Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File:                     LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier:          WrjOFpZmlFYtFiFaNja8bE/QQ3Vs6PZwwYjfAF7hvyg=
Subject key identifier:   E9:D3:A1:94:45:96:B8:3E:BB:41:DB:C3:E0:D0:3F:BF:D1:38:BA:2D
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer:       /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial:       019D2D3C66597F4DF3A482B00AD1EB8EF187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number:          1883
Signing time:             Fri 27 Mar 2026 03:00:26 +0000
Manifest this update:     Fri 27 Mar 2026 03:00:26 +0000
Manifest next update:     Sat 28 Mar 2026 03:00:26 +0000
Files and hashes:         1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
                          2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: g2CZUL1MYXvz5irCr1VCo5IOcFWYuDxusXjKF/YYz/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:3c:66:59:7f:4d:f3:a4:82:b0:0a:d1:eb:8e:f1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
        Validity
            Not Before: Mar 27 03:00:26 2026 GMT
            Not After : Mar 28 03:00:26 2026 GMT
        Subject: CN=e9d3a1944596b83ebb41dbc3e0d03fbfd138ba2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:ec:36:04:ff:17:b3:4d:70:2a:27:e3:b2:
                    41:fa:04:08:7b:7f:12:81:1c:2a:88:0a:93:ad:08:
                    a5:5c:c8:b8:56:0d:2d:27:26:b3:3c:bb:0b:01:a8:
                    ea:06:11:c5:59:31:7a:fa:f4:d1:c7:ed:b7:c5:e2:
                    11:ce:f4:dc:a9:6d:de:63:33:f1:ff:71:cb:37:a6:
                    a3:b1:94:63:ff:fa:de:22:b6:ae:fa:5d:45:74:c3:
                    0b:df:d3:36:87:62:d1:c8:2f:8b:73:92:f4:e4:d3:
                    f9:7b:c1:3f:c4:e5:64:0b:ae:97:ab:0c:58:e6:34:
                    4f:3f:de:97:a9:da:de:56:02:c5:31:67:1a:91:40:
                    8a:52:e4:9c:f0:23:d4:62:e7:5a:06:26:1a:c5:10:
                    09:83:38:41:18:92:5a:95:fc:93:9c:de:54:50:91:
                    e2:17:c9:38:42:a3:d1:54:58:e9:02:ed:a7:a4:3e:
                    9b:c8:c5:62:6c:7f:46:35:77:42:f6:70:d8:7b:6a:
                    c1:b5:88:12:f2:0f:ae:3d:f4:5a:ea:eb:c5:63:c7:
                    b0:3c:c2:b9:8d:39:bd:5f:b5:a6:ef:22:15:a4:21:
                    7c:df:2b:28:bf:89:75:95:3e:44:b1:5f:e0:12:6e:
                    30:86:af:bb:68:30:21:e7:3f:90:90:3b:e2:fe:0a:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:A1:94:45:96:B8:3E:BB:41:DB:C3:E0:D0:3F:BF:D1:38:BA:2D
            X509v3 Authority Key Identifier:
                keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:49:f2:20:42:c1:1c:85:a5:a4:20:25:91:2d:a9:20:79:
         84:be:de:ad:48:d5:e8:88:b9:4b:2a:71:a9:f6:bd:3b:a7:f0:
         13:71:b5:f4:24:38:a1:0c:6b:a4:e8:84:a8:e2:e4:9e:ed:ec:
         2e:18:fb:d9:a3:d1:9b:d0:57:06:a6:58:66:4f:36:fe:5a:1d:
         69:d0:0b:c7:ad:bb:8a:3f:ca:70:9a:6b:aa:25:27:35:e4:fc:
         a0:37:a2:d1:c4:84:20:2b:d5:e5:f3:3b:1c:72:72:e1:ff:76:
         0a:3c:61:88:51:1e:59:7c:1d:bc:63:55:7a:72:34:a3:04:0a:
         45:f9:bb:ba:84:e5:fc:0a:3e:bf:f5:aa:1a:d9:ae:4a:b9:91:
         51:8d:27:80:b5:35:9f:56:50:c4:df:74:34:8a:0a:fa:88:a5:
         d9:bd:c9:87:c2:48:e9:09:96:cb:99:9c:40:6d:6d:c1:17:72:
         00:1e:ec:22:d6:c2:e3:1e:90:d3:a6:c2:06:d5:e3:b0:a0:d4:
         83:ea:ec:dc:50:e5:4a:94:db:a4:1e:32:b4:48:fa:38:ed:7a:
         af:b3:ca:c4:60:3c:88:75:a6:84:97:f8:74:8d:e7:d0:f6:2b:
         4c:82:a0:b9:e1:72:90:ef:84:5a:79:43:a9:8f:cf:92:76:54:
         2b:41:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:21 2026 by rpki-client