Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File:                     LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier:          Uhu6TbE4Ic/bahdOJMMWkxyrToqidWLRwyIRJuqVWuA=
Subject key identifier:   19:17:8C:08:BC:4E:F8:64:8B:AC:3F:49:82:50:38:8C:CC:B3:89:1D
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer:       /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial:       019E1EDA46B6BFF6ABB17A5E543B70FD20A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number:          08E0
Signing time:             Wed 13 May 2026 01:01:21 +0000
Manifest this update:     Wed 13 May 2026 01:01:21 +0000
Manifest next update:     Thu 14 May 2026 01:01:21 +0000
Files and hashes:         1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
                          2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: 9jptYmzpw7d2PkJcI0OV2pMl4JY/WZYe5p1DW6NtAkU=)
                          3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:46:b6:bf:f6:ab:b1:7a:5e:54:3b:70:fd:20:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
        Validity
            Not Before: May 13 01:01:21 2026 GMT
            Not After : May 14 01:01:21 2026 GMT
        Subject: CN=19178c08bc4ef8648bac3f498250388cccb3891d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:b2:19:16:2d:28:43:50:93:de:34:44:57:
                    2c:e8:24:b3:e7:ed:44:fc:e6:58:1e:b7:a4:cf:d6:
                    b3:6c:2d:b6:b9:60:a4:9b:1d:d0:04:db:46:35:49:
                    fb:37:89:5f:bf:be:f7:09:ea:68:d4:0c:2e:af:6f:
                    aa:aa:1f:4d:57:70:6b:6a:01:7f:88:5a:90:64:02:
                    65:f1:83:9b:ce:b9:96:30:64:d7:5e:1c:fc:85:90:
                    69:98:1f:1e:ea:87:93:d7:96:7f:00:6d:ff:dc:76:
                    a3:69:22:f4:75:c6:18:6f:28:c4:f7:ab:06:d7:6c:
                    75:ec:60:bc:2a:8c:21:8d:6b:e9:56:76:5c:3d:a7:
                    f4:00:f4:3f:78:7d:19:b3:39:5a:84:81:84:a3:1a:
                    5c:36:b0:98:74:91:bb:c8:25:0a:15:2f:7e:bf:e7:
                    5a:a0:d7:1d:ae:81:72:16:8b:e5:74:c9:ea:c8:b4:
                    76:bb:8f:b3:7e:95:a7:c6:cf:61:23:8e:96:40:28:
                    3e:67:2e:4d:03:0a:28:c6:80:a6:4d:68:d9:f0:8f:
                    88:f5:04:b4:3e:cd:51:a0:31:91:8e:8f:df:fd:93:
                    7d:e9:3a:c6:d4:16:d5:80:9c:69:c1:ec:7d:35:00:
                    19:f8:56:58:e2:a5:d1:03:af:f9:67:d4:00:31:5e:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:8C:08:BC:4E:F8:64:8B:AC:3F:49:82:50:38:8C:CC:B3:89:1D
            X509v3 Authority Key Identifier:
                keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:06:64:92:75:5f:b1:28:dc:b5:4d:09:cd:a6:55:74:12:
         15:0d:7d:8d:6a:1d:e5:e1:05:a1:ca:b3:71:ce:e5:f0:90:02:
         31:af:26:57:89:1a:82:bc:8e:cd:6f:a9:f3:62:61:46:c4:6a:
         f7:d2:02:28:6e:29:ee:3a:d4:3d:d0:ad:77:46:b1:d5:91:00:
         99:08:7a:e3:68:8f:f2:04:28:86:55:fe:c4:93:60:af:76:e6:
         fd:39:6f:d8:09:63:bc:ae:31:23:7e:19:f4:c2:7c:32:60:d7:
         2d:73:53:96:f6:68:9b:c6:8f:9e:20:61:45:9f:02:c7:6d:96:
         5f:bf:e7:0e:63:66:e1:7b:90:91:eb:75:45:44:66:8f:41:ef:
         e2:1e:79:ac:d0:ec:aa:60:28:08:4d:e8:45:c0:8a:71:09:e5:
         8c:fe:c8:17:69:55:b5:1c:b4:7d:a3:ee:79:e3:d9:4c:ed:79:
         d9:bd:9d:5a:02:9f:07:c0:80:1e:fe:17:60:bc:1d:48:9d:a9:
         1c:24:6c:5d:e5:ed:20:54:cd:80:da:13:f1:85:72:ae:5f:00:
         c1:c9:ab:21:14:ba:d2:c2:1d:c2:d5:b4:f7:63:9f:67:24:af:
         9f:31:97:13:c9:5a:9c:7b:db:a0:e7:c5:8f:dc:90:09:f4:29:
         f2:cf:e6:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2ka2v/arsXpeVDtw/SCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYmQ3NjY4OGI4N2MwMzkxNGFlMmEyZTE0OTBjMmYxZTkx
NDE2NjEwHhcNMjYwNTEzMDEwMTIxWhcNMjYwNTE0MDEwMTIxWjAzMTEwLwYDVQQD
EygxOTE3OGMwOGJjNGVmODY0OGJhYzNmNDk4MjUwMzg4Y2NjYjM4OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SuyGRYtKENQk940RFcs6CSz5+1E
/OZYHrekz9azbC22uWCkmx3QBNtGNUn7N4lfv773Cepo1Awur2+qqh9NV3BragF/
iFqQZAJl8YObzrmWMGTXXhz8hZBpmB8e6oeT15Z/AG3/3HajaSL0dcYYbyjE96sG
12x17GC8KowhjWvpVnZcPaf0APQ/eH0ZszlahIGEoxpcNrCYdJG7yCUKFS9+v+da
oNcdroFyFovldMnqyLR2u4+zfpWnxs9hI46WQCg+Zy5NAwooxoCmTWjZ8I+I9QS0
Ps1RoDGRjo/f/ZN96TrG1BbVgJxpwex9NQAZ+FZY4qXRA6/5Z9QAMV59KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkXjAi8Tvhki6w/SYJQOIzMs4kdMB8GA1UdIwQY
MBaAFCy9dmiLh8A5FK4qLhSQwvHpFBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYt
ZTBmOTMwODA2YmRjLzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYtZTBmOTMwODA2YmRj
LzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkEGZJJ1
X7Eo3LVNCc2mVXQSFQ19jWod5eEFocqzcc7l8JACMa8mV4kagryOzW+p82JhRsRq
99ICKG4p7jrUPdCtd0ax1ZEAmQh642iP8gQohlX+xJNgr3bm/Tlv2AljvK4xI34Z
9MJ8MmDXLXNTlvZom8aPniBhRZ8Cx22WX7/nDmNm4XuQket1RURmj0Hv4h55rNDs
qmAoCE3oRcCKcQnljP7IF2lVtRy0faPueePZTO152b2dWgKfB8CAHv4XYLwdSJ2p
HCRsXeXtIFTNgNoT8YVyrl8AwcmrIRS60sIdwtW092OfZySvnzGXE8lanHvboOfF
j9yQCfQp8s/mnw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:48 2026 by rpki-client