Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File:                     LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier:          +SXwPOfSgbk+IiLfEjPIYcKzObKR4Qa0vUsWg8aoMsY=
Subject key identifier:   40:F8:10:59:7C:11:AF:61:34:29:48:4C:B3:12:E4:52:F2:0E:D6:2E
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer:       /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial:       01A0CB22ADE39CEC833E8B7A2BE206741871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number:          142B
Signing time:             Tue 22 Sep 2026 22:00:42 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:42 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:42 +0000
Files and hashes:         1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: 1FDyZgv1+w32/mwvHsKPTzFmzvu78fJy4AWRHfTsG/0=)
                          2: NCKnXq-5BTw9NWheiaPIABQAn2g.asa (hash: 5KR/3AebDbM4JwwPbIdt/KHDLE4IHFGiPg3g4g6lRcM=)
                          3: VBynuXHYU3QUzqHJR6izG_W2fC8.roa (hash: ONusupYHB+tTaUkLfDcWsXAScXAIDiaDM2Ypd3nW5MY=)
                          4: X0beiYMoyz0gMs9xg_aKhGZPUec.roa (hash: zF3u464C6HG6nXrRpLPHuu3/gwrfFqy32CBRWFxWrt0=)
                          5: _JlEu_nSSJGC_Xq0Ueg-r7Xqang.asa (hash: DJTsyn72FMJNQgBbFHPbinVYdKF43WEPELTxvy0b76k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:ad:e3:9c:ec:83:3e:8b:7a:2b:e2:06:74:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
        Validity
            Not Before: Sep 22 22:00:42 2026 GMT
            Not After : Sep 23 22:00:42 2026 GMT
        Subject: CN=40f810597c11af613429484cb312e452f20ed62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fd:1c:2f:ec:21:99:1d:d6:ec:d9:68:99:0c:
                    01:56:42:4d:67:d2:e5:e6:fc:25:5d:c8:90:e1:8c:
                    3a:83:7c:f9:f8:dc:6a:34:11:08:1d:2e:6a:da:8c:
                    57:be:fd:9d:71:83:f5:77:f6:e4:b8:28:c9:0d:71:
                    8b:d7:f5:8d:ed:80:36:3f:3f:0e:63:6c:31:94:94:
                    98:c4:2f:4b:e0:60:2b:19:40:90:64:c9:77:95:8c:
                    b1:ea:f2:6d:f5:2f:c3:02:10:be:73:1b:55:38:05:
                    4a:eb:b3:c4:2a:cd:0f:fa:8a:80:2a:4c:42:5f:d5:
                    22:79:f3:cd:e5:8f:85:cc:16:82:52:37:dd:38:98:
                    f2:c9:d4:af:32:e5:72:fb:c6:57:ce:d8:7d:dd:b1:
                    9d:e9:23:d0:f9:ab:68:5c:b9:e8:93:69:5f:ee:d0:
                    0a:2f:0e:4e:03:37:01:fc:6d:90:03:28:98:82:c3:
                    df:63:cf:2c:8e:dd:6c:f2:25:c3:0a:63:91:3b:14:
                    84:24:5b:01:da:0d:c5:2a:82:92:de:d3:03:a0:08:
                    1f:ab:8c:5b:81:d7:cc:93:f7:c4:d4:4b:a7:da:9e:
                    a4:25:90:84:22:38:26:35:9d:11:6f:c2:08:de:b9:
                    90:20:33:26:72:a7:6b:c7:79:93:da:b4:bb:6f:1f:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F8:10:59:7C:11:AF:61:34:29:48:4C:B3:12:E4:52:F2:0E:D6:2E
            X509v3 Authority Key Identifier:
                keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:64:1d:5a:9d:2c:0a:7a:ae:ee:2c:0d:17:a3:30:b8:6b:34:
         62:45:0c:dd:d7:0c:86:e6:e0:72:72:e8:10:c4:75:ca:df:d0:
         26:b8:71:42:5a:41:74:d6:30:7b:0e:bc:dc:21:5d:c7:38:2f:
         0f:6a:d1:a5:17:b7:21:7f:e8:56:c7:dd:22:53:f9:4d:df:59:
         48:6d:f1:bb:0b:08:ae:35:05:55:20:b7:bc:4b:47:ad:49:d7:
         b2:47:28:51:fe:70:a5:ae:3d:26:96:af:01:f2:9e:09:ec:38:
         89:e6:95:1a:a2:36:dd:3c:26:56:8d:6b:be:7d:65:7c:79:00:
         86:13:b3:ff:e9:29:04:f3:fd:b6:ca:3b:3b:5d:41:c5:0b:ea:
         fe:f6:8b:74:92:2d:f1:a7:6a:16:09:25:11:86:a3:11:68:af:
         de:38:73:c2:d0:9b:6c:6c:04:bf:29:4f:c3:71:f6:6a:ea:b8:
         3f:af:7b:a8:c3:ca:68:6c:b5:62:80:86:e1:3b:bc:a5:49:7d:
         be:19:3f:6c:af:7d:78:73:a3:94:27:0b:d8:11:10:d3:9d:93:
         7a:1e:61:6e:db:bd:2c:33:98:07:ad:70:50:05:83:ea:3d:d3:
         9a:90:52:c6:5b:09:28:3f:60:52:b5:56:d1:1d:49:2d:a0:19:
         1d:a3:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:41 2026 by rpki-client