Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          pg7mS/EHY2NV+uEuI2C+pGgRkuDAVg+VCjPAKjssuQU=
Subject key identifier:   E5:84:BA:FF:9B:74:62:9C:B8:20:F7:0D:27:47:56:40:B3:8F:BD:43
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       019EC3DC1A4BC9BBF50DA2E3CBD6B7711D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          0D87
Signing time:             Sun 14 Jun 2026 02:00:42 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:42 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:42 +0000
Files and hashes:         1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: oTGBotTZ9QywT+IT0aUYDZV4lFeYtOK0EgCO90XIsJE=)
                          2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:1a:4b:c9:bb:f5:0d:a2:e3:cb:d6:b7:71:1d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: Jun 14 02:00:42 2026 GMT
            Not After : Jun 15 02:00:42 2026 GMT
        Subject: CN=e584baff9b74629cb820f70d27475640b38fbd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:ce:ff:bd:5b:1d:21:49:c9:49:95:88:eb:
                    3c:91:95:e2:b6:1d:35:c6:2c:8d:67:f4:38:c2:cc:
                    8d:0c:55:9e:f8:b4:9f:ac:f6:4d:2f:24:31:c3:87:
                    93:9d:b5:20:40:94:1d:5c:08:cd:10:37:eb:c8:f1:
                    ed:91:26:f5:d1:6c:dd:86:82:d9:7c:68:4f:c0:d7:
                    02:f7:2c:ae:c1:7b:ec:f2:28:aa:6c:d1:8a:2c:5a:
                    7f:b7:5f:59:33:c7:16:ec:07:86:a1:74:07:b6:9a:
                    1d:0e:5a:23:58:9a:6a:75:cb:b8:a7:ab:b7:05:bc:
                    bc:4f:63:a9:e2:42:48:b5:2a:bf:42:f5:29:bc:f3:
                    08:ea:71:c4:98:61:7a:ab:3a:ab:db:e6:df:c7:f8:
                    de:5d:ec:14:a9:e1:ea:c8:f8:18:ef:34:45:73:a5:
                    c4:4a:3c:c2:e5:70:44:ec:7b:4b:23:d2:1c:83:d3:
                    5b:db:c0:f0:86:66:94:f4:39:01:e3:9b:28:37:23:
                    78:0f:4f:38:5a:1c:00:11:d2:50:dd:4b:0b:92:b1:
                    6c:77:cb:01:b9:ec:a9:e6:d3:35:94:54:8e:78:a0:
                    70:a4:2b:37:01:bc:7b:71:87:ae:9d:50:65:e1:85:
                    15:b4:b7:37:ed:e8:67:53:5e:26:2b:f4:c4:b2:dc:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:84:BA:FF:9B:74:62:9C:B8:20:F7:0D:27:47:56:40:B3:8F:BD:43
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5a:e5:3b:31:29:b3:46:e1:1f:5f:40:8f:67:9c:ac:5f:4c:
         2e:aa:dc:d8:4d:48:c2:d4:9e:3b:de:e7:c4:9f:89:14:be:e1:
         e4:b6:75:99:7e:f1:2e:f1:e1:5b:e2:33:38:f6:bc:99:01:ca:
         81:28:77:2d:aa:e4:f2:fc:53:2a:59:b6:0f:ed:63:32:69:b6:
         8d:90:bb:1d:40:24:5b:29:f2:36:49:7e:78:80:3c:ed:f6:56:
         f4:05:99:45:ff:25:04:77:82:db:70:f2:83:1c:56:eb:86:d4:
         88:94:79:64:92:a8:6a:26:d8:f9:5e:a9:9b:0b:0e:c7:e2:f0:
         7c:27:d0:78:c1:c2:86:7c:53:ac:56:ce:a7:d4:6e:79:c0:9a:
         6e:b4:d1:13:63:9c:d3:c9:99:2a:e6:5d:fb:63:de:90:38:80:
         da:20:1d:38:e8:0b:fe:fb:90:9e:d7:ae:f0:d9:c5:8e:f4:b6:
         71:e4:df:c6:fa:3a:8c:52:59:2c:1d:b7:97:ff:fa:bb:ca:72:
         33:99:8a:a4:a4:8e:93:0f:cf:fe:61:5a:83:61:95:3f:60:ee:
         c6:76:62:9c:b4:5f:85:be:02:98:f5:34:a1:71:71:16:72:b5:
         77:d8:90:e6:5c:04:c2:6a:fe:80:71:3d:59:17:6f:20:32:4d:
         92:5a:17:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3BpLybv1DaLjy9a3cR0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjQyOTFkZjk3OTYzYzVhOWI3MzJiMTM5NmYwZjFjODg3
NTA0ZDYwHhcNMjYwNjE0MDIwMDQyWhcNMjYwNjE1MDIwMDQyWjAzMTEwLwYDVQQD
EyhlNTg0YmFmZjliNzQ2MjljYjgyMGY3MGQyNzQ3NTY0MGIzOGZiZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF3O/71bHSFJyUmViOs8kZXith01
xiyNZ/Q4wsyNDFWe+LSfrPZNLyQxw4eTnbUgQJQdXAjNEDfryPHtkSb10WzdhoLZ
fGhPwNcC9yyuwXvs8iiqbNGKLFp/t19ZM8cW7AeGoXQHtpodDlojWJpqdcu4p6u3
Bby8T2Op4kJItSq/QvUpvPMI6nHEmGF6qzqr2+bfx/jeXewUqeHqyPgY7zRFc6XE
SjzC5XBE7HtLI9Icg9Nb28DwhmaU9DkB45soNyN4D084WhwAEdJQ3UsLkrFsd8sB
ueyp5tM1lFSOeKBwpCs3Abx7cYeunVBl4YUVtLc37ehnU14mK/TEstyGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWEuv+bdGKcuCD3DSdHVkCzj71DMB8GA1UdIwQY
MBaAFCy0KR35eWPFqbcysTlvDxyIdQTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQt
YWY0YzA2ZjMxYWZmLzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQtYWY0YzA2ZjMxYWZm
LzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFrlOzEp
s0bhH19Aj2ecrF9MLqrc2E1IwtSeO97nxJ+JFL7h5LZ1mX7xLvHhW+IzOPa8mQHK
gSh3Lark8vxTKlm2D+1jMmm2jZC7HUAkWynyNkl+eIA87fZW9AWZRf8lBHeC23Dy
gxxW64bUiJR5ZJKoaibY+V6pmwsOx+LwfCfQeMHChnxTrFbOp9RuecCabrTRE2Oc
08mZKuZd+2PekDiA2iAdOOgL/vuQnteu8NnFjvS2ceTfxvo6jFJZLB23l//6u8py
M5mKpKSOkw/P/mFag2GVP2DuxnZinLRfhb4CmPU0oXFxFnK1d9iQ5lwEwmr+gHE9
WRdvIDJNkloX3g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:23 2026 by rpki-client