Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          sG8jVAWd8Z6JxHDW/7ceJF+5+lmM0s0zk42WwXJCMCo=
Subject key identifier:   67:05:C5:A0:0F:96:03:B7:4F:B6:AD:6F:5B:6A:6D:26:D0:03:F5:F7
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       019A4D3D357735CBF8D2165AA5EA66DB948A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          0B37
Signing time:             Tue 04 Nov 2025 05:00:48 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:48 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:48 +0000
Files and hashes:         1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: cqLqjChuvYHJaPAekfpzT/oeP2wFfuN+/suMIAOnkGU=)
                          2: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (hash: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:35:77:35:cb:f8:d2:16:5a:a5:ea:66:db:94:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: Nov  4 05:00:48 2025 GMT
            Not After : Nov  5 05:00:48 2025 GMT
        Subject: CN=6705c5a00f9603b74fb6ad6f5b6a6d26d003f5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:ce:fa:ea:8a:8b:ef:ec:0d:97:83:92:cc:
                    26:c5:60:9e:42:27:e5:d1:16:3c:7b:6e:0d:1d:51:
                    aa:ac:b0:fa:2c:e5:df:53:3d:30:5f:14:e9:1f:a5:
                    ec:e8:ce:45:40:4c:8b:f2:28:a1:2a:0d:0e:cc:73:
                    ac:bc:96:f7:3a:ea:51:18:8e:bf:9a:a8:fb:db:54:
                    e9:85:4f:1e:fd:70:0e:1d:f0:18:09:bb:51:f1:1b:
                    4c:a9:91:13:fe:6c:cd:52:ed:61:e0:8f:a8:91:b8:
                    60:1e:05:24:1c:15:04:9c:96:a3:32:45:21:c2:81:
                    e8:b1:42:88:4d:98:ab:be:3d:75:45:88:c7:cf:7a:
                    61:8c:58:dd:30:2a:e2:ac:f9:98:11:b3:b8:fe:39:
                    4f:2d:c6:c6:55:71:a5:4c:50:8c:e7:ca:79:a5:19:
                    cb:21:e7:ad:a0:00:66:8e:fa:3b:6d:52:a1:ca:5a:
                    7b:d8:75:89:30:a5:ac:c0:82:8b:bd:0d:3a:8a:b9:
                    7e:44:d0:87:d2:38:e0:b0:ba:f5:16:f3:61:90:e0:
                    41:75:1d:5c:f0:e3:8d:d0:a9:da:ae:6e:f3:59:32:
                    e3:ff:40:00:42:2e:fc:c3:de:7a:0e:60:ad:ff:81:
                    25:5f:0b:00:c7:8a:21:57:81:6f:aa:d7:51:ad:53:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:C5:A0:0F:96:03:B7:4F:B6:AD:6F:5B:6A:6D:26:D0:03:F5:F7
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:b7:5b:a1:a9:2b:da:04:2d:cc:66:a8:1f:b5:0b:c9:32:
         3f:6b:de:84:18:e1:69:46:ab:69:40:61:d1:d2:4d:3e:8a:2e:
         f9:a8:b6:d0:54:55:9f:bb:fa:f0:fb:43:f1:d8:65:3a:0e:9d:
         1c:bc:af:81:6c:be:ab:36:ea:d8:84:a8:44:3a:9b:19:d3:a4:
         bf:74:6d:27:e9:a0:91:a1:e1:69:de:dc:81:f4:33:d2:fb:12:
         56:7b:61:3d:5d:a1:e5:c7:a1:d2:08:c1:f8:f8:d3:75:ef:2c:
         c8:fe:ce:a7:ce:b8:09:22:ca:fc:99:69:e6:c6:52:cc:58:d7:
         02:99:d1:22:68:65:62:16:c9:36:61:65:df:ef:6b:ae:f8:de:
         b3:c3:2f:3d:f0:12:e3:57:44:df:15:8c:fb:0a:a8:a5:4f:e5:
         f3:1f:a7:25:f5:0f:f8:14:e0:4c:03:5a:1e:8c:c2:6e:80:e5:
         26:d4:ab:8d:2b:a0:b7:bc:20:83:65:e8:55:bb:30:b9:17:f8:
         b2:98:b1:b0:9c:56:27:b0:51:1d:33:2b:f9:b9:67:cd:e3:37:
         22:0b:2b:96:91:f7:69:54:d9:de:e7:ee:15:a2:93:2b:56:c9:
         2e:07:5d:37:7f:15:79:bd:cc:7d:d0:2c:e1:79:e5:83:55:fb:
         71:cb:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:47 2025 by rpki-client