Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          H/JakqOVvfGNNpr4XnTxACSA+UgK898+d0hLr5R755M=
Subject key identifier:   C0:CF:F4:59:51:7D:81:B1:0D:38:E2:F5:2F:90:1A:61:49:16:CC:52
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       019D322C29E2C4706611992477439A2A1257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          188F
Signing time:             Sat 28 Mar 2026 02:00:48 +0000
Manifest this update:     Sat 28 Mar 2026 02:00:48 +0000
Manifest next update:     Sun 29 Mar 2026 02:00:48 +0000
Files and hashes:         1: 84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa (hash: rNTsCrnkBSEotffzabMsfyCIf6z9oVHssU96RenS0Ts=)
                          2: LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa (hash: ok1BqU/j817hL0rg14Y5eXLHkWWn2Jj6wQeonBm4dcs=)
                          3: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: VXJ9swunQiTv8J2JqOWvsGV24D5fkEIIcAt66WvEBwQ=)
                          4: MBwRKSHfxRIenZ6VTtp6s77mU-g.roa (hash: ZUftLriouLT0rVggX9Wl5+VKJOkkEmSY4zXobVbg1VA=)
                          5: XIo_9-qFy5wjas20w7MdEaNT8T8.roa (hash: mjSD46sU4dPzZBYqQEdjYI8aGEpVPeI7VUJMRwMVNGY=)
                          6: aZBPshcpYuW3uiPNklELJKpWxB0.roa (hash: FDs/jppjg3SFmpeDxF8pcdK8smBMdmkqoES9cLDqS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:2c:29:e2:c4:70:66:11:99:24:77:43:9a:2a:12:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Mar 28 02:00:48 2026 GMT
            Not After : Mar 29 02:00:48 2026 GMT
        Subject: CN=c0cff459517d81b10d38e2f52f901a614916cc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:d4:a8:9f:05:53:d7:a2:2f:3a:9f:9e:53:c9:
                    dd:30:97:be:91:b2:ca:5f:fc:90:e4:d5:e9:f4:50:
                    c3:a2:0a:95:1c:e8:d4:fb:07:57:f7:98:27:13:14:
                    15:78:cb:71:f2:96:94:87:8b:4c:47:1e:21:24:fc:
                    7b:ae:2c:b7:9f:17:eb:1d:24:23:0d:31:b6:8a:cd:
                    8c:38:a8:3c:83:6d:2c:e2:70:e5:5f:8e:39:ec:8e:
                    56:fe:20:3f:a8:93:fc:87:4c:f5:65:94:dc:c3:80:
                    68:8b:b1:c7:32:7b:88:37:c1:93:5d:06:cb:ed:e6:
                    ba:33:68:8b:d3:20:12:37:88:1b:8d:65:44:f6:3d:
                    6e:23:7c:0a:c5:bd:da:34:c8:2f:46:c8:30:b1:87:
                    19:f3:bc:21:89:aa:2f:89:3e:c0:9c:a4:02:a2:d6:
                    a8:0a:97:85:e1:68:65:d5:61:b7:13:5c:b7:3f:b1:
                    83:04:5d:af:43:2d:47:d1:bc:bd:24:27:60:03:02:
                    f2:a1:0b:3d:8d:67:57:06:fd:6a:f3:ab:77:5c:22:
                    73:38:a8:b2:28:b1:ba:5c:73:9e:34:11:46:2f:ec:
                    b0:b6:82:7e:f7:71:d9:49:13:57:21:63:5c:9e:3e:
                    56:98:cf:d6:d7:74:3a:8b:80:15:76:cd:12:3d:73:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CF:F4:59:51:7D:81:B1:0D:38:E2:F5:2F:90:1A:61:49:16:CC:52
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:77:31:15:e7:b1:00:e5:0b:d8:dd:1c:2c:91:80:87:ec:0b:
         34:66:38:36:bd:e2:48:31:8f:64:13:91:3c:74:e7:ef:64:0e:
         d8:07:a1:51:58:25:e3:a8:27:fe:f5:a3:df:f4:da:58:a5:08:
         4e:f8:84:cb:0a:d4:e0:c8:2f:67:33:be:5e:8e:53:35:f4:a3:
         e3:4d:ac:4a:5f:b4:86:bf:e1:00:be:c6:b3:f4:95:44:0d:fc:
         70:54:5a:71:5a:74:25:c3:12:9f:7a:3c:5f:c6:58:db:d6:8d:
         90:aa:09:e9:98:6b:24:cf:3f:a9:81:9c:9e:73:0a:d2:06:62:
         40:34:d5:39:0d:22:0d:90:3b:5a:26:fa:b1:c6:6d:3d:8e:40:
         f0:a1:93:ea:19:4d:1a:f5:90:a8:b8:05:36:c5:96:18:e8:b6:
         78:df:70:35:61:d5:83:9a:78:76:fd:07:03:88:39:22:b2:fa:
         20:9e:8e:47:02:5f:48:6b:b8:bd:e1:bf:54:3f:a4:b0:35:8b:
         9f:3a:e7:0a:c3:a3:a3:13:c6:9f:20:f9:7c:16:0d:b7:1c:0e:
         cc:f6:8d:70:82:42:1e:a4:44:27:4b:ec:7e:e9:34:22:f6:b6:
         17:42:68:36:12:58:18:2d:61:b7:89:a0:70:a5:10:1a:87:e9:
         0a:a3:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:50 2026 by rpki-client