Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File:                     llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier:          Q4VARezwz3gd1HS8DjXImop1/h/k04pTPNY26eeXqWw=
Subject key identifier:   89:0E:65:1B:95:77:69:8E:50:E6:61:35:70:1E:87:DA:8A:8E:FA:8D
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer:       /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial:       01A108137C815E06F37915E4CFCC5AB32308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number:          11EE
Signing time:             Sun 04 Oct 2026 18:00:57 +0000
Manifest this update:     Sun 04 Oct 2026 18:00:57 +0000
Manifest next update:     Mon 05 Oct 2026 18:00:57 +0000
Files and hashes:         1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: D8TbwA7rV2mtDqcabtX/A8X5uq4xVnw7cvbnTmhr6Cg=)
                          2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:13:7c:81:5e:06:f3:79:15:e4:cf:cc:5a:b3:23:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
        Validity
            Not Before: Oct  4 18:00:57 2026 GMT
            Not After : Oct  5 18:00:57 2026 GMT
        Subject: CN=890e651b9577698e50e66135701e87da8a8efa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:cf:87:9f:84:2a:c4:7d:fa:9a:82:d7:fa:
                    df:8e:7e:53:f4:68:6e:c9:cd:35:f7:ed:3c:8e:e3:
                    85:16:09:0a:15:7b:34:88:80:cd:d3:d2:ed:04:0b:
                    20:fc:68:11:c5:70:dc:df:60:63:88:3f:2c:52:ce:
                    89:85:6b:db:98:07:3c:8b:01:da:d8:22:70:62:06:
                    81:8d:6f:08:5a:9e:9f:60:72:33:28:e8:7d:ca:02:
                    b5:d0:d8:4f:9c:dd:6f:81:e5:d0:fd:07:d3:f8:44:
                    53:e2:a7:05:e0:13:9c:ca:e6:23:92:b1:cf:ef:9d:
                    0d:a2:8f:23:f3:bb:e6:a2:24:21:54:b9:5f:0a:0d:
                    62:52:01:3d:19:65:00:8c:75:23:c7:a0:2c:f9:e4:
                    28:94:ca:6a:fe:ff:1c:07:82:cc:34:ba:21:8c:0c:
                    2f:f8:c5:8c:fb:05:df:3e:87:11:74:47:08:57:85:
                    fb:2c:3e:7a:d7:dc:ce:78:64:2f:c0:b3:53:6a:36:
                    ca:c8:a4:85:f7:8d:0b:8a:1f:9d:25:8b:ca:60:9d:
                    4d:13:46:4c:9d:b0:d0:ed:39:e5:83:65:0a:0c:29:
                    2d:79:80:7c:68:ad:aa:69:e4:9f:0b:69:be:80:92:
                    1c:af:b8:11:17:bb:03:94:4c:d5:79:5d:f8:78:2d:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0E:65:1B:95:77:69:8E:50:E6:61:35:70:1E:87:DA:8A:8E:FA:8D
            X509v3 Authority Key Identifier:
                keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:c1:2d:87:f0:90:65:85:35:0e:8b:f0:d4:e9:7c:14:56:
         81:49:29:c8:ac:02:87:1f:38:40:eb:3d:f7:a3:29:7e:53:78:
         b3:0c:b5:94:a0:3a:57:dc:7c:18:be:77:8c:0d:c9:08:54:0a:
         55:f6:c3:ee:29:19:8a:aa:92:cd:b5:13:da:da:b0:dd:f5:6c:
         8e:36:18:4d:d6:51:fa:39:f3:64:27:4e:e6:46:1b:f4:47:8e:
         0a:ea:f3:ae:e2:82:69:d7:96:03:47:5c:86:fc:b6:b5:38:af:
         4d:28:5d:da:6a:3e:1f:ba:a2:b6:1c:e4:d8:5c:d2:f8:ea:91:
         95:6b:2e:b9:11:51:b4:20:37:ef:94:f1:80:cf:3a:68:e7:59:
         69:7c:c0:07:ee:d6:b3:7b:60:1e:ac:96:6f:e3:1e:59:a7:08:
         26:62:fd:7f:a3:dc:fe:54:48:45:be:62:bf:09:56:d8:24:ca:
         38:8d:80:de:43:06:5a:2d:33:44:b1:66:0e:51:a1:1c:b7:fc:
         8b:67:31:57:88:47:b2:95:e8:62:a0:3a:bb:b4:23:da:e8:32:
         72:cc:68:ff:f1:65:33:b0:90:32:72:b6:c7:07:8d:f3:f6:e7:
         f8:ae:4c:8d:f6:68:b6:3f:00:51:c3:4e:bc:13:c1:9a:5b:9c:
         4b:2f:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:58:48 2026 by rpki-client