Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          QBba7Lkf4sycdlguMq4+lb7BsTNt3wkugNpFeH0CjAA=
Subject key identifier:   F9:55:C4:9D:81:BA:F6:64:92:F6:C0:0B:87:A4:0D:5B:B8:3D:D5:42
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       01A0D4CBBDFF90F52DC42885C1E006CAC482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          02F7
Signing time:             Thu 24 Sep 2026 19:01:57 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:57 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:57 +0000
Files and hashes:         1: 0opcnqgGubzmysjCmgsy1w2Z93A.roa (hash: /1gFN6Q5hSb3O2AyPzhVJtZmgB0j29PnyY1ChQtSMBw=)
                          2: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          3: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: r4H7g067eRTx7mgEablRbIgIUq5HWzztchanYDO24MY=)
                          4: VPyEZw62iC49LD_5e5811s6wJGQ.roa (hash: xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=)
                          5: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (hash: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=)
                          6: v7qTs-P4kf96NQEVuIjiFlnfrkg.roa (hash: 06QnWdclxVJibPO9oaPeJlCjEUztsjOaTGtfwNdn2zw=)
                          7: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:bd:ff:90:f5:2d:c4:28:85:c1:e0:06:ca:c4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Sep 24 19:01:57 2026 GMT
            Not After : Sep 25 19:01:57 2026 GMT
        Subject: CN=f955c49d81baf66492f6c00b87a40d5bb83dd542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:0b:ff:dc:a4:39:91:f3:19:49:93:bf:d8:
                    70:6f:93:07:f8:20:be:41:f2:08:ee:71:3a:b6:8a:
                    3c:fa:45:4e:20:4d:3f:44:54:51:b8:41:9c:27:2b:
                    0e:3e:31:5e:77:e6:1e:b6:4c:a8:b8:0c:7a:90:4a:
                    c2:f3:c6:51:f5:b3:dd:38:60:d0:0b:54:78:8c:ac:
                    e1:43:c6:6d:e7:64:c3:1f:11:08:55:bb:05:35:d2:
                    a8:a4:46:ed:2b:72:05:65:72:13:a0:24:ef:78:1c:
                    87:98:d7:b2:e8:ec:9a:58:6d:42:e1:32:f2:04:06:
                    d5:71:57:4e:fb:ac:a2:bc:5a:94:a7:40:5b:92:2c:
                    25:27:3a:18:43:9b:e3:3b:5a:61:27:50:85:dc:11:
                    93:44:20:2c:a6:57:2c:7b:23:a1:a1:03:f3:f3:02:
                    37:b0:76:8a:ec:00:69:7c:95:62:3a:b5:ac:76:79:
                    cb:85:63:37:6a:eb:fc:d1:15:8e:61:fa:8d:c9:8f:
                    53:49:34:7e:55:7e:40:4e:74:45:58:3b:a3:cc:60:
                    fe:ac:dc:a9:d0:19:3d:64:9c:8c:f4:1a:f2:ab:99:
                    0e:ca:50:de:e0:6e:67:3f:84:ae:f6:77:ab:57:fe:
                    75:ef:cc:09:bc:3c:1a:59:ff:cb:67:48:0a:fd:6a:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:C4:9D:81:BA:F6:64:92:F6:C0:0B:87:A4:0D:5B:B8:3D:D5:42
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:d6:0b:f9:85:6b:51:a9:e0:30:15:91:dc:0a:d6:8d:da:
         f6:ad:51:e7:f7:29:6d:5f:65:a6:be:4d:40:53:4d:67:c1:a9:
         cd:1b:ce:8d:35:f5:f1:14:7d:88:f6:79:dc:43:8e:56:3d:c2:
         d3:80:88:17:94:45:63:40:1b:5e:5e:bb:bb:9c:38:78:f1:2c:
         29:57:e5:bb:4d:e1:64:dd:76:ea:d2:d2:03:d0:0e:d3:ec:1c:
         c0:68:3b:1e:ff:88:d6:75:05:a1:ac:98:1b:5c:47:ce:b2:17:
         3c:d3:0a:a8:64:ca:07:ce:57:98:4d:94:4b:07:dc:36:fe:20:
         33:16:80:18:e7:ab:52:76:ce:0d:51:9b:00:62:79:00:7d:62:
         1b:f5:7b:15:99:c3:81:39:75:0a:d1:c7:51:fd:a3:7a:39:1d:
         80:76:1c:b3:1d:da:b4:b6:ee:4f:73:f5:3c:ce:fc:bc:3b:19:
         e6:d3:9b:b1:b3:44:fe:3e:4e:ad:c9:28:83:58:ae:9f:52:0e:
         67:28:4d:98:9a:d1:8c:ee:e0:5e:d6:d5:df:47:85:55:3b:50:
         a6:d2:96:de:0a:13:c8:1b:33:44:fc:7c:67:10:81:c3:de:de:
         f9:85:0f:1d:d7:ce:96:1a:3f:03:c4:06:78:2f:7f:9e:f5:0e:
         13:4b:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:19 2026 by rpki-client