Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          AYX2RFffyk17wjFcERVjtMObwPZXDhomcJCKLWW4Y5w=
Subject key identifier:   4A:59:5E:F3:AD:D6:34:AF:D1:A2:4D:AB:18:2C:CF:EE:7B:14:B9:93
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       01A0D2DE3E9E1B7372148D7ABE51402E91DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          02F6
Signing time:             Thu 24 Sep 2026 10:02:55 +0000
Manifest this update:     Thu 24 Sep 2026 10:02:55 +0000
Manifest next update:     Fri 25 Sep 2026 10:02:55 +0000
Files and hashes:         1: 0opcnqgGubzmysjCmgsy1w2Z93A.roa (hash: /1gFN6Q5hSb3O2AyPzhVJtZmgB0j29PnyY1ChQtSMBw=)
                          2: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          3: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: C4Ap2yFVQ9AHfWCPp4bMRTfJSA4Uj3VKfSyqIHQUGlM=)
                          4: VPyEZw62iC49LD_5e5811s6wJGQ.roa (hash: xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=)
                          5: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (hash: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=)
                          6: v7qTs-P4kf96NQEVuIjiFlnfrkg.roa (hash: 06QnWdclxVJibPO9oaPeJlCjEUztsjOaTGtfwNdn2zw=)
                          7: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:3e:9e:1b:73:72:14:8d:7a:be:51:40:2e:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Sep 24 10:02:55 2026 GMT
            Not After : Sep 25 10:02:55 2026 GMT
        Subject: CN=4a595ef3add634afd1a24dab182ccfee7b14b993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:e0:7f:3d:c2:dc:4c:aa:12:10:9e:f4:74:
                    f1:50:a0:88:d7:fb:c6:9e:2c:1a:21:ef:a8:3d:38:
                    b6:18:e5:ac:24:18:28:11:3f:ac:52:88:1c:c4:cb:
                    61:f8:8f:61:4a:61:21:c4:39:6f:72:1c:ca:17:8c:
                    e7:e7:bd:50:73:74:61:da:a4:ae:11:8a:9e:c5:a1:
                    ed:bb:3b:47:fa:2c:4a:c6:29:0e:dd:1b:94:59:d8:
                    2d:ee:e8:e5:02:82:54:2b:98:75:4d:04:8e:ff:fa:
                    80:8e:32:a8:e0:8b:dd:22:65:a3:ea:91:ec:92:86:
                    1a:27:58:60:04:18:61:4a:56:f8:d6:b2:c8:91:2f:
                    3a:4b:96:e6:9d:37:5f:3a:f1:a9:4d:54:13:8a:66:
                    dd:b0:a6:a7:a8:a3:8a:90:33:b5:da:06:93:e4:c6:
                    93:d5:84:cb:cf:6f:1c:a4:53:9e:e2:40:fd:69:31:
                    bb:1a:89:56:14:e7:f5:e6:5c:3d:e0:8d:f2:54:31:
                    be:8b:59:85:06:d8:fc:1b:7b:61:90:b4:d7:ab:03:
                    d2:05:d4:d0:be:16:db:a9:90:6e:88:18:65:95:d8:
                    3e:95:57:7e:f4:5d:ca:ba:f8:ac:e7:c5:d1:38:b4:
                    b2:b3:38:b4:d5:38:b2:13:28:82:20:b5:82:10:c5:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:5E:F3:AD:D6:34:AF:D1:A2:4D:AB:18:2C:CF:EE:7B:14:B9:93
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:41:24:7d:e7:75:13:9c:30:a0:ed:58:ca:36:b5:ea:03:95:
         82:9d:82:d0:8b:b3:d5:9d:f4:ad:62:3c:a0:ae:24:cf:1f:79:
         b4:42:71:35:e6:89:67:bb:a8:81:9b:48:c9:d2:09:7a:c7:11:
         a7:e2:22:61:99:17:d5:d3:5c:fa:e8:1d:44:b9:4f:be:f4:57:
         b9:39:97:bb:1a:ed:bc:e6:62:a8:21:e2:d8:05:a3:07:ab:e4:
         fa:1d:8a:10:0d:e1:c8:41:10:46:04:2c:b6:2b:1f:b4:5b:b0:
         2f:33:4a:67:21:42:90:d4:8d:ed:88:ee:53:88:29:d8:69:94:
         5b:7f:69:e3:6d:e9:21:08:02:6d:dd:6c:d7:3d:19:60:ef:fc:
         ae:c1:e8:c1:12:df:28:3e:46:50:ec:a6:03:81:ea:20:64:42:
         c8:8d:dc:ab:7d:7b:68:19:30:28:f3:ad:fe:31:5b:80:73:31:
         41:f5:1f:27:26:64:e1:fe:8e:77:21:5b:52:ca:58:12:d6:c9:
         51:4e:28:c7:43:4c:2a:1f:30:bb:55:50:8f:ae:65:f0:02:a0:
         3b:78:8e:46:0f:f7:98:12:4b:e3:fb:4a:5e:cc:8c:7f:c2:e5:
         6a:49:6b:5f:ba:6a:ff:81:b6:db:6e:b1:ba:05:b1:33:40:dd:
         29:e3:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:02:40 2026 by rpki-client