Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          l3g4ZGUx8VoAKh0zxEVpC00Exj435a7IIsR6+Di65Gc=
Subject key identifier:   83:D5:E3:08:C2:33:DB:85:16:44:5F:E9:FE:4A:64:04:BB:D7:32:F6
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       01A1137306F3E6166090FBE533F763F8AC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          15D0
Signing time:             Tue 06 Oct 2026 23:01:07 +0000
Manifest this update:     Tue 06 Oct 2026 23:01:07 +0000
Manifest next update:     Wed 07 Oct 2026 23:01:07 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: LnK9yoZ9nmanK2ToBOP+ZSTeFLFHbl4os9Zpnzy67u0=)
                          2: tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa (hash: va1fblEnn3el5S1n83VncvFPz3toG5gDp0J8zilJ/yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:73:06:f3:e6:16:60:90:fb:e5:33:f7:63:f8:ac:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Oct  6 23:01:07 2026 GMT
            Not After : Oct  7 23:01:07 2026 GMT
        Subject: CN=83d5e308c233db8516445fe9fe4a6404bbd732f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:a4:09:a5:fc:fb:be:0d:97:e3:00:b8:ac:
                    cc:56:41:e5:46:5d:a1:3d:b0:7f:21:85:f9:b8:9a:
                    8d:a6:70:ed:4f:3b:ce:b8:26:31:3e:27:c8:1a:ca:
                    be:df:8d:b6:68:f0:93:93:be:7a:52:9d:ed:28:9b:
                    bd:15:18:fa:7f:07:0a:2b:40:e9:93:80:e2:7b:e9:
                    f8:10:35:6e:2f:48:52:5a:8b:2b:a8:80:7e:a6:62:
                    5e:13:3e:e7:a3:84:00:d2:60:df:bc:84:84:56:f0:
                    55:c8:f4:b7:6e:81:fa:9e:f6:79:ad:fc:5c:08:d3:
                    88:c2:bf:87:de:6c:4e:48:dd:dc:74:8b:3f:b1:15:
                    f1:24:69:46:7c:ac:fc:18:c7:ac:6b:b5:38:91:50:
                    59:d2:4b:59:76:c4:83:ea:fc:82:32:2f:04:03:01:
                    e9:51:72:b0:5a:28:6a:32:8a:ea:7a:33:0e:c5:c5:
                    e2:3e:23:d7:9e:0b:33:55:86:0b:2a:fe:b8:76:f2:
                    8f:02:b6:ac:de:64:ae:b2:19:40:a9:64:27:c1:17:
                    f4:95:6a:01:d1:c0:cd:2f:20:4d:a3:a7:b4:e8:ce:
                    60:c6:73:9a:50:8d:a5:f0:af:47:8b:fb:90:37:9f:
                    9c:1c:36:9c:79:8d:eb:a6:34:24:26:39:ab:ca:4c:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:E3:08:C2:33:DB:85:16:44:5F:E9:FE:4A:64:04:BB:D7:32:F6
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:50:7b:28:bd:7f:23:ef:9e:f2:9a:60:35:d0:5e:db:c7:
         b8:09:4f:0c:24:25:83:5f:fd:a2:de:e8:6b:f8:ab:c7:9a:a0:
         40:ae:f0:23:38:9f:85:e1:f3:b8:da:14:f8:3a:01:af:d8:a5:
         6c:c2:8a:a7:fc:a5:1b:6a:50:70:71:ed:a5:40:cf:12:6e:c2:
         1e:63:39:d6:3c:37:7c:ad:33:88:80:a7:50:18:d2:8c:ae:04:
         58:10:f8:37:15:be:77:d6:e0:cc:45:70:c5:05:47:bd:9f:b0:
         28:4d:20:ff:30:4e:76:2c:c3:cb:96:f9:89:fe:f2:3b:bb:04:
         05:51:9c:5b:0e:9e:0f:66:19:c5:e5:a5:20:49:64:08:5a:78:
         80:b7:23:38:ae:bb:19:86:fd:52:9d:de:6b:56:b6:6d:ca:2b:
         7f:a8:c4:c8:ab:cb:f4:07:ca:2d:22:e5:64:71:df:6b:23:1e:
         9b:43:92:95:08:c9:90:dc:c3:e3:03:61:33:3e:c1:88:6a:9e:
         65:b2:99:2c:69:ea:26:91:98:53:2c:6d:c7:ce:86:61:0a:c6:
         ca:7c:63:9c:05:54:f8:e3:0b:7a:a4:0c:5a:93:23:5f:9f:7d:
         31:73:87:e3:34:8e:3b:84:d7:5a:b4:87:09:e3:13:51:ec:0b:
         0d:1f:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:55:27 2026 by rpki-client