Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File:                     ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier:          dQ2Lw54zY8l1eMvnNhCxoZ3JCiZkFPyYX5godvD0bhA=
Subject key identifier:   1A:87:8F:11:A2:E3:FF:55:EC:3D:6A:24:7A:48:B7:7C:F2:05:79:9F
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       019F8F7F960ECC1D27C23A1E6734DD00C897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number:          0CAB
Signing time:             Thu 23 Jul 2026 15:02:11 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:11 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:11 +0000
Files and hashes:         1: BvAkaqIQMJfGpSIttKYw6u69UsY.roa (hash: HljiF1YNJTd/GJX5JhDeq7KwVETiH5Pa6f/ONTU55h8=)
                          2: VjaB08Ql0W9-r77gR-3DY__Jy88.roa (hash: YVfg6l74ML3q0VN2MwFzeG3ePk+gbLJopMwK+Q2eXHg=)
                          3: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: oyGn4A4DPX/rAWDnp8Fd7rRG7sl0gGqD9mUu1uenKN8=)
                          4: zNfGWa6txQUyoW3qQCKz5wjMD9Y.asa (hash: ZhpUn/WRHY1lZT0+tYdeAcguyOUSpmq4AAiRju+rydA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:96:0e:cc:1d:27:c2:3a:1e:67:34:dd:00:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Jul 23 15:02:11 2026 GMT
            Not After : Jul 24 15:02:11 2026 GMT
        Subject: CN=1a878f11a2e3ff55ec3d6a247a48b77cf205799f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:72:e3:88:33:fe:46:6a:ac:f8:6c:31:3e:
                    a1:13:cf:21:43:c5:61:71:57:ac:52:67:bb:37:cc:
                    da:01:90:29:f2:7d:5b:0e:2a:38:eb:da:39:75:68:
                    ab:ce:29:3f:24:88:d7:d5:33:60:80:69:43:20:f1:
                    1b:d3:6e:f7:6f:29:2e:86:a2:05:fd:f3:a8:65:0d:
                    8b:d8:02:2f:a4:27:f5:cc:5d:28:b3:64:4f:12:47:
                    8d:47:01:91:ae:99:6f:90:ce:ae:8a:c0:2f:0b:54:
                    e9:b4:e6:40:0e:a2:bc:16:65:86:f5:37:c7:4b:1b:
                    23:b4:8a:be:d4:12:5b:bb:b1:ae:1a:44:25:66:e1:
                    06:0a:aa:d8:ad:2c:1c:43:6e:74:84:a9:07:e0:ad:
                    6d:34:07:7e:fe:00:4f:d5:09:76:d3:99:b8:d8:d9:
                    9d:a3:b5:f2:e0:b7:dd:ca:97:fa:a3:2d:8d:6a:72:
                    c6:18:fc:d5:e0:8c:56:ba:82:ce:ec:0b:c0:fa:50:
                    8e:d4:59:2e:a4:eb:07:a0:58:75:7f:68:94:b0:1e:
                    7a:8a:61:6d:01:32:ac:b7:02:84:f2:37:51:b7:31:
                    9e:d0:3b:52:80:05:a2:bf:ad:be:b2:c6:c6:a4:dd:
                    68:73:b0:d6:47:25:e5:38:69:37:54:02:ca:99:32:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:8F:11:A2:E3:FF:55:EC:3D:6A:24:7A:48:B7:7C:F2:05:79:9F
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:17:87:72:17:3d:85:57:cd:df:a6:95:1d:ad:a0:a9:ac:
         e0:46:af:3d:2e:a2:c3:c7:bf:22:15:2b:b8:86:e2:7c:7a:c1:
         c9:bc:b4:23:26:20:bc:c8:fe:19:6b:39:95:e4:1f:ec:29:a7:
         36:cb:13:6b:d6:dd:7b:33:66:92:41:b6:e6:4d:e4:8d:93:85:
         c7:99:38:dd:6b:c1:72:1f:f5:17:0b:69:ff:a5:5f:b8:97:3c:
         ef:67:98:f4:f6:ff:89:73:e2:1a:12:f2:f5:b5:39:44:dd:af:
         ac:95:b1:ed:cc:f5:a5:a0:67:b9:98:23:61:63:53:77:84:53:
         ff:a0:e5:ea:4f:1c:98:a8:34:bc:c5:ef:40:a7:9e:e4:cb:a8:
         a0:d9:25:7e:11:05:88:1a:17:ac:da:25:58:81:ce:a0:94:58:
         40:32:46:4f:30:c2:06:57:f3:c9:7e:a9:03:34:f5:88:82:fa:
         69:60:ff:8d:66:bd:71:5a:e4:5d:a8:53:03:f9:05:16:58:59:
         8c:d3:39:83:67:67:48:4e:76:13:77:72:7b:0d:4a:41:69:a3:
         61:eb:d0:4f:b6:f5:f2:7e:d8:b3:ba:9b:df:d0:f0:3e:71:57:
         96:24:ea:b4:4e:99:9d:8f:a0:6d:24:88:a4:ab:4a:21:a1:e3:
         b4:f7:59:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:04 2026 by rpki-client