Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          Gh5OPISwR1Bt9IKEacKoxnFucRen2MH794Jzw7m2ERk=
Subject key identifier:   64:61:EE:B1:A0:83:CE:70:56:F7:14:9A:9A:7E:37:59:89:F2:E1:14
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       019E21A41878608522C995A2F4E86078E517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          0D33
Signing time:             Wed 13 May 2026 14:01:02 +0000
Manifest this update:     Wed 13 May 2026 14:01:02 +0000
Manifest next update:     Thu 14 May 2026 14:01:02 +0000
Files and hashes:         1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: Kl1AK875STyPsFEZJF0vASYfT8vaHM9ayFjg94Nwnyg=)
                          2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:a4:18:78:60:85:22:c9:95:a2:f4:e8:60:78:e5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: May 13 14:01:02 2026 GMT
            Not After : May 14 14:01:02 2026 GMT
        Subject: CN=6461eeb1a083ce7056f7149a9a7e375989f2e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:41:13:d8:2d:e7:89:f2:0a:b4:05:d9:9e:
                    bb:f2:99:a3:07:45:ad:6b:11:6e:ba:a7:2d:8a:07:
                    78:d1:3a:17:e5:e9:f1:38:49:fa:ef:62:14:76:5d:
                    1f:3f:bc:c2:8c:28:26:d0:59:a1:91:8b:22:de:1a:
                    e6:b7:b7:e4:fa:fb:90:66:bf:fd:2a:31:6c:01:72:
                    69:83:43:af:7b:db:62:64:ab:0c:e2:ea:92:6f:a4:
                    41:20:b2:21:3b:ed:2c:28:a3:5d:ac:af:f1:ed:cc:
                    3f:3f:24:a2:1d:8e:36:05:5e:73:cd:57:83:7f:eb:
                    5f:79:89:86:45:5e:a5:b3:0e:91:93:27:20:0b:7e:
                    47:68:24:bd:45:41:e7:95:fe:8f:ab:cd:84:96:75:
                    91:b3:69:8a:6c:82:96:96:46:6d:dc:14:3e:97:9c:
                    6c:a3:34:6c:22:fb:28:f4:20:f1:79:2d:66:29:f1:
                    98:f9:41:b8:6d:a9:4a:91:3a:c4:9b:df:ce:98:92:
                    f8:3c:33:00:5f:52:65:38:a6:f9:ee:d5:99:ad:ce:
                    c5:e3:44:41:2a:97:7b:45:e8:69:54:d2:ea:23:24:
                    c7:a1:fd:fe:f1:48:3c:d3:04:35:76:22:f1:17:0c:
                    9f:26:b1:44:d3:30:a5:fe:63:17:56:0b:dc:80:a5:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:61:EE:B1:A0:83:CE:70:56:F7:14:9A:9A:7E:37:59:89:F2:E1:14
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:51:1b:70:dd:e7:c8:76:20:a7:2e:95:66:85:2b:70:7e:
         9b:38:0e:d7:01:b2:24:a4:7d:14:0b:70:b5:0c:0c:1e:ba:71:
         3f:6e:77:1b:11:c2:17:41:80:a9:33:12:e4:3f:14:66:1d:ca:
         2b:c9:ef:3b:21:41:3e:07:0f:68:f6:04:6a:1f:d8:3e:0e:b4:
         52:91:0b:00:dd:76:6e:fa:cb:5f:e0:72:94:05:55:2d:df:4e:
         a3:ce:f4:36:7f:c7:73:f3:c4:0f:21:7b:95:33:97:fb:c2:77:
         1f:78:62:bf:0d:47:d7:38:48:6a:39:f7:a5:19:23:2f:06:f5:
         a4:ab:c5:8c:fd:4e:52:18:18:0b:b4:83:c4:b4:30:f9:bc:7a:
         31:3a:f0:dc:7f:dc:1e:3e:ba:22:f0:43:6e:4f:5e:e2:2f:41:
         f5:86:b9:27:9f:1e:ae:47:bb:60:18:1e:45:71:24:67:1a:fc:
         78:f8:07:85:6a:3e:5b:54:50:2d:43:3c:94:41:30:5d:5c:7c:
         0f:f3:5c:08:73:fb:51:89:39:08:d7:76:2a:81:64:5a:ad:02:
         37:97:a0:c7:0f:5b:e5:53:a0:dc:78:3c:82:38:94:74:7a:3a:
         d7:97:a2:8d:b4:42:66:e4:e2:a1:4d:92:41:10:ac:4c:8d:cc:
         fa:f3:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:12:34 2026 by rpki-client