Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          1x4IS9xBG8Lb03ncT7+WYTaOz+9Hs9K6mpx5kkL+I5w=
Subject key identifier:   58:84:64:B0:CE:85:AE:51:AF:6F:20:84:22:C2:74:80:01:44:73:C3
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       019F9248C8AAEA6845080662F8FEECF9D13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          0250
Signing time:             Fri 24 Jul 2026 04:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:11 +0000
Files and hashes:         1: 0opcnqgGubzmysjCmgsy1w2Z93A.roa (hash: /1gFN6Q5hSb3O2AyPzhVJtZmgB0j29PnyY1ChQtSMBw=)
                          2: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          3: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: j4jIQsDV/HHD8FORk1p5kK1iBpcDHy3BSgF4z+90AdY=)
                          4: VPyEZw62iC49LD_5e5811s6wJGQ.roa (hash: xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=)
                          5: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (hash: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=)
                          6: v7qTs-P4kf96NQEVuIjiFlnfrkg.roa (hash: 06QnWdclxVJibPO9oaPeJlCjEUztsjOaTGtfwNdn2zw=)
                          7: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:c8:aa:ea:68:45:08:06:62:f8:fe:ec:f9:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Jul 24 04:01:11 2026 GMT
            Not After : Jul 25 04:01:11 2026 GMT
        Subject: CN=588464b0ce85ae51af6f208422c27480014473c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:47:b0:cf:65:79:1f:35:2b:c4:55:03:17:
                    5e:1f:c3:7a:a1:b0:57:2e:ee:8f:0b:59:e0:0f:90:
                    7f:42:49:85:f9:57:d2:0d:9c:90:f3:e6:b4:37:51:
                    54:d6:3b:a2:52:89:80:9b:be:12:ec:90:4b:be:16:
                    27:71:b1:5c:10:d8:b5:39:0f:08:56:35:ac:6a:ce:
                    5b:22:e0:f3:be:05:9d:4e:53:5d:8e:6c:e8:02:03:
                    f5:e5:c6:63:67:2c:da:13:40:3e:10:c3:79:1e:e9:
                    b9:a0:9a:52:aa:a8:1b:9e:d0:f1:a8:4c:06:b8:ad:
                    f3:b6:29:b7:ec:a4:a1:39:be:cb:cd:1b:cc:83:4f:
                    f5:71:21:ee:d9:1c:fa:40:51:21:d8:33:71:15:1e:
                    5d:0a:69:ed:e7:87:92:83:90:b4:94:97:ac:fe:70:
                    93:32:90:be:9b:49:37:d0:9b:bd:40:c2:ba:10:73:
                    36:0b:0c:51:ae:e9:55:a5:17:cc:ca:f5:fc:d2:cc:
                    3e:72:28:03:8e:8d:50:ff:68:4c:c0:6e:6b:a1:5a:
                    cf:50:1d:13:39:70:20:10:c1:db:2f:88:96:51:c0:
                    6a:e6:c2:c8:6c:de:3a:6d:a1:e7:de:d7:13:c0:3e:
                    6f:e2:34:51:65:84:ca:7d:b9:fb:13:60:4a:e1:48:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:84:64:B0:CE:85:AE:51:AF:6F:20:84:22:C2:74:80:01:44:73:C3
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:05:20:e5:0c:5e:18:3b:68:10:f6:c4:a0:c4:96:eb:8b:
         a5:c0:5e:90:4b:bd:e8:50:e1:e7:34:14:86:c8:aa:c9:f0:e5:
         a2:e2:da:e4:4b:88:5c:79:36:8e:ca:65:9d:70:f0:e9:16:cc:
         97:3c:7b:d3:b0:f1:7d:32:55:98:2f:7f:f3:32:59:a9:60:87:
         2a:7d:63:63:e5:86:10:04:56:26:0a:bd:0d:b3:26:81:b1:c6:
         86:f7:9d:8f:0d:18:8c:55:6b:b7:88:b4:6e:68:85:93:14:24:
         fe:85:6a:47:3d:07:2f:f8:6e:f7:d3:85:62:03:40:e1:32:7c:
         ac:b0:f7:11:83:d4:e1:f1:c3:b0:23:2e:63:9f:28:63:5e:57:
         c2:26:ab:51:15:63:6c:d4:5c:bd:7c:0f:f6:c2:16:a9:57:ee:
         43:c9:bf:1c:7b:d4:70:56:55:e9:80:b5:43:e2:6f:d3:b9:08:
         02:27:5b:0b:1c:5d:f5:35:f0:1f:84:e7:59:b0:1c:db:38:03:
         3a:5e:5b:4f:3c:4b:45:11:53:e8:23:00:f3:d5:f6:c3:51:1b:
         47:9b:e6:b9:cc:a6:5b:e1:c5:8f:77:21:1e:dd:fc:44:cd:3f:
         d2:8d:28:4b:a2:19:0e:03:8e:0d:ba:16:c4:f6:97:91:d4:2b:
         18:af:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:05 2026 by rpki-client