Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          3L1kX3CY2DqCMkQimnMyHRX9j5CJThAykSZ9Ly3f10w=
Subject key identifier:   15:0B:59:66:15:01:5E:E3:05:A5:90:5A:24:12:7E:BA:E3:54:18:B6
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       019CAAFD7479AC2FAC1CE070A862180502B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          0C71
Signing time:             Sun 01 Mar 2026 20:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:03 +0000
Files and hashes:         1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: 8trjAvvqO++7MvlKKUQsiRqhBISAzyhTOOdvcp1GkgY=)
                          2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:74:79:ac:2f:ac:1c:e0:70:a8:62:18:05:02:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: Mar  1 20:01:03 2026 GMT
            Not After : Mar  2 20:01:03 2026 GMT
        Subject: CN=150b596615015ee305a5905a24127ebae35418b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:1b:b7:78:f5:7b:a9:9d:77:fd:8d:a5:c1:
                    c9:2c:58:37:68:b1:05:42:c0:62:aa:9c:87:08:96:
                    c6:fe:14:37:eb:77:88:2f:aa:5b:3f:f1:f8:25:3d:
                    8b:46:a8:64:8e:f2:30:3a:57:57:28:a0:d1:cb:7f:
                    67:9e:8a:d0:80:f9:fa:18:e6:81:64:31:fa:7d:f6:
                    d7:0e:b7:70:4f:5f:02:f2:1c:8b:26:05:eb:2f:6e:
                    b7:90:b0:35:c9:03:d4:83:45:51:29:cc:9a:80:ce:
                    6e:b3:ac:3e:a6:94:41:c5:70:d9:c5:88:0f:d2:0b:
                    d9:7f:f3:af:a6:9e:6b:f4:5c:ee:9e:93:e4:e6:bb:
                    ff:b5:a8:46:b1:44:aa:9b:fb:3b:07:6a:43:23:d1:
                    b5:ed:72:a6:18:cd:78:c2:58:6d:1c:7a:b1:27:1a:
                    2f:ba:ef:62:d6:a7:cc:ab:b5:75:19:8f:0f:3a:57:
                    7d:17:93:71:8b:55:9f:bd:31:3d:ee:fb:a1:b8:df:
                    ae:a4:81:7d:77:97:c1:c5:0e:d7:52:c7:67:e8:a7:
                    9c:4a:f6:23:ae:0d:f6:ca:01:32:4a:01:4c:14:d1:
                    ab:75:a1:74:61:da:4c:3d:be:ff:e4:26:45:ad:0c:
                    c1:88:0c:6e:2f:2c:ca:f6:81:7b:16:2d:57:8e:fa:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:59:66:15:01:5E:E3:05:A5:90:5A:24:12:7E:BA:E3:54:18:B6
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:68:63:5d:33:bb:16:59:b2:c3:cd:5b:2e:a9:89:ab:ad:
         50:5f:51:e8:06:a5:08:55:6c:14:3f:8e:9a:5b:6e:b5:50:12:
         04:aa:f5:51:42:47:7c:14:e4:22:05:39:72:3d:83:d4:4b:a4:
         bd:9a:fc:60:ca:b2:24:01:20:8d:63:37:5c:9a:99:7d:7b:bb:
         d1:2b:b5:d2:a2:f7:d3:a3:85:40:37:35:61:89:ae:55:ed:59:
         67:7b:f1:81:87:69:ed:81:cb:96:47:8e:7d:b4:82:0b:78:5f:
         92:f7:bf:87:54:c8:88:19:7c:19:d5:8e:27:90:fa:14:d6:7e:
         27:18:c7:46:89:0d:cd:c0:f8:54:c1:27:ac:19:8b:44:eb:46:
         5c:7f:fe:2e:a4:c9:6b:f1:ed:6c:bf:54:5a:00:ec:d5:92:5a:
         97:88:a0:cc:03:d6:7d:22:fe:80:79:07:f5:1c:f1:df:07:ba:
         9e:3a:a5:a9:3b:e9:c1:70:c8:c8:92:a4:41:6d:80:be:be:09:
         3c:9b:06:9a:13:1c:1a:aa:39:74:2d:34:1f:c6:bf:1a:3c:64:
         ff:d0:b3:98:4d:80:57:34:b8:06:69:a8:0f:34:26:f9:96:25:
         fa:19:30:35:04:f8:f2:df:75:ec:2a:e6:73:98:e4:71:ad:5a:
         e4:18:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:07 2026 by rpki-client