Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File:                     llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier:          +qcFwbU9QHqdEsv7npux80UMIYFAvkIVOiqHNqMOqPY=
Subject key identifier:   5E:70:89:97:BC:23:2C:55:2F:6A:76:8B:7D:05:0D:BB:E0:CC:15:E9
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer:       /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial:       019F916CD0EAA4FAD2314580DC56007ADB54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number:          112C
Signing time:             Fri 24 Jul 2026 00:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:55 +0000
Files and hashes:         1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: 97sTx4btjb4HJ97Dz9KJ7UvFbpZimVyx5zhpFuusyi0=)
                          2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:d0:ea:a4:fa:d2:31:45:80:dc:56:00:7a:db:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
        Validity
            Not Before: Jul 24 00:00:55 2026 GMT
            Not After : Jul 25 00:00:55 2026 GMT
        Subject: CN=5e708997bc232c552f6a768b7d050dbbe0cc15e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:65:c1:82:b0:3c:c3:02:72:26:94:d3:3e:
                    a2:db:19:98:24:95:eb:94:ed:dc:59:dd:47:53:e5:
                    ae:a7:52:ec:10:74:63:b1:50:05:bf:84:ff:f1:95:
                    ef:68:3c:f3:4f:d7:75:98:65:b3:47:d8:87:a4:02:
                    43:00:92:38:81:ff:9a:56:18:6c:6b:f3:9c:2b:03:
                    ee:fd:85:ea:f5:e9:20:09:d9:62:14:13:33:f8:fe:
                    a4:d1:6e:3d:c8:4b:51:76:f2:ea:51:c3:57:af:9f:
                    37:9f:98:de:46:70:c7:f6:6f:0b:84:7b:ce:6c:d7:
                    8e:50:0e:ec:06:b8:d8:8d:c4:55:a4:a5:c3:cf:df:
                    1a:ca:30:fc:f0:22:d7:c0:d6:ed:a7:09:b0:bc:91:
                    f0:e3:ef:2f:64:ac:e1:ab:76:65:37:44:ce:33:56:
                    4b:36:6c:1e:c4:a2:6f:6b:f5:c6:60:75:c7:5c:80:
                    48:69:f4:7f:6c:a4:c2:18:16:c6:98:b1:19:43:30:
                    9e:1a:3d:3d:78:05:2e:b4:2a:6a:fb:c3:68:fa:37:
                    d5:bb:ad:e2:b5:46:ce:92:39:64:98:43:7b:1a:c0:
                    f3:82:d3:15:32:c5:41:9e:db:ef:c9:df:25:f6:d6:
                    15:d9:8d:d1:a0:36:52:09:04:9a:8a:75:18:f3:b4:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:70:89:97:BC:23:2C:55:2F:6A:76:8B:7D:05:0D:BB:E0:CC:15:E9
            X509v3 Authority Key Identifier:
                keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:d3:35:f4:85:a1:7a:22:8c:aa:cc:39:67:dd:fb:d9:c0:
         a8:2f:cf:88:3e:79:be:c8:6d:49:8d:f8:04:08:51:ec:a2:6b:
         b5:0c:4a:c9:d6:95:85:a7:2b:df:ba:de:2c:26:0e:72:15:04:
         fd:6a:f7:1c:50:38:20:1b:79:b1:f8:f4:1d:a5:7b:b7:fa:1a:
         d3:ec:d5:ce:c2:5d:91:aa:93:f5:a9:32:69:12:1b:73:72:67:
         b9:a0:ec:c6:14:8d:cc:4f:b0:8a:c5:ed:d9:4c:3d:24:6e:14:
         6b:02:7e:41:cb:28:a6:97:d7:a3:6f:02:6a:9a:71:e4:9f:08:
         66:62:c0:ae:30:e5:0e:78:a3:b7:da:64:0f:56:a8:14:62:81:
         c2:17:a7:e7:ac:fb:b3:a1:37:6c:84:63:00:66:64:c7:8a:3b:
         aa:bb:d1:1f:4d:c6:59:ca:4d:66:33:42:2e:84:00:70:92:59:
         59:ab:32:f4:2d:39:17:89:37:66:8d:a1:86:96:b1:15:8a:68:
         ac:ea:d5:a2:d7:d8:4e:61:72:f5:40:bf:1a:d3:40:1e:37:e0:
         6e:8e:fa:51:a2:47:05:54:2d:62:f0:2c:c2:00:1a:1f:d6:e1:
         74:69:ee:2c:00:7d:8d:22:30:a1:6f:9d:0c:b0:54:bb:8f:36:
         6b:e6:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:17 2026 by rpki-client