Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File:                     LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier:          8fUl8H4EBu0Gs0xNzNCIr5kq4G80FEkWGjO4Q8/i0+0=
Subject key identifier:   45:AE:1D:8C:4C:55:33:38:56:EB:EA:E1:E8:35:C1:D9:13:A1:0F:77
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer:       /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial:       019D284D5614EA7D8B880C4CFF9429D46E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 04:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:50 +0000
Files and hashes:         1: H7ajP4k-tqBkc1AdtIseOiAFeNw.roa (hash: XfKJzAL0fK4z62zRzcfP/LqBvxxrItwe2ueGA3MJylY=)
                          2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: TzKqN5rSDXF4mc6mqIniB2Lj1TuEKNxZBeUSeqDtDA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:56:14:ea:7d:8b:88:0c:4c:ff:94:29:d4:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
        Validity
            Not Before: Mar 26 04:00:50 2026 GMT
            Not After : Mar 27 04:00:50 2026 GMT
        Subject: CN=45ae1d8c4c55333856ebeae1e835c1d913a10f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:ba:58:d4:5c:d1:0c:a7:ae:0e:a7:b6:c3:
                    c0:47:44:52:29:a4:8b:51:80:eb:dc:92:f3:4a:f5:
                    9e:04:dd:af:0c:b2:55:68:e5:d5:1c:09:ec:e8:00:
                    0b:21:22:d4:63:a3:ce:06:41:db:4d:ee:7d:92:31:
                    42:4b:59:25:3a:2b:97:af:10:17:76:4b:d1:56:34:
                    d4:ec:1c:78:d5:69:12:ad:97:54:36:12:c7:91:94:
                    31:3e:bd:36:b7:72:49:2a:90:fe:59:9b:6e:46:cd:
                    a9:0f:2e:c2:8b:df:69:71:bb:7d:84:a9:82:8e:dd:
                    cd:45:d1:01:ea:43:eb:d8:00:a7:72:4b:59:36:bb:
                    0e:b1:5c:c2:f8:30:14:c0:fc:4e:8e:10:35:0b:38:
                    8c:51:0c:03:50:17:bd:a1:07:16:b2:82:6b:c0:6b:
                    5d:c3:67:8e:95:44:66:7a:3a:fb:02:77:ed:48:87:
                    03:21:e1:20:26:a4:03:14:cd:ea:ab:d9:d0:7b:d1:
                    46:b9:57:a9:cc:42:17:e3:06:e9:8a:11:eb:b3:a4:
                    88:a6:83:63:55:b3:ee:34:09:3f:cd:29:f0:dc:eb:
                    40:50:81:e4:51:d0:03:29:e1:28:0c:45:25:18:ff:
                    a6:09:cc:8c:fd:d6:e1:24:43:39:f8:fe:3f:88:88:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AE:1D:8C:4C:55:33:38:56:EB:EA:E1:E8:35:C1:D9:13:A1:0F:77
            X509v3 Authority Key Identifier:
                keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:69:90:ea:9e:5d:c5:06:9c:e7:0e:a6:67:b8:66:87:57:55:
         14:47:09:b7:12:7f:5a:c4:7a:1c:c7:c8:f6:28:ad:8b:ed:4b:
         3b:3f:17:37:51:ce:67:de:b0:e7:91:59:c8:40:6d:78:c6:eb:
         df:cf:04:08:63:2b:86:04:84:e7:ab:b5:a2:5a:8a:8b:68:6d:
         0c:59:76:00:bd:7a:ca:6b:81:83:5c:48:15:30:87:69:9c:7b:
         34:40:66:77:7f:5e:4b:34:75:58:99:2c:7b:70:5d:bc:b4:28:
         da:01:96:95:0f:80:65:3c:7a:cd:6a:6e:26:dd:bb:3a:1f:4e:
         ac:e3:cb:20:d8:25:0b:88:72:cb:32:c7:b9:da:c4:fb:49:de:
         ea:9e:f5:7e:9d:5c:e3:c8:a2:c2:eb:04:81:5d:1e:df:fa:56:
         89:f7:0d:a2:e7:a7:e6:f8:97:97:1b:b3:e4:73:82:18:95:2c:
         3d:0f:41:8e:45:c1:9a:d9:6e:b1:60:a9:07:fb:c4:e4:cd:0f:
         c8:19:f0:3e:6b:5e:82:ee:cd:56:d0:8e:5a:bb:a1:db:e1:b4:
         ed:c5:89:11:a4:d2:50:7e:87:f1:ca:43:3a:1a:21:85:68:f4:
         87:d0:d2:17:39:44:ad:af:51:00:d3:43:7a:f8:7d:fd:71:08:
         3f:e6:52:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVYU6n2LiAxM/5Qp1G5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw
MTQ4MjcwHhcNMjYwMzI2MDQwMDUwWhcNMjYwMzI3MDQwMDUwWjAzMTEwLwYDVQQD
Eyg0NWFlMWQ4YzRjNTUzMzM4NTZlYmVhZTFlODM1YzFkOTEzYTEwZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM26WNRc0Qynrg6ntsPAR0RSKaSL
UYDr3JLzSvWeBN2vDLJVaOXVHAns6AALISLUY6POBkHbTe59kjFCS1klOiuXrxAX
dkvRVjTU7Bx41WkSrZdUNhLHkZQxPr02t3JJKpD+WZtuRs2pDy7Ci99pcbt9hKmC
jt3NRdEB6kPr2ACncktZNrsOsVzC+DAUwPxOjhA1CziMUQwDUBe9oQcWsoJrwGtd
w2eOlURmejr7AnftSIcDIeEgJqQDFM3qq9nQe9FGuVepzEIX4wbpihHrs6SIpoNj
VbPuNAk/zSnw3OtAUIHkUdADKeEoDEUlGP+mCcyM/dbhJEM5+P4/iIg8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWuHYxMVTM4Vuvq4eg1wdkToQ93MB8GA1UdIwQY
MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt
MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi
LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWmQ6p5d
xQac5w6mZ7hmh1dVFEcJtxJ/WsR6HMfI9iiti+1LOz8XN1HOZ96w55FZyEBteMbr
388ECGMrhgSE56u1olqKi2htDFl2AL16ymuBg1xIFTCHaZx7NEBmd39eSzR1WJks
e3BdvLQo2gGWlQ+AZTx6zWpuJt27Oh9OrOPLINglC4hyyzLHudrE+0ne6p71fp1c
48iiwusEgV0e3/pWifcNouen5viXlxuz5HOCGJUsPQ9BjkXBmtlusWCpB/vE5M0P
yBnwPmtegu7NVtCOWruh2+G07cWJEaTSUH6H8cpDOhohhWj0h9DSFzlEra9RANND
evh9/XEIP+ZSgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:22 2026 by rpki-client