Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File:                     LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier:          9FQiX8fBWmZ7xXv0W2CjHsbeCN2V1nWpMciqfIJe/vA=
Subject key identifier:   20:DB:62:3D:BA:20:FA:23:95:8E:0B:2A:39:00:98:7B:AF:D7:AC:3D
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer:       /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial:       019EC224721371BDD5244B1F5B18D53A0DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 18:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:28 +0000
Files and hashes:         1: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (hash: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM=)
                          2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: YRKWIc8aXDDBkctDD+GWPCf0n+2eP/kgLt3+wk/p8KE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:72:13:71:bd:d5:24:4b:1f:5b:18:d5:3a:0d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
        Validity
            Not Before: Jun 13 18:00:28 2026 GMT
            Not After : Jun 14 18:00:28 2026 GMT
        Subject: CN=20db623dba20fa23958e0b2a3900987bafd7ac3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:a0:0c:a7:c4:86:13:b3:90:ea:d4:bd:db:
                    28:26:e0:a2:86:87:05:a6:c1:75:d7:29:4e:81:bc:
                    60:65:5c:a4:de:97:72:df:74:6f:bf:c7:fe:7e:a1:
                    4f:5b:84:a4:31:e4:cb:6d:96:e0:b4:5c:e9:8c:c1:
                    ca:91:9f:f9:f3:b9:d9:0d:83:52:2c:26:de:0c:7e:
                    28:b8:76:64:c2:11:5f:21:26:f1:5a:b5:b4:77:b8:
                    ea:5d:78:1b:d3:57:8c:a9:86:c4:c6:40:78:fc:d5:
                    43:c8:10:46:3b:ca:46:1d:66:a5:d1:fa:bb:44:f8:
                    12:ee:8c:f6:8b:1c:30:85:35:05:80:9a:ad:21:d4:
                    4f:e6:08:a2:08:fd:bf:85:c1:64:b5:d0:37:31:64:
                    d6:27:5d:2c:a2:08:9b:52:cb:ec:45:22:12:fa:ee:
                    c5:44:4a:ca:7b:b0:36:fb:02:07:16:a8:05:af:18:
                    8d:30:fe:8c:88:30:97:fb:e7:57:da:20:ab:2c:b2:
                    d8:d7:c8:21:33:0a:ef:39:c0:d2:93:96:b7:17:04:
                    f3:9f:da:ba:23:f4:ca:b8:44:04:3e:09:39:56:ee:
                    d9:e8:df:6d:ce:74:82:6a:6f:bc:f3:d0:8e:09:2d:
                    c9:fa:53:af:a1:1c:5b:4b:85:93:93:e6:44:69:8c:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:62:3D:BA:20:FA:23:95:8E:0B:2A:39:00:98:7B:AF:D7:AC:3D
            X509v3 Authority Key Identifier:
                keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:dd:2b:17:2b:83:28:5b:76:49:90:3c:33:49:51:6d:0b:42:
         69:88:0b:16:73:fa:98:b3:04:c9:b7:18:54:e3:88:aa:a6:8a:
         18:c4:49:cf:e8:67:b8:dd:1e:be:ce:78:a5:98:5c:e0:2f:3d:
         04:72:fd:5e:40:94:72:16:7c:63:54:a8:be:8c:b5:b9:99:fb:
         9a:48:47:6d:ab:ae:0d:9f:b4:c5:c0:1a:6f:1c:84:b9:f5:c9:
         e0:85:09:38:5b:6e:82:c3:82:f0:ee:95:b3:96:ea:bd:b4:5a:
         1a:a4:38:d8:ea:7a:76:ab:b8:a1:5d:dd:00:7e:d3:d0:9a:8d:
         8a:5c:62:6b:26:5a:22:b3:21:a4:c2:3e:cb:58:12:53:fe:be:
         0d:ac:7e:ec:5d:98:13:88:cb:78:1a:ba:02:0f:9e:8d:e4:e1:
         0f:6a:29:b9:8a:46:aa:82:f2:56:cc:ff:53:3a:59:cc:db:bd:
         94:8a:30:ba:4c:2b:7f:69:f8:84:96:26:43:54:1c:09:6a:a3:
         65:03:ac:85:0f:5b:cf:69:72:c0:e2:c6:cf:33:8e:40:38:a9:
         fd:62:1f:a3:25:6d:ed:05:cd:ea:16:18:32:71:ee:10:df:3b:
         9c:21:ca:23:9a:0f:03:50:87:84:71:9a:69:77:ff:71:23:41:
         3f:50:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:44 2026 by rpki-client