Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File:                     LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier:          wTa819AQbCwN3kYkppQxAkU8m6CNL6UBX4y/b2ocT6M=
Subject key identifier:   73:BA:D5:9B:E0:B0:14:B7:B8:50:CC:7B:9B:46:2A:5A:50:9B:D9:70
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer:       /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial:       019D25F18AA99CA4F82130BABE2C6124EC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number:          0EA2
Signing time:             Wed 25 Mar 2026 17:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:19 +0000
Files and hashes:         1: 74hYT2gK0sb5mVOlRXh4hpjf2Wg.roa (hash: KDQsSgSZtyiIVHFzfImrnhrCnaAln2AZORY10VEdnzo=)
                          2: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: A6l9KCw8UA07g5N8+6tFkfL0bkdJtrfRzxvgbDcqYNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:8a:a9:9c:a4:f8:21:30:ba:be:2c:61:24:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
        Validity
            Not Before: Mar 25 17:01:19 2026 GMT
            Not After : Mar 26 17:01:19 2026 GMT
        Subject: CN=73bad59be0b014b7b850cc7b9b462a5a509bd970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:52:ec:a9:cc:1d:a6:da:a0:86:b8:da:91:
                    9b:6a:73:a9:4e:52:2d:32:f8:43:38:7d:78:0a:3e:
                    8a:8d:b0:f4:51:b9:5d:67:b1:fa:5f:34:fc:4f:b3:
                    bd:09:97:f8:63:d3:7e:89:66:1a:28:4d:b1:93:3b:
                    12:72:94:d9:20:8b:f7:ef:f5:02:00:4c:76:2d:fd:
                    8d:65:32:72:68:ce:54:78:ee:4d:50:21:76:f8:14:
                    79:79:20:e2:fb:1b:20:74:c2:47:88:48:93:37:31:
                    d3:81:fe:29:f0:cd:6e:1b:42:1c:45:b7:0a:f0:33:
                    44:a5:0b:7c:1c:cf:d8:1b:9e:09:e9:91:a3:9d:bd:
                    35:e7:5a:28:a6:4e:ff:7d:39:c3:59:80:93:e5:24:
                    8c:d7:73:45:97:81:f2:2d:aa:f2:01:14:74:79:61:
                    eb:c2:40:56:df:da:31:15:80:2e:94:2b:ad:0b:a2:
                    30:6c:59:5e:b6:ac:68:51:54:7c:d6:14:46:54:70:
                    12:7b:b6:fa:de:3e:63:9b:3f:90:6b:2b:57:a5:71:
                    2e:db:47:63:85:ff:0f:3b:20:5b:8e:e8:0a:0d:d3:
                    18:32:f2:d4:03:38:56:3a:0b:8a:74:dd:1e:00:f4:
                    97:da:fa:a4:00:5d:10:5d:70:08:63:2c:8a:a8:0c:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:D5:9B:E0:B0:14:B7:B8:50:CC:7B:9B:46:2A:5A:50:9B:D9:70
            X509v3 Authority Key Identifier:
                keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:8f:74:bc:60:a4:50:72:64:5f:27:7b:c1:ce:bf:b8:05:
         a5:98:c3:9a:26:34:7e:9d:51:3c:00:3d:70:1d:75:75:ee:42:
         61:90:13:9f:ed:23:20:2f:4b:fd:5c:81:e6:7d:2c:0d:1b:e5:
         c6:69:18:9b:e5:85:ab:37:fe:6a:95:6e:64:2e:5d:44:71:27:
         e6:54:32:39:45:1a:17:27:a8:fb:3e:24:b4:ca:9d:67:66:ef:
         dd:fe:09:fd:8f:52:da:f2:b2:36:23:33:38:52:da:dd:52:9b:
         f9:c5:c3:da:fc:6c:9e:dc:6a:1e:7e:0f:aa:23:eb:50:d5:d0:
         6c:31:94:33:af:53:f0:e8:54:39:82:62:e4:6d:db:79:9b:33:
         dc:52:ba:4e:70:d4:77:97:43:d2:a2:d7:68:e7:eb:24:de:13:
         e6:9f:1c:90:f3:5f:c1:f7:7f:ea:a3:f5:8c:7d:04:6a:ec:c3:
         ad:5e:34:96:1a:12:d4:c0:ed:a8:7c:69:e1:c6:fd:5d:43:2d:
         bf:2a:51:74:23:66:f5:c4:82:e0:24:07:a5:d6:d2:e4:99:0d:
         ac:0e:5d:6a:4c:aa:d8:f5:a8:83:74:ff:4f:71:23:ed:fb:1c:
         97:92:bd:56:88:96:b3:e0:98:cc:de:7b:e3:27:ef:b0:1c:b9:
         14:b4:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:56 2026 by rpki-client