Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
File:                     LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json)
Hash identifier:          eY8Gb3vvCLUNW1IO8Q4y8UQBf6RYDi/O2NaPCiTC51c=
Subject key identifier:   BC:82:58:62:59:FC:53:BE:E5:31:14:43:94:C1:82:6A:BB:3D:B2:EB
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       019F1979F4A9468E59F1D3027FB3440938EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
Manifest number:          1996
Signing time:             Tue 30 Jun 2026 17:00:50 +0000
Manifest this update:     Tue 30 Jun 2026 17:00:50 +0000
Manifest next update:     Wed 01 Jul 2026 17:00:50 +0000
Files and hashes:         1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=)
                          2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=)
                          3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=)
                          4: 34lSajmzV7ghbV2u1KSVPerBr80.roa (hash: NamtEVy8eAOlAQdliJbJze4twHs6pp1lCvXKU+23zoI=)
                          5: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=)
                          6: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=)
                          7: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=)
                          8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=)
                          9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=)
                          10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: cHUCiM08zO0X31thspk6qvEUrSaMJe3epbXlZUzP2+g=)
                          11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=)
                          12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=)
                          13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=)
                          14: XZk-yWmlDDM9CxBVtm8oXZP5lLg.roa (hash: 4M0vAZEtj82VVd8AbgFS4P7h6woEavJ+CLFH4jVH08E=)
                          15: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=)
                          16: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=)
                          17: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=)
                          18: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=)
                          19: x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa (hash: 7TMD01f8lLY3g9AO1/72S5iTfUyRV4cwvwL1UdzW4pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:79:f4:a9:46:8e:59:f1:d3:02:7f:b3:44:09:38:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Jun 30 17:00:50 2026 GMT
            Not After : Jul  1 17:00:50 2026 GMT
        Subject: CN=bc82586259fc53bee531144394c1826abb3db2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:9d:60:f2:ec:6a:22:12:ea:bd:a0:3b:a5:
                    c8:42:90:9b:0c:05:41:e1:6a:e5:9b:36:03:59:20:
                    e4:dd:f0:30:38:7b:6f:a4:49:24:c9:ad:83:5c:3f:
                    9f:41:12:88:7a:31:5c:b4:57:c8:38:91:ee:9b:9d:
                    61:88:59:78:48:59:5b:77:85:1b:09:dc:02:55:35:
                    90:35:15:d8:dd:0b:85:e8:85:53:45:81:f5:e5:c9:
                    6e:66:06:25:4b:d4:35:73:bb:bd:dd:fd:12:f2:1a:
                    f9:93:8c:7c:28:ab:4b:4e:32:b6:dc:97:57:6d:cb:
                    2e:a2:2c:8f:88:21:88:3c:a7:fc:64:5c:9e:05:96:
                    15:2d:cb:90:fa:c1:6b:cb:32:c7:7c:9f:0f:ea:ac:
                    8f:9d:c9:88:08:c0:dd:6e:a0:94:fa:6f:4a:bd:4a:
                    bf:09:58:62:e7:07:ca:db:4c:b8:ca:7c:4b:4b:57:
                    21:fc:b1:13:df:c5:b5:fe:3b:18:2e:3a:c3:8c:7d:
                    1f:9d:7b:b3:68:24:2c:c7:dd:a8:a8:b1:5e:39:36:
                    84:40:a5:31:a6:73:22:63:a5:96:dc:f1:4f:b2:23:
                    b9:c1:97:bc:c6:05:c5:2f:a1:01:ab:00:74:0b:77:
                    1d:8e:70:a4:e1:e2:cd:be:64:59:ab:16:7f:36:a0:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:58:62:59:FC:53:BE:E5:31:14:43:94:C1:82:6A:BB:3D:B2:EB
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:95:08:f2:5f:78:9c:96:a4:19:58:5f:98:58:07:2c:30:8a:
         78:29:75:62:b6:44:62:12:e0:93:ee:be:7f:0f:1f:b7:91:8f:
         10:18:55:3f:e3:0a:f3:68:22:f7:15:50:22:76:ff:d7:6e:32:
         e1:89:4b:80:be:78:16:27:7f:ac:d0:1d:28:0d:c8:c5:15:22:
         44:f7:3f:80:9f:e1:e5:99:9a:6f:8b:f1:7d:9e:f0:e4:2f:df:
         7b:f4:ca:a3:a9:50:37:38:1e:a0:e0:7e:f5:43:d4:de:08:10:
         7f:fd:32:19:71:53:5b:2a:06:63:7b:63:76:69:56:56:c9:b9:
         23:7c:ba:58:a1:7e:e9:f4:f0:55:3d:e8:94:2a:41:92:02:1c:
         64:80:d2:53:76:a7:ad:12:b8:f6:e1:9f:45:fa:cf:35:73:bf:
         ce:5b:99:1b:34:9d:3e:7c:f6:55:96:09:e0:52:7f:38:4e:f1:
         f8:a7:15:f9:8c:d5:17:12:43:cb:c9:43:04:09:04:32:57:8f:
         ab:5a:16:b1:9c:4d:69:d5:d0:af:ff:8c:57:4b:4e:73:a9:ab:
         d7:5f:16:5d:95:c6:b1:3f:77:e4:37:e4:7b:ec:b7:8f:39:af:
         7a:04:e8:6a:4f:66:bc:f2:d2:13:e7:ec:f5:3e:0f:bd:0a:73:
         e3:f0:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:16:49 2026 by rpki-client