Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
File:                     LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json)
Hash identifier:          K8AycDF9AOlF5Q/mNHNzCvcdi8sG+PFS618VpFKrWJQ=
Subject key identifier:   F2:1F:BC:96:B2:07:92:6B:04:7C:AF:AD:BD:FA:54:3B:90:5A:76:32
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Certificate issuer:       /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial:       019D99997777504923485D8F894B8ECCFC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
Manifest number:          0FA8
Signing time:             Fri 17 Apr 2026 04:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:04 +0000
Files and hashes:         1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: 0bQpykyFQ4QZOht8HhVOB+7SgNUzh9FmaUdQD+6lr+o=)
                          2: hWYG6SA4jMjGfHFArO_-xfjzCA0.roa (hash: M5+XjEjzxKltQFP4I5ZzSuED19Ey6Fm4q51WKuVhoeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:77:77:50:49:23:48:5d:8f:89:4b:8e:cc:fc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
        Validity
            Not Before: Apr 17 04:01:04 2026 GMT
            Not After : Apr 18 04:01:04 2026 GMT
        Subject: CN=f21fbc96b207926b047cafadbdfa543b905a7632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:cc:f8:4b:64:20:81:b7:9f:a9:b1:a1:b8:
                    db:b5:17:44:07:65:63:85:e8:f3:96:1f:f6:4a:35:
                    fb:45:95:ab:bc:51:3c:20:62:2d:34:91:98:7b:79:
                    61:86:64:9b:55:38:a1:3d:4e:8d:8f:b3:c0:0c:ed:
                    d1:01:30:4f:64:fe:57:f4:df:18:e7:cc:a6:a0:64:
                    1b:2a:e9:ba:1e:e3:c9:d3:bf:5d:c9:e9:c3:d2:7f:
                    6c:b2:30:20:4c:d9:aa:e8:99:25:6a:83:24:30:21:
                    6a:40:04:b6:07:42:32:c8:26:38:47:06:f6:6c:30:
                    b2:09:e1:96:77:d8:44:70:0d:59:25:ba:03:04:78:
                    19:66:9b:f3:8f:41:d5:4c:6c:99:9f:13:56:50:0a:
                    f9:52:f5:46:23:c0:1a:a6:c8:60:ef:4d:0d:fc:65:
                    41:c4:2d:e5:82:9b:44:75:e1:de:5f:00:80:bf:78:
                    58:10:4d:bb:ba:1a:82:75:9a:cf:b5:5b:7e:ec:bc:
                    d3:9a:26:cb:a8:86:4f:4f:32:ec:82:18:96:36:f8:
                    01:29:20:6c:c3:15:c3:64:58:8d:7f:32:bc:20:65:
                    1d:64:e4:51:1a:77:91:89:46:aa:e6:91:b6:83:f1:
                    04:79:c3:a4:0e:23:f8:3d:94:b4:d1:f3:65:3c:51:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:BC:96:B2:07:92:6B:04:7C:AF:AD:BD:FA:54:3B:90:5A:76:32
            X509v3 Authority Key Identifier:
                keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a2:e1:12:1d:46:88:53:0e:b2:ed:bb:cc:7a:9f:b3:2d:94:
         82:0e:a9:0c:59:37:52:ef:2b:e7:b0:40:14:a5:13:b6:27:89:
         92:ca:b6:1d:23:d3:09:25:5e:90:c7:9b:75:19:84:a1:25:ea:
         45:10:82:80:12:ad:f9:08:c0:cf:66:d5:84:d5:3c:e4:59:af:
         ec:2a:39:8c:4c:b9:1f:1f:87:26:4f:fd:69:39:75:f5:81:0e:
         4f:7e:fa:63:96:c7:b4:ff:52:04:71:a0:98:a4:7e:13:26:fe:
         73:09:64:10:69:4b:d2:bf:27:e2:0d:f7:d2:6d:a6:41:20:8f:
         8c:0e:12:31:ca:cb:07:a2:54:5c:3d:a8:57:b8:ae:52:36:5b:
         17:9a:fc:c1:c1:a7:42:f7:d1:6b:dc:57:6b:f3:27:1a:58:51:
         e3:9c:bd:17:c7:6f:3c:d7:6c:a2:7f:fb:c3:f4:9e:9f:5f:2f:
         58:2a:91:cd:5b:a5:94:bf:10:32:95:b9:bb:36:e8:68:2f:7e:
         65:b4:75:e0:13:84:11:d9:4e:f4:51:2a:5e:28:8d:69:99:c1:
         20:4d:7f:9c:1a:fe:0b:7c:4a:de:c4:99:28:48:63:6d:fb:47:
         34:e0:71:ec:67:04:4c:df:57:49:1d:c2:ec:3c:cd:7c:a7:e0:
         3e:14:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:49 2026 by rpki-client