f:6f:
         04:b3:92:86:e3:32:7f:2a:c5:5f:08:f2:4e:22:95:51:33:9d:
         11:1f:83:dc:2d:08:63:82:76:e0:e2:e0:cd:5d:01:cd:e2:11:
         ec:d5:96:b9:82:ff:f1:94:0b:96:cf:db:b2:ae:57:45:d0:55:
         23:b9:1c:77:32:b3:a7:a8:6d:02:c4:28:54:7e:44:ff:6b:9f:
         b5:82:a6:23:60:56:1d:eb:5c:0a:f7:89:f8:92:6a:8f:9a:dc:
         2f:83:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:55:50 2026 by rpki-client