Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
File:                     LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json)
Hash identifier:          XVKB7uigY7oRTM8uPtagFEM/s77oWg8EP0P2IuVWZE4=
Subject key identifier:   5F:7A:EE:0E:4B:4F:D1:D7:10:A5:7B:1B:2D:66:8C:ED:B2:82:2C:DB
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Certificate issuer:       /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial:       019D27A8A544E0EEB18D7A68D7193414EC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
Manifest number:          0F6D
Signing time:             Thu 26 Mar 2026 01:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:56 +0000
Files and hashes:         1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: baQbppW26yVrnZw8uIFqQhwqSI2+/QYCOEHx/tFdQpA=)
                          2: hWYG6SA4jMjGfHFArO_-xfjzCA0.roa (hash: M5+XjEjzxKltQFP4I5ZzSuED19Ey6Fm4q51WKuVhoeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:a5:44:e0:ee:b1:8d:7a:68:d7:19:34:14:ec:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
        Validity
            Not Before: Mar 26 01:00:56 2026 GMT
            Not After : Mar 27 01:00:56 2026 GMT
        Subject: CN=5f7aee0e4b4fd1d710a57b1b2d668cedb2822cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:01:8f:69:2a:bd:cd:ce:f5:ac:64:ba:f7:
                    07:59:d2:95:6b:8a:5c:ce:2e:9a:b7:94:15:cd:45:
                    f2:20:43:86:e3:19:d0:c9:61:5d:d3:a3:33:b7:34:
                    dc:d4:7b:90:23:29:f9:12:ef:8b:9b:95:98:9b:78:
                    5a:52:b0:50:e6:77:c4:7c:cb:ca:6e:57:21:01:8a:
                    86:74:a9:90:48:fb:bf:96:26:da:73:4f:d4:72:05:
                    45:91:5a:0a:93:5b:78:b2:b8:68:61:c2:ab:f1:58:
                    6a:27:55:d9:06:fd:e1:b9:64:38:af:49:5f:1f:ba:
                    ca:e8:ac:df:1b:c3:28:73:32:ad:f3:b5:c1:0c:7b:
                    85:2f:c9:10:bf:fe:13:b5:5f:c0:5c:04:47:bd:98:
                    a7:98:c8:7f:a1:42:77:65:46:3a:26:8c:05:67:1d:
                    c9:8c:5c:1e:2f:b8:9f:e7:64:53:bd:09:20:1b:d0:
                    ef:61:ce:45:39:64:8e:43:66:5c:c4:39:3f:f6:5b:
                    b9:d7:da:7f:60:c3:07:f8:a3:f3:16:7f:30:85:6c:
                    d3:6f:de:9e:61:27:be:52:ff:4c:c6:cd:66:8f:40:
                    28:fd:63:fb:da:2d:bd:7e:7e:e7:2a:e0:0e:98:96:
                    fa:64:f4:4f:f0:54:2e:70:a0:ff:61:69:90:1a:32:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:EE:0E:4B:4F:D1:D7:10:A5:7B:1B:2D:66:8C:ED:B2:82:2C:DB
            X509v3 Authority Key Identifier:
                keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:c7:84:25:26:40:e3:9b:4c:77:62:d7:fc:6d:2f:39:83:
         ad:5c:33:5f:27:76:65:58:ae:31:82:cd:e0:4a:b8:39:5f:fd:
         5c:01:49:cc:70:28:26:92:d8:f0:1f:c7:08:af:b9:a6:65:13:
         83:c2:7d:d1:e2:5f:ef:17:01:38:65:50:40:27:3f:cb:d9:d4:
         57:1b:d4:ce:4b:3a:09:f7:2b:7e:47:26:0e:a9:57:46:3f:fa:
         4c:59:85:f1:f0:a0:6d:52:30:bc:c8:6a:fd:85:8a:ac:98:b8:
         06:b3:93:47:eb:aa:7b:be:a6:cd:27:20:42:85:be:1c:da:4e:
         66:83:0e:87:71:89:87:3e:3a:46:37:b7:9d:25:63:d4:4b:f3:
         ee:21:fb:25:39:9e:06:0a:2a:ab:80:56:e4:82:71:c4:81:6b:
         7b:22:32:b3:1b:87:d9:d0:86:67:4e:9b:43:a8:e9:cb:1a:9c:
         0d:75:5e:23:3c:12:90:75:a3:fa:ec:85:1c:b3:69:b9:c9:f9:
         c3:d0:9e:e9:ab:7f:e9:ab:43:c0:46:ae:e4:8a:5e:d1:91:55:
         41:5b:d2:cf:81:4c:ab:ed:83:5c:cb:69:c7:ed:8c:b8:42:96:
         cc:42:4f:68:bc:84:ef:ee:31:6f:cf:23:7d:04:7d:07:86:2a:
         dd:e7:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:05:10 2026 by rpki-client