Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File:                     LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier:          wXM1fqINR8ZgG2nyif+A9am15Tp1QCp3MyYMxl0efDw=
Subject key identifier:   2A:B0:95:92:9D:68:59:AD:3E:A7:8D:A7:F1:41:D0:B4:D7:27:BF:65
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer:       /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial:       01A0E69A901A8A77098827189ABC09A156AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number:          17C3
Signing time:             Mon 28 Sep 2026 06:01:24 +0000
Manifest this update:     Mon 28 Sep 2026 06:01:24 +0000
Manifest next update:     Tue 29 Sep 2026 06:01:24 +0000
Files and hashes:         1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: d6CT+5G9QgXhq80OSDWx7rrJPpMufNhMGjH7Sd00NYc=)
                          2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
                          3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:9a:90:1a:8a:77:09:88:27:18:9a:bc:09:a1:56:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
        Validity
            Not Before: Sep 28 06:01:24 2026 GMT
            Not After : Sep 29 06:01:24 2026 GMT
        Subject: CN=2ab095929d6859ad3ea78da7f141d0b4d727bf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:74:d3:7d:a3:f0:1b:c8:da:75:9f:73:c9:
                    20:f8:2a:50:06:8a:b9:9d:7b:3f:91:53:74:c9:70:
                    fe:6a:97:23:93:75:2d:7a:e1:59:86:36:7f:a3:2a:
                    68:78:11:a5:b2:77:04:9c:06:0a:bc:55:1d:8f:31:
                    93:b2:3b:af:cd:4a:9c:e0:e9:35:c7:9a:74:f6:f2:
                    8c:66:fe:8c:e9:cb:fd:3e:cb:c2:ae:28:e3:f6:ae:
                    b9:33:3c:c5:75:3c:cb:4c:71:30:ac:90:07:b5:7b:
                    d7:24:fb:36:e1:c8:83:d4:5b:13:ce:b1:2b:62:a3:
                    70:7d:5a:cc:6a:b8:29:54:be:6c:67:cd:8b:4e:64:
                    e3:6d:f2:e0:14:cb:5d:b6:20:57:03:be:9e:3e:2f:
                    ba:35:33:8c:f9:cf:20:10:9c:2d:b4:ec:83:75:f3:
                    19:e5:6c:24:fb:f2:5f:e0:18:3d:b9:11:f0:42:ed:
                    30:42:ae:02:9f:d8:4e:25:4c:7b:1c:a6:e1:de:66:
                    c9:89:b8:10:f5:97:82:37:d3:8f:aa:ef:e6:f0:4d:
                    f1:59:3d:4d:b7:26:c7:83:67:ef:96:b5:a1:71:4f:
                    33:fd:09:62:c3:0b:36:98:64:b8:b8:75:7c:c7:94:
                    6f:f4:3c:ad:1e:16:67:4e:4d:7f:e5:97:54:d3:2d:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B0:95:92:9D:68:59:AD:3E:A7:8D:A7:F1:41:D0:B4:D7:27:BF:65
            X509v3 Authority Key Identifier:
                keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:cd:86:4e:41:72:5e:96:26:88:68:38:d7:2d:b9:13:4e:
         60:b8:75:5a:fe:b5:8f:9d:69:98:02:de:b8:d1:fa:60:9c:37:
         35:33:6e:4f:4d:30:6d:f0:16:1b:6a:6a:56:57:ae:90:0a:0c:
         a9:9a:82:cb:11:24:8a:b6:72:67:70:13:38:f0:64:e4:4a:bf:
         fa:7c:dc:41:b9:ad:da:6f:7f:62:d7:19:a8:bc:04:8a:7b:25:
         9b:62:a9:f1:eb:44:74:81:49:fe:a3:df:97:c7:83:79:88:21:
         0f:5d:4a:54:c9:44:20:56:49:57:d6:5f:81:4d:f6:90:c4:03:
         bd:77:4a:4f:2e:52:78:58:6c:f0:57:1c:2f:7a:b2:94:05:7b:
         b8:b4:41:ee:d8:72:21:bc:80:ad:99:59:da:5c:e1:89:1f:65:
         c1:7d:b9:66:91:d9:d2:0d:27:03:68:d3:4b:03:bd:6f:87:0b:
         e6:c4:59:a1:78:dc:6f:46:32:bf:00:35:63:86:5b:91:8b:2c:
         a9:e0:c6:36:57:77:a5:6c:a6:9e:a6:7f:f2:ab:ad:62:a8:80:
         ad:29:aa:c2:33:7b:5f:33:bf:ed:1b:01:7b:f6:fe:fa:d9:16:
         c2:2a:c3:00:6d:26:c1:13:a8:ed:cb:e3:38:80:5f:18:b8:87:
         3e:c1:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----