Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          pf3DBfOhh2GNpv1huY7EN+9O8qKgE3kC9oaNhtI4yDM=
Subject key identifier:   CD:C9:84:65:C6:0E:9B:C0:01:D8:FA:9C:53:D4:4D:C0:2B:7B:AE:30
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       019D25F1A30A076828A1101321C61ABF8E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          1812
Signing time:             Wed 25 Mar 2026 17:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:26 +0000
Files and hashes:         1: VTlRcNnwp5gbAntgQ6nLMgU1MSA.roa (hash: ngugrS9FOqnMnHH73cGn9uhwoCPbokxFByaxLpb4tLY=)
                          2: WMqtzsECKWwXCJIg2DonPUbpFnw.roa (hash: 5GfXNj8pVFfA55H0iZRmskGZ4d2ccQFECebszaJAMv4=)
                          3: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: MPCi4CtWpMgY4KQKBprENqGFcbtZoWIxouE6XWqvVTU=)
                          4: moNBxLDkr7hyNWiWsQQXFSA8f68.roa (hash: Xbv2BjhxEJT++H7rJ3ZuNWYMKN46NfqnW7okEukq0/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:a3:0a:07:68:28:a1:10:13:21:c6:1a:bf:8e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Mar 25 17:01:26 2026 GMT
            Not After : Mar 26 17:01:26 2026 GMT
        Subject: CN=cdc98465c60e9bc001d8fa9c53d44dc02b7bae30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:d3:f4:c3:1b:ce:57:ed:a7:43:ee:08:ee:
                    34:62:f7:04:b3:3a:b6:03:0c:39:d4:61:26:3e:e0:
                    b8:ce:ea:71:72:2e:e9:97:5a:80:9a:b6:3c:84:1a:
                    ad:51:8d:1a:c6:9f:22:20:e0:6e:dc:ed:27:50:17:
                    89:b5:97:a7:27:e1:88:c1:5c:ea:bb:a9:d5:c9:53:
                    f0:19:0a:3d:dd:6d:aa:06:99:13:25:44:12:65:41:
                    18:a3:f7:30:32:20:83:31:07:db:f6:07:d0:98:0a:
                    da:94:cc:40:36:2d:5b:73:fd:36:67:4c:c9:f5:56:
                    df:2a:9c:89:39:c8:03:8f:b2:6c:c2:dd:70:46:69:
                    5e:78:7b:d3:3e:b1:e7:51:0d:f9:14:0d:76:e4:e4:
                    ba:76:84:b8:5d:a5:e5:d9:91:ff:ff:7f:39:ab:f5:
                    e2:47:ec:1a:10:b4:f1:0d:aa:c0:cf:e4:1e:ff:4d:
                    a3:76:98:72:46:ff:9c:bb:e4:a2:f9:dd:e4:46:81:
                    57:81:26:92:bd:f7:d6:81:17:b4:ea:d0:b1:9b:1b:
                    bb:80:de:01:69:3b:b1:73:59:6e:4e:8d:9f:40:4f:
                    99:3e:fd:e3:51:3a:5f:6c:7e:13:b1:9d:63:dc:11:
                    fe:5b:14:7d:1b:b6:bb:b4:ca:1c:02:ca:02:c0:cf:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:84:65:C6:0E:9B:C0:01:D8:FA:9C:53:D4:4D:C0:2B:7B:AE:30
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:65:8c:7d:a6:de:bd:78:27:d8:77:17:43:0e:08:ba:3e:
         7c:cf:e9:e8:a4:b1:c7:6f:8b:57:52:9d:e4:73:65:c5:46:10:
         a9:33:4a:27:59:70:ad:9e:50:64:63:3e:cb:fc:e1:bd:fc:97:
         3f:82:54:42:db:7c:ee:4e:a1:0c:55:75:61:58:3c:26:e7:91:
         fb:2f:db:64:c4:96:7d:bb:c9:f4:db:c0:67:c8:82:d2:fc:33:
         ea:ab:96:11:83:40:d6:84:d5:1d:76:d9:ac:9e:ae:b3:38:8a:
         1f:c8:f3:a0:64:67:2c:98:89:03:cf:1e:aa:f2:62:db:8b:73:
         a9:64:43:96:05:b5:a8:e0:66:dd:65:9a:07:ad:c4:d8:58:f8:
         08:b5:14:cc:c0:5d:ae:b9:22:8c:0f:60:f9:95:2d:a3:42:36:
         57:f0:08:23:c5:f0:f4:8a:b5:88:01:8c:bf:d3:47:12:e2:6b:
         a6:56:73:11:b6:78:c8:0e:32:e7:32:0b:a9:2c:7d:2d:15:60:
         5e:08:c8:aa:11:80:20:27:b9:32:9e:ed:81:3d:c5:e5:14:eb:
         1f:38:ff:f6:0a:3f:4f:18:8d:a2:01:8d:eb:43:95:0c:22:38:
         6b:33:56:7d:1b:3f:49:21:f1:0c:0c:63:e7:b2:34:92:45:f9:
         06:87:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:12 2026 by rpki-client