Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          00VvJnum5rhms0gR97vc6eOgUVymngCmWqO+va13HP4=
Subject key identifier:   92:7B:45:F9:C5:C3:A0:56:76:C2:CC:92:8F:D2:3D:B4:5F:CD:9C:AB
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       0199FC21476A385B3FFED049F9468D2D8547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          0B0D
Signing time:             Sun 19 Oct 2025 11:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:03 +0000
Files and hashes:         1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: eL8qbhJObuA6pNkDk8pwGoxvhlrOVdQx+Whsw6vVmZQ=)
                          2: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (hash: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:47:6a:38:5b:3f:fe:d0:49:f9:46:8d:2d:85:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: Oct 19 11:01:03 2025 GMT
            Not After : Oct 20 11:01:03 2025 GMT
        Subject: CN=927b45f9c5c3a05676c2cc928fd23db45fcd9cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:74:6d:a2:56:f8:f9:72:d7:70:88:b3:0c:
                    e0:46:49:a9:d4:d4:22:f1:26:0b:be:ba:ba:93:ee:
                    73:91:37:53:77:82:8b:77:db:64:61:b4:41:7e:42:
                    0f:1f:77:f5:ad:e3:2e:55:ca:04:14:95:83:eb:19:
                    ec:22:21:65:a6:a3:90:13:28:3d:f5:d8:29:c1:71:
                    a8:6d:e6:87:dd:c5:9b:cb:4a:42:c0:35:86:af:fd:
                    20:69:0b:7e:d0:88:51:a0:99:aa:5e:3b:94:70:a2:
                    42:8a:65:e6:89:bf:80:3f:cc:93:6b:b8:a0:8f:67:
                    0a:1d:a0:95:22:36:cc:38:b4:f8:56:3d:72:9b:71:
                    a1:d0:d6:b5:3f:49:7d:b1:f8:1a:5f:01:94:37:06:
                    64:30:58:d5:84:c9:56:c0:76:11:b7:e5:ec:0c:30:
                    ed:91:61:09:7d:22:1e:e2:03:22:9f:72:ea:18:ad:
                    d1:84:64:61:e6:6f:25:65:bf:85:06:9c:bb:9a:a5:
                    57:3a:06:45:d6:44:0d:a9:24:1f:45:8e:a6:48:fa:
                    13:d3:f7:92:92:d9:42:9a:92:e7:55:47:0f:72:ca:
                    f9:42:74:ce:9c:05:e3:66:08:31:53:29:a0:8b:a8:
                    cc:88:58:6b:a1:5b:67:23:2e:ab:ce:1d:e1:84:56:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:45:F9:C5:C3:A0:56:76:C2:CC:92:8F:D2:3D:B4:5F:CD:9C:AB
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:e1:f5:50:27:f5:6b:a4:66:6f:2a:3b:44:38:99:28:06:
         c4:72:b4:99:3f:b4:5e:6a:19:c7:3c:1e:17:25:ce:91:53:19:
         11:d3:50:ec:04:75:bf:bb:10:b0:20:ce:d3:16:d4:59:3b:53:
         d3:d8:e4:d4:7a:b3:75:33:19:c4:72:e3:3b:d9:5a:c4:f0:52:
         ad:37:fc:5d:17:91:03:0e:eb:f0:d0:69:18:d0:78:33:70:7e:
         f9:44:dc:bf:a8:82:ab:84:d6:73:f4:ad:54:76:f8:f0:79:2b:
         f8:0e:ad:35:17:31:d0:e8:51:6d:7f:61:32:b9:f3:15:5d:b1:
         d3:77:6a:94:07:cb:ce:49:97:95:d7:59:7e:b0:e7:68:f8:c9:
         6c:65:f0:2a:ae:ed:80:40:06:23:47:16:05:79:4e:95:62:95:
         3d:fa:99:83:4e:69:ee:39:6d:ef:d0:18:52:f3:f3:b4:94:60:
         5a:ca:de:d9:2a:86:1d:11:17:17:90:b9:55:fc:31:29:9e:54:
         db:5d:d0:63:c1:f3:5c:ed:bc:3d:55:be:36:56:b1:b7:cc:86:
         0a:4c:66:e8:00:e4:91:16:09:9d:2d:cb:ef:8d:c5:5d:00:ab:
         3e:0a:15:1a:c5:5a:0b:fe:79:d2:13:0d:fa:28:3f:f3:de:32:
         b7:f0:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:28 2025 by rpki-client