Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File:                     LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier:          TNNqWQo2mzdxtUNdSL2rxhA3pWQ/BMhQRjabRD5bPlI=
Subject key identifier:   9F:BF:32:CD:90:F0:1A:26:3A:06:04:C8:28:1E:62:BA:E7:20:B4:6D
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer:       /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial:       019D37890510051A1FB25961E1A7AAD35DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 03:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:19 +0000
Files and hashes:         1: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: iyX/VQ0Fugqa0nzUUAlqeKyW5TIlmRQdlfAXFoiSKJs=)
                          2: Rd5ogL0rZH0GwJinSJKEBpZALRE.roa (hash: nV1zKTqNKFR84ggPUZVLKnPWuVDibn1TXYU/+rnDjXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:05:10:05:1a:1f:b2:59:61:e1:a7:aa:d3:5d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
        Validity
            Not Before: Mar 29 03:00:19 2026 GMT
            Not After : Mar 30 03:00:19 2026 GMT
        Subject: CN=9fbf32cd90f01a263a0604c8281e62bae720b46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:a6:9c:ee:d6:70:bd:47:10:28:46:93:8d:
                    c8:ae:3d:bb:b4:2e:77:00:33:af:71:66:de:2d:61:
                    4b:66:df:3e:0e:e1:1b:1f:4d:18:5c:db:06:c0:07:
                    11:db:19:88:87:21:24:17:e2:af:9e:60:d6:19:13:
                    75:41:79:a8:50:f7:6a:7b:84:b6:d2:90:1d:fa:76:
                    d0:29:00:62:39:1e:25:87:5f:87:7e:35:bc:d5:73:
                    a1:16:3d:42:af:24:a1:0c:d6:10:5c:45:ef:1a:68:
                    ed:dc:ba:65:3f:c9:d1:02:dc:7c:73:fa:4c:7f:10:
                    ca:d6:35:d3:2d:de:08:a4:c0:f1:e6:a6:14:db:00:
                    75:06:eb:29:11:1e:bb:af:5d:31:cb:f7:94:b6:dd:
                    a0:68:54:2b:7b:7a:ba:a3:e2:83:1d:c0:59:0e:27:
                    cf:a1:9d:59:cf:84:e4:e5:e7:dc:48:39:80:dd:37:
                    9d:7a:6a:87:ab:c2:fd:01:53:d6:b3:30:f6:f4:2f:
                    85:8a:6d:e9:9c:a5:7e:e9:73:f6:9e:8c:b9:dd:bf:
                    53:79:7a:d5:11:41:51:ad:a0:d1:ce:e5:3a:a9:68:
                    0d:44:a7:50:8d:63:d9:e5:9f:85:c4:3c:22:34:fb:
                    cc:06:e4:27:98:27:a9:26:6d:52:ce:1b:dc:0a:aa:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:32:CD:90:F0:1A:26:3A:06:04:C8:28:1E:62:BA:E7:20:B4:6D
            X509v3 Authority Key Identifier:
                keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:d7:71:4b:34:5b:ab:0f:66:a0:ac:1d:df:1a:92:e2:6e:
         69:2e:a4:22:24:dc:29:31:09:ea:d5:2f:53:65:01:35:4f:bd:
         57:0a:25:50:5c:f3:54:59:d6:10:08:68:0d:b2:0d:7a:ff:eb:
         92:94:6a:bc:07:15:54:54:b7:e6:d7:bf:b0:f6:ad:20:0c:c0:
         c6:fd:c3:75:a6:91:65:80:75:28:7f:af:f9:ea:e7:5a:bd:52:
         d2:81:37:9e:f9:bf:ba:86:e5:f7:93:a2:f1:03:4b:6f:9f:ba:
         9d:15:f2:33:1b:53:12:96:c1:b7:c1:92:3c:d5:35:68:22:2f:
         c8:76:9c:94:c0:74:7e:e0:8f:7d:14:3b:18:44:72:15:e7:de:
         3c:f6:4b:3c:f2:5e:11:0a:f9:67:77:c1:44:cb:fe:c0:d0:53:
         86:25:f6:ff:77:f7:8b:6d:fc:4f:ed:a4:fb:a9:e7:ca:66:4c:
         90:1c:b6:50:34:2b:91:f0:e6:0f:7c:86:84:bb:fd:51:77:56:
         af:35:17:02:d5:ee:b0:35:90:8f:f0:1e:d4:3b:9f:e1:8b:06:
         6c:77:57:75:f8:75:d5:ed:0c:31:62:8a:21:2b:89:c8:0c:4a:
         53:c9:3d:77:47:4e:8d:09:7d:b7:bc:48:c5:51:28:b8:df:8c:
         ba:83:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:35 2026 by rpki-client