Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File:                     LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier:          4xtXHGAvyEShkP5qLHPWopwpe6Q90ncOtkIfUekVdFk=
Subject key identifier:   EE:C7:D1:6C:3C:DE:99:A3:70:69:46:0B:DA:1F:DC:B4:29:97:CC:11
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer:       /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial:       0199FC8F71D7D6EE7A755088EBD0EEBFD3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number:          1376
Signing time:             Sun 19 Oct 2025 13:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:23 +0000
Files and hashes:         1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: Eh7og8WqP2jiFQD1/d0w9IKXfyWThw1jcfCvmiUYbuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:71:d7:d6:ee:7a:75:50:88:eb:d0:ee:bf:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
        Validity
            Not Before: Oct 19 13:01:23 2025 GMT
            Not After : Oct 20 13:01:23 2025 GMT
        Subject: CN=eec7d16c3cde99a37069460bda1fdcb42997cc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f8:68:d3:fe:c8:18:7b:7d:82:5a:42:fa:cf:
                    bf:23:7b:05:10:08:e2:54:a3:22:b6:0b:67:9e:61:
                    5e:79:a7:5e:cc:f2:05:37:20:4c:f3:99:d4:d3:75:
                    8a:c9:0f:0d:26:40:95:6c:3e:cf:c2:b6:e8:4b:1b:
                    49:a4:9c:9c:2e:36:80:9a:69:5c:5a:36:84:83:5e:
                    5b:2c:a9:52:9b:00:88:53:cc:57:bc:3d:8d:b9:fd:
                    df:d5:f6:a0:17:a6:ad:34:fc:d9:f9:00:4e:0d:38:
                    da:b4:1e:e4:fe:0c:ca:91:1a:89:9a:6f:31:e4:07:
                    bd:54:69:aa:40:1e:6b:8f:73:3f:c0:65:02:f4:b9:
                    b9:2e:e2:a0:60:1a:3e:64:cf:51:2b:c8:2c:7d:30:
                    24:5b:9e:e5:96:c3:02:75:9b:b7:41:cc:78:36:fd:
                    a5:e8:81:3c:7f:0f:92:39:83:f9:3f:10:6a:a9:bd:
                    f2:02:31:6a:06:e9:a2:b0:31:a9:8b:d7:15:45:c9:
                    51:26:5b:96:79:ec:48:bd:3e:fe:ae:5a:9f:cc:7e:
                    41:9e:50:87:fa:f5:6b:27:9d:b1:f3:03:68:5e:16:
                    2b:e5:fb:cb:c5:f8:97:0e:d7:3c:0f:a0:40:84:9e:
                    2b:e4:0f:e1:93:22:b9:38:1b:4f:fa:77:8c:39:eb:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:D1:6C:3C:DE:99:A3:70:69:46:0B:DA:1F:DC:B4:29:97:CC:11
            X509v3 Authority Key Identifier:
                keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:91:c9:61:4f:ae:16:53:25:6e:65:bc:52:6b:82:d6:68:
         55:77:0e:db:77:e6:85:50:7c:3c:35:16:6f:8e:36:34:b3:43:
         48:a5:2f:ed:29:f0:c8:3f:98:b5:aa:81:da:6e:d8:18:7c:77:
         86:43:41:df:ea:de:b8:ff:ca:67:ba:a3:aa:44:26:78:34:c8:
         87:34:2c:8d:75:be:f6:3e:99:8b:de:13:cc:7b:54:36:b5:ca:
         0d:a0:71:7b:76:20:50:5b:1c:28:44:d0:cb:0b:b2:79:9a:e0:
         fb:f1:3d:6f:2a:09:65:79:88:83:3b:a1:f7:75:f0:a3:50:a0:
         b7:7b:4d:e1:a5:99:c3:52:2a:f3:80:2e:ec:6a:0c:72:9e:93:
         5a:ce:af:58:cc:56:db:0d:33:68:71:a7:ff:46:8f:e4:2b:f2:
         30:49:a9:85:55:33:8e:ad:f3:84:c6:d3:dc:fd:98:0b:6b:67:
         86:8e:6a:2a:e5:87:1b:84:5d:d3:86:b9:00:01:5c:da:1e:18:
         c1:60:d9:38:cc:47:91:c8:3e:a4:43:5a:bd:49:ea:13:8b:af:
         80:88:9a:dc:8b:65:cf:8a:0c:2d:1f:30:ab:3d:dc:82:ae:e7:
         c2:03:45:be:90:32:6f:b7:57:78:cd:38:20:03:e1:9c:50:a3:
         72:9a:d2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3HX1u56dVCI69Duv9PSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0
MDZiOTAwHhcNMjUxMDE5MTMwMTIzWhcNMjUxMDIwMTMwMTIzWjAzMTEwLwYDVQQD
EyhlZWM3ZDE2YzNjZGU5OWEzNzA2OTQ2MGJkYTFmZGNiNDI5OTdjYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vho0/7IGHt9glpC+s+/I3sFEAji
VKMitgtnnmFeeadezPIFNyBM85nU03WKyQ8NJkCVbD7PwrboSxtJpJycLjaAmmlc
WjaEg15bLKlSmwCIU8xXvD2Nuf3f1fagF6atNPzZ+QBODTjatB7k/gzKkRqJmm8x
5Ae9VGmqQB5rj3M/wGUC9Lm5LuKgYBo+ZM9RK8gsfTAkW57llsMCdZu3Qcx4Nv2l
6IE8fw+SOYP5PxBqqb3yAjFqBumisDGpi9cVRclRJluWeexIvT7+rlqfzH5BnlCH
+vVrJ52x8wNoXhYr5fvLxfiXDtc8D6BAhJ4r5A/hkyK5OBtP+neMOevWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7H0Ww83pmjcGlGC9of3LQpl8wRMB8GA1UdIwQY
MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut
ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm
LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHqRyWFP
rhZTJW5lvFJrgtZoVXcO23fmhVB8PDUWb442NLNDSKUv7SnwyD+YtaqB2m7YGHx3
hkNB3+reuP/KZ7qjqkQmeDTIhzQsjXW+9j6Zi94TzHtUNrXKDaBxe3YgUFscKETQ
ywuyeZrg+/E9byoJZXmIgzuh93Xwo1Cgt3tN4aWZw1Iq84Au7GoMcp6TWs6vWMxW
2w0zaHGn/0aP5CvyMEmphVUzjq3zhMbT3P2YC2tnho5qKuWHG4Rd04a5AAFc2h4Y
wWDZOMxHkcg+pENavUnqE4uvgIia3Itlz4oMLR8wqz3cgq7nwgNFvpAyb7dXeM04
IAPhnFCjcprSHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:18 2025 by rpki-client