Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
File:                     LTX2XfLLPqFuURUvrHWUf6nDC_c.mft (raw, json)
Hash identifier:          mTykk70YXdb3AVQ0SrVepHYjXbxcDR8ksSQna9uN++s=
Subject key identifier:   CB:7E:90:F0:B0:48:16:94:C1:95:5D:0A:02:35:59:36:A6:29:32:1E
Authority key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Certificate issuer:       /CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Certificate serial:       019D27A92CAA2E0F151505483539E1F911A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
Manifest number:          0C1D
Signing time:             Thu 26 Mar 2026 01:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:31 +0000
Files and hashes:         1: LTX2XfLLPqFuURUvrHWUf6nDC_c.crl (hash: knpRDq5s5U7miz+5N3721ezz8aWlPxb0B/qLWiWwc6I=)
                          2: cbLVNecqa7eq_vrX9tOzHDnMN5o.roa (hash: SWXGQ0jOPhnlg3Y4HYwKdPGZdXvc9we70rw/MqzG2NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:2c:aa:2e:0f:15:15:05:48:35:39:e1:f9:11:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
        Validity
            Not Before: Mar 26 01:01:31 2026 GMT
            Not After : Mar 27 01:01:31 2026 GMT
        Subject: CN=cb7e90f0b0481694c1955d0a02355936a629321e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:43:16:3e:c1:e6:3e:fc:d8:9b:16:68:0e:
                    80:74:66:30:3d:7e:0e:44:91:e3:0a:fa:f6:0a:35:
                    9d:6d:16:6b:72:df:0d:4d:25:d2:c4:b1:45:d5:62:
                    62:0f:f4:71:31:75:fd:a6:ca:38:a7:f0:3f:39:ed:
                    97:26:97:92:fc:c3:77:d4:26:12:14:d2:f2:2c:20:
                    e7:9c:b5:27:fb:75:cb:8b:76:ad:9b:21:86:a8:bf:
                    06:2e:cd:e1:f2:bf:bf:c1:67:e0:4d:2d:b2:e6:62:
                    59:f9:d0:90:1d:e9:39:a2:91:06:d0:43:63:ca:b1:
                    91:30:11:af:84:c5:91:33:c1:da:7c:27:98:03:7a:
                    99:f7:51:d8:f6:6b:6c:ea:6b:51:ea:fc:70:67:48:
                    52:4f:47:a4:a5:81:c7:00:1f:f2:6e:cd:c9:c6:b1:
                    97:dc:69:d3:13:c4:9a:f6:63:64:51:ae:81:11:1e:
                    d1:af:b0:53:52:5d:43:90:bf:62:cc:ae:5e:eb:ea:
                    c4:59:71:79:7a:c1:30:09:0c:d0:4a:07:3a:0c:78:
                    b1:54:45:a3:8f:5d:a4:af:0e:fa:81:64:84:0c:6b:
                    27:a2:b2:c4:d0:03:cf:a0:ee:2e:cc:ff:72:10:20:
                    43:1d:d8:87:d0:41:df:a0:f1:92:26:d5:d9:bc:d4:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7E:90:F0:B0:48:16:94:C1:95:5D:0A:02:35:59:36:A6:29:32:1E
            X509v3 Authority Key Identifier:
                keyid:2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:ec:fa:cf:d8:46:3f:89:1e:9f:29:a8:85:f6:4a:44:ff:
         57:83:77:06:96:f4:d9:8e:2a:1d:bf:d8:97:41:cc:35:76:8b:
         eb:b6:b3:fc:78:b9:45:78:e5:f8:b3:b9:7d:a0:c2:76:51:f7:
         66:e4:f0:48:85:bb:aa:19:bb:69:e4:66:bb:93:af:f8:63:a8:
         7f:51:3a:d5:cd:3b:ad:06:8c:6b:e8:e2:11:af:67:a0:d1:96:
         97:ee:e6:3c:e8:63:35:36:ce:b6:03:ff:8e:63:27:07:7d:2c:
         f4:e1:86:e3:f4:60:44:6d:1c:e5:96:ee:55:12:27:2f:39:5f:
         d9:9a:ea:2a:c6:f6:2e:3b:3f:62:b6:cc:ef:c3:76:05:b8:46:
         67:d8:2c:c8:46:ff:ab:ed:55:bc:29:54:93:61:1b:75:1e:cb:
         59:2e:fe:96:0f:43:05:9f:2e:5b:eb:2c:0c:79:37:d6:ec:0c:
         6c:ab:7d:e3:1c:a7:82:11:20:d9:95:61:c1:1b:c2:43:b1:1c:
         a5:78:70:16:1e:3f:50:76:27:61:c1:1b:8b:79:17:f0:7f:d9:
         d5:19:04:7b:3d:83:06:ae:e9:5e:a3:26:fb:b0:2e:63:32:12:
         88:4f:6d:02:0d:fa:26:e2:89:5a:00:a6:93:f1:ad:33:53:f1:
         75:4d:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:09 2026 by rpki-client