Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          0Iy7AjKPkKCI6LShnJ6LEBlW9fbP+D7FBkZaWVfYQJE=
Subject key identifier:   A1:E8:19:66:BC:78:EF:A2:3D:19:C4:72:A2:4A:11:25:EF:C8:90:16
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       019D273A9876EFC04AD8F0FEE1D308115E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          13C8
Signing time:             Wed 25 Mar 2026 23:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:44 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: x6Ucsq4swT8dWTY7d3AJEAFM9iF3qhCBtd6B1uVpegM=)
                          2: tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa (hash: va1fblEnn3el5S1n83VncvFPz3toG5gDp0J8zilJ/yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:98:76:ef:c0:4a:d8:f0:fe:e1:d3:08:11:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Mar 25 23:00:44 2026 GMT
            Not After : Mar 26 23:00:44 2026 GMT
        Subject: CN=a1e81966bc78efa23d19c472a24a1125efc89016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:cd:a5:0b:5c:23:8b:e2:8b:95:20:4d:ec:
                    a1:ab:c3:9b:49:03:db:77:56:42:bc:15:7b:9e:37:
                    0d:34:5c:75:d7:28:60:79:87:32:96:2c:5d:df:c4:
                    29:f1:b8:7a:91:b8:3b:fd:e5:54:8a:47:aa:c4:8c:
                    57:a6:16:56:d2:04:93:3b:b3:39:ef:fd:4c:d8:30:
                    e3:b1:ba:19:63:09:5d:f7:8b:5a:46:b6:68:ef:2f:
                    97:35:d6:db:93:cd:25:11:2f:4b:c3:69:93:e4:13:
                    b9:74:bc:7a:2f:86:0b:0f:15:78:d3:6e:30:0a:ad:
                    42:48:6f:3a:fe:98:aa:54:8c:50:58:67:4f:86:e8:
                    f8:c2:85:8b:b0:2e:fc:bd:84:42:d8:d3:e3:63:9e:
                    e5:0a:2c:d0:96:84:17:83:21:16:26:5a:bd:23:f7:
                    6b:fe:ab:d9:05:9a:4e:91:cf:25:43:6d:f7:81:66:
                    98:40:42:b4:46:0a:9e:95:50:56:46:c1:a9:5a:db:
                    1c:20:85:63:bd:fb:07:7b:a0:26:be:8a:76:26:31:
                    ca:14:e9:5b:fc:89:2e:49:73:5e:bd:f1:ac:3b:95:
                    b1:af:fb:8b:e6:16:e8:75:18:8f:16:43:9d:2e:92:
                    06:63:e6:1f:1f:69:1e:87:bc:e3:91:6c:13:bf:e2:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E8:19:66:BC:78:EF:A2:3D:19:C4:72:A2:4A:11:25:EF:C8:90:16
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:fd:50:74:50:ef:f3:57:57:37:67:1b:b1:93:91:92:b8:
         fb:e9:14:dc:2b:8d:fb:05:b3:54:1f:22:ab:70:21:f0:b7:30:
         15:da:6f:14:3a:15:4f:d6:53:4e:fb:60:65:65:9a:4d:f5:46:
         d5:bc:72:90:0b:88:ad:df:e8:ce:76:e7:11:38:db:91:c1:ff:
         1b:1b:ed:c2:46:80:a1:fa:db:ae:c4:13:dc:95:c4:93:bf:d1:
         4c:61:06:29:3c:77:2f:25:42:3a:c9:5d:56:d1:9f:ae:36:bc:
         f6:4b:42:b2:7c:41:d5:f4:02:98:cd:dc:bc:d5:a4:3d:59:45:
         02:4c:ff:aa:0f:8b:5f:f9:49:5d:0a:0c:c9:3c:22:14:39:39:
         3e:16:ca:6b:02:c6:30:fa:31:70:fa:62:6d:2a:bb:c6:15:81:
         73:73:75:7b:57:04:ef:07:05:4b:01:ef:c5:30:87:eb:ca:71:
         32:4f:8e:0a:0d:b0:6f:b2:2e:02:c7:c4:e5:50:49:40:42:6f:
         90:87:e3:18:16:68:ee:a9:18:c9:00:c9:81:5e:2d:cf:4b:f0:
         63:bf:9d:ee:ef:0c:51:94:26:28:f4:48:9d:e9:78:5c:35:b0:
         f0:5f:97:79:49:ec:38:b4:60:ca:8d:2f:c9:6f:01:cd:07:b1:
         d1:e1:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:54 2026 by rpki-client