Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File:                     llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier:          0FbtdSAL3XdIe/ZqxTBE7z0rl386+tvZ+DBTdIt+QAw=
Subject key identifier:   7B:C2:D6:F6:74:72:D0:C8:AE:68:3F:71:02:AF:D6:74:76:18:AC:60
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer:       /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial:       019E1BD8A8E7EF214971452F0005B7B9D94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 11:00:44 +0000
Manifest this update:     Tue 12 May 2026 11:00:44 +0000
Manifest next update:     Wed 13 May 2026 11:00:44 +0000
Files and hashes:         1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: t0UkPN3VDnsP/cvxHeyn7XA9jgVCQ3ArZz01BO85/mk=)
                          2: xlcC7OzJncwz3-3fDqQVCRiRUuA.roa (hash: +tBbtDRSVVjOD+h/7bnuccyOYojgyYfukEn9rcwiF1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:a8:e7:ef:21:49:71:45:2f:00:05:b7:b9:d9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
        Validity
            Not Before: May 12 11:00:44 2026 GMT
            Not After : May 13 11:00:44 2026 GMT
        Subject: CN=7bc2d6f67472d0c8ae683f7102afd6747618ac60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:7a:ed:bb:f3:67:af:65:5d:1f:4a:d9:84:
                    08:6c:19:7b:79:93:bc:1b:87:d0:79:20:52:cf:93:
                    64:66:7e:ea:68:dc:f0:d1:2a:b3:3d:2c:26:fa:d7:
                    7b:4e:98:27:55:77:09:08:7b:b1:68:10:37:2e:eb:
                    6f:c6:2f:5b:02:d4:79:40:3c:2d:5d:7e:4d:c1:3d:
                    ba:40:94:e7:21:3b:ca:ae:63:d7:69:50:18:53:61:
                    dc:91:19:9d:90:26:fa:e0:b9:5b:76:d8:cd:00:da:
                    21:e4:51:9f:34:29:29:f8:eb:4f:97:a1:a7:af:e5:
                    4a:bc:10:69:4f:05:bc:31:2e:54:43:a4:ce:dc:0b:
                    65:09:10:c2:f8:e1:55:b6:29:3d:8a:eb:a0:39:05:
                    a2:d7:2b:2a:35:30:05:34:15:3d:76:11:ba:e1:f6:
                    6a:0c:bf:99:39:35:d6:68:5f:30:7f:29:6c:ee:2e:
                    b7:1e:8d:55:bf:f8:f1:4c:18:40:4b:23:1c:d7:c1:
                    91:4d:12:c3:17:9c:0b:cd:bd:a2:42:f7:26:99:71:
                    23:5f:fb:8d:6e:1d:dd:98:74:93:a1:a3:d9:a4:84:
                    5c:8a:ae:5d:f5:53:1a:d6:b5:96:28:db:f1:c1:af:
                    98:16:12:89:b5:48:38:6b:61:c2:68:bd:77:62:39:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C2:D6:F6:74:72:D0:C8:AE:68:3F:71:02:AF:D6:74:76:18:AC:60
            X509v3 Authority Key Identifier:
                keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:9b:9e:c2:d2:f1:2b:fd:f7:0a:43:91:7c:31:f3:46:0c:
         ef:05:b5:32:b5:37:41:d3:83:ba:80:fc:3e:97:4a:7a:25:93:
         32:df:df:39:54:3c:ee:6d:87:7e:9e:b7:a3:3b:06:37:90:7d:
         ac:31:da:40:f7:f6:0d:21:a2:17:e3:7f:3a:fb:c8:0e:c6:e9:
         71:2f:e7:ba:47:97:52:b0:d3:27:03:2b:a2:b0:7f:41:d1:41:
         87:e0:20:9a:63:62:cf:55:fd:6d:7a:c9:0a:eb:86:09:4a:28:
         77:d7:5c:4e:fd:58:e3:58:d1:0e:08:f5:e4:f1:70:73:6b:21:
         f5:91:b3:1b:bf:7b:84:02:e8:ae:e5:14:bb:96:e8:c7:f8:cb:
         a6:c2:b1:5a:a1:08:7a:27:76:95:20:9c:89:0b:d5:26:07:8a:
         eb:8c:f9:26:5b:02:ca:1f:cd:59:d7:40:90:fc:5f:4e:60:e9:
         8c:5c:fe:6f:cb:af:7c:e1:6a:90:24:ec:e0:90:ca:5c:8d:11:
         ef:3d:c6:4b:a3:d3:4c:a9:cf:72:e0:73:69:55:70:fc:9c:78:
         12:47:27:d7:0c:eb:00:64:81:fa:d0:ed:09:60:a3:24:1e:17:
         eb:1e:66:52:41:d6:5c:2f:b3:64:ff:05:cb:38:1d:71:dd:33:
         25:03:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:32 2026 by rpki-client