Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File:                     LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier:          ToN3wfbaRkNf8tEoofFFbXb8tVaZ62ASjREsenvGEPY=
Subject key identifier:   4E:B7:CB:B8:4A:B0:BA:50:E5:59:46:53:76:EC:51:E3:5E:07:5C:98
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer:       /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial:       019D2884748C2406E90038A1D3D508D83B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number:          1755
Signing time:             Thu 26 Mar 2026 05:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:02 +0000
Files and hashes:         1: GcH-WF46-Cx6ySovZfxGMRK-ScA.roa (hash: vLUhEA8jeh8KPUh1zpLwKiZLSX3eBBb9XYrIml4wnm4=)
                          2: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: 7iMvTaC0xM01TPse4xJJAZGFf+DxOI0cDFDvi08FFno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:74:8c:24:06:e9:00:38:a1:d3:d5:08:d8:3b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
        Validity
            Not Before: Mar 26 05:01:02 2026 GMT
            Not After : Mar 27 05:01:02 2026 GMT
        Subject: CN=4eb7cbb84ab0ba50e559465376ec51e35e075c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:b3:53:e8:c6:1d:74:bb:e3:25:d3:44:19:
                    b0:15:66:58:8a:4c:74:bb:e0:c4:95:87:05:10:48:
                    d7:1c:54:35:78:bf:44:31:5e:45:49:38:b5:b1:f2:
                    53:6d:c3:90:6c:68:f9:e4:bd:63:b1:26:71:5c:c2:
                    e9:11:62:f3:81:7f:07:73:e9:65:be:0a:80:ee:56:
                    48:7d:2a:28:11:a5:30:6a:b6:53:d4:ed:b9:fe:6d:
                    88:a6:66:69:ce:04:d3:d0:ac:70:90:03:1e:34:a7:
                    2a:33:55:4f:2d:bf:92:a2:52:f9:17:c5:0b:4c:58:
                    74:a9:70:37:59:c5:da:cc:7a:d8:a7:c6:f1:0d:3c:
                    27:c2:59:ab:be:c5:c8:91:4c:c2:a6:94:ff:1d:c3:
                    70:0e:49:d0:4a:d3:03:ad:c7:d1:d5:bf:d7:72:3d:
                    42:d4:68:bd:3f:a7:9f:89:9d:8b:d6:1c:07:56:9e:
                    8c:08:fe:c3:d1:59:44:cb:78:3f:a2:de:ba:29:6e:
                    f0:56:ff:50:8e:b8:ea:f3:bb:80:e8:37:18:48:30:
                    48:7e:dd:58:d0:43:13:14:26:fc:6e:c8:1b:1a:be:
                    d2:23:c0:27:f9:a8:5a:90:ca:61:9f:c4:bf:68:bd:
                    cd:34:50:70:53:c9:48:e6:c1:9b:db:dc:5d:21:09:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:CB:B8:4A:B0:BA:50:E5:59:46:53:76:EC:51:E3:5E:07:5C:98
            X509v3 Authority Key Identifier:
                keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:66:8d:88:db:60:7d:e6:f9:d7:7e:77:4a:0a:27:47:b9:
         3b:33:34:18:8e:8a:40:06:45:22:cf:86:91:36:08:65:07:63:
         54:d6:f1:a2:07:cb:74:24:f9:6b:20:9a:59:8d:80:29:7b:57:
         89:aa:18:0d:51:22:5a:70:11:b1:3c:64:a0:55:5d:0b:cd:36:
         17:1b:7c:d0:a7:11:71:39:16:7e:bf:9a:9f:ac:9a:e3:21:69:
         5b:5e:2a:cd:72:42:d0:c5:50:2f:5d:dc:55:bf:b8:c4:ef:27:
         42:8f:b8:15:88:36:58:08:86:b7:32:4b:41:b9:7a:72:5a:1b:
         14:15:fe:fd:41:2b:fe:d3:34:fa:11:b0:49:76:b3:8b:3c:b0:
         7c:9b:85:62:6f:85:b8:b2:40:8c:3d:4f:75:ac:c9:48:ee:54:
         7d:c9:42:35:92:b1:3b:2c:ef:04:a6:4c:12:af:6e:1c:9b:0e:
         97:52:46:cd:49:4f:41:53:d7:51:1c:bc:f7:a0:f7:cc:b3:c9:
         e2:ab:68:f4:eb:a8:5b:f9:dc:70:11:fa:c3:d3:46:fc:5e:1c:
         79:b4:46:7f:35:f7:c1:af:25:1d:15:17:b0:79:bc:c8:ba:a5:
         ed:82:3c:5a:2c:81:df:04:d9:e3:a1:cd:08:b0:ba:ba:7f:28:
         59:f2:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:01 2026 by rpki-client