Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File:                     LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier:          XI/h7AuVyTEqeGUH+eZ1RiI9tFAZwbgmOTu1K70cIXI=
Subject key identifier:   BC:F7:74:8E:13:58:C0:82:F6:A3:F3:FB:AF:07:F8:2C:12:C8:9C:34
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer:       /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial:       019CE900A41311825475A46D69B8C608EB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number:          15B2
Signing time:             Fri 13 Mar 2026 21:00:59 +0000
Manifest this update:     Fri 13 Mar 2026 21:00:59 +0000
Manifest next update:     Sat 14 Mar 2026 21:00:59 +0000
Files and hashes:         1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: CK6nrGWhn/z6++7saJCG4zEipwqe/oupou7aDwNS49I=)
                          2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
                          3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:00:a4:13:11:82:54:75:a4:6d:69:b8:c6:08:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
        Validity
            Not Before: Mar 13 21:00:59 2026 GMT
            Not After : Mar 14 21:00:59 2026 GMT
        Subject: CN=bcf7748e1358c082f6a3f3fbaf07f82c12c89c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:0a:f5:ec:50:76:18:d6:62:ea:ec:54:d4:
                    07:de:01:0d:27:83:c2:5f:60:74:ae:cf:01:31:2c:
                    5f:c0:b8:74:3e:b9:9f:04:75:ca:46:a0:2a:fa:b7:
                    68:92:e3:a3:9a:51:f2:34:1b:03:06:93:ba:79:02:
                    a4:79:73:b4:57:73:55:ff:02:63:3f:9e:eb:05:81:
                    1b:72:cd:56:e4:26:84:08:16:25:fe:ab:d5:55:67:
                    a9:f9:db:c1:06:90:89:07:b1:e0:c2:72:d7:28:0c:
                    4d:98:61:bd:96:22:47:85:ec:98:04:6e:76:1f:d6:
                    ff:7b:5a:d3:f3:6a:e3:9e:95:9f:b2:8d:b4:c7:85:
                    a4:f5:f3:bd:48:11:9e:14:8e:e1:9c:6c:b6:11:c1:
                    0a:4d:16:7d:21:ba:88:02:b8:92:64:d2:38:98:a9:
                    59:c6:45:e1:ac:56:42:a5:c6:6f:71:32:e5:a9:e2:
                    f5:94:bc:ed:f1:94:ce:1e:84:30:66:e7:2c:c3:5e:
                    02:db:2e:88:9b:09:4d:93:5e:c8:69:b9:dd:0c:04:
                    82:31:08:6d:8f:bc:b1:37:13:d8:da:14:5e:91:b9:
                    99:09:27:29:50:c4:32:50:7e:19:8d:88:c2:ea:e0:
                    29:cb:9c:c9:f2:88:f5:e7:eb:24:a8:85:d0:ed:89:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:74:8E:13:58:C0:82:F6:A3:F3:FB:AF:07:F8:2C:12:C8:9C:34
            X509v3 Authority Key Identifier:
                keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:bf:10:18:9c:f0:28:29:a4:8b:47:33:3c:66:d0:59:96:
         5b:b1:2e:67:0e:9b:ef:ff:cf:1a:05:00:ee:de:6c:c5:b8:d4:
         a0:c5:43:79:98:4d:0d:49:cd:7a:00:16:07:e3:09:92:10:e4:
         b1:5b:3e:4d:2e:41:19:8e:69:32:87:49:d4:15:b9:0e:c5:ff:
         e2:18:50:05:7d:91:d0:00:5d:45:b3:e1:74:47:2f:e8:55:9a:
         ad:30:00:d4:1b:2f:61:e2:db:78:35:ca:35:f4:4e:24:9c:e6:
         7a:95:e0:6b:c9:9d:e2:18:f3:13:b9:c7:1a:e8:17:47:09:c3:
         c9:f5:cc:1e:fd:03:4a:de:6c:95:18:bb:c8:8a:10:f1:e0:41:
         d7:5e:54:ed:16:c0:08:f5:8c:6f:97:a4:11:73:ce:90:ca:60:
         ab:7e:08:21:6b:7d:7c:40:24:e8:77:d7:12:fc:4c:58:99:63:
         32:82:c9:6f:d7:21:0c:5c:7c:e2:67:af:2e:9e:bc:70:62:b0:
         62:19:6e:69:b2:3a:bb:a6:1a:14:83:c1:b9:fa:dd:36:df:5c:
         6f:5d:6e:b0:d2:f6:d7:f8:29:cc:60:59:eb:ee:3d:f1:74:9b:
         8f:7e:dc:ba:0f:4e:93:13:10:ad:c4:d5:a9:e9:88:69:75:36:
         ef:a5:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:48:04 2026 by rpki-client