Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          sPQkYt52MRTre5V9YNNrn8gJM0AXfrKSm+9bkRT0y8M=
Subject key identifier:   E6:0E:9D:82:26:11:CD:47:15:F1:EA:58:20:DD:B5:84:A0:FD:58:5F
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       019ED319379675C8CA04AAACD4123A0146A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          01ED
Signing time:             Wed 17 Jun 2026 01:01:45 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:45 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:45 +0000
Files and hashes:         1: 0opcnqgGubzmysjCmgsy1w2Z93A.roa (hash: /1gFN6Q5hSb3O2AyPzhVJtZmgB0j29PnyY1ChQtSMBw=)
                          2: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          3: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: qLHgkN5QNEne85fqB5t+zzj1U6z5rAH0O/5kLOc7H08=)
                          4: VPyEZw62iC49LD_5e5811s6wJGQ.roa (hash: xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=)
                          5: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (hash: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=)
                          6: v7qTs-P4kf96NQEVuIjiFlnfrkg.roa (hash: 06QnWdclxVJibPO9oaPeJlCjEUztsjOaTGtfwNdn2zw=)
                          7: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:19:37:96:75:c8:ca:04:aa:ac:d4:12:3a:01:46:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Jun 17 01:01:45 2026 GMT
            Not After : Jun 18 01:01:45 2026 GMT
        Subject: CN=e60e9d822611cd4715f1ea5820ddb584a0fd585f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:c5:34:0c:c5:ba:11:b2:db:71:96:92:e9:
                    08:e9:66:68:85:63:78:eb:7d:a4:5a:38:9c:70:18:
                    58:b7:3d:3e:91:61:13:91:4a:44:57:0e:48:51:bd:
                    45:ce:d0:44:bf:31:27:3c:67:fb:92:7c:f5:a1:e7:
                    45:0f:7b:8c:3a:22:c9:c6:ce:b5:02:49:b1:a9:6a:
                    f0:fc:09:f3:a1:e0:d4:f8:66:3c:cb:c2:53:c3:d7:
                    e5:a1:dd:97:59:0f:ab:d8:48:ef:ab:99:29:37:1c:
                    79:73:39:45:65:6a:2d:26:3e:4f:2c:e4:15:e2:80:
                    9c:20:60:db:db:8d:79:1d:13:ba:16:38:1a:e0:45:
                    1f:ab:a0:fc:18:c8:1f:75:dd:b6:34:0c:a5:7e:a0:
                    2b:2b:85:b5:eb:f2:a4:0c:f0:fd:75:40:32:0d:92:
                    a9:ad:c4:82:b1:17:94:9a:71:35:cd:cf:7d:71:9e:
                    1d:7d:ad:cc:b4:14:f1:0b:81:ff:f4:45:1d:49:db:
                    17:2c:2e:87:10:4d:71:cb:16:59:89:cb:41:86:75:
                    23:e1:83:94:96:a9:64:fc:25:de:cb:23:c4:2d:07:
                    68:63:67:ab:9e:81:34:4c:e5:e3:10:39:62:a2:38:
                    43:ba:55:74:38:c8:2b:1b:00:2a:93:c2:e1:b1:51:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:9D:82:26:11:CD:47:15:F1:EA:58:20:DD:B5:84:A0:FD:58:5F
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:94:ce:9d:03:c0:ec:e2:35:2a:9d:b3:0c:f0:c4:7c:87:65:
         62:94:74:38:81:f2:39:bd:c4:99:51:bd:42:8d:0c:66:b5:8d:
         70:fd:c8:d8:3e:d1:d5:e0:91:f1:19:84:13:e0:8e:a6:bf:c6:
         5d:d0:df:0a:fc:62:a5:48:1c:b1:2a:48:8a:d9:94:21:be:ed:
         8c:f6:0f:d9:f3:f6:27:0b:23:a4:b2:d2:60:fb:f8:54:11:d2:
         f9:9c:0a:2d:ff:7d:b7:18:4e:5f:90:d3:d3:ba:bf:57:5a:7d:
         bd:62:02:16:83:32:ba:06:8f:5a:d8:63:ef:b1:46:93:be:63:
         f0:a5:13:44:30:b6:09:08:f7:fb:23:c8:c0:b9:16:1c:cc:bd:
         94:f9:76:8a:bf:67:7a:12:9c:3a:8d:3f:b7:30:7d:a0:03:a8:
         8f:9d:13:a6:cf:79:a0:cd:f2:ac:04:b5:52:d4:b4:b5:17:23:
         19:9d:e7:10:31:81:5c:b6:98:ff:cf:44:9c:cf:5e:ac:46:97:
         60:25:f1:44:96:aa:c6:d3:32:61:b9:e8:8b:a8:ab:8a:a7:e9:
         bd:2b:69:67:b8:93:4b:dd:4f:3f:8f:18:9b:ac:01:0b:88:82:
         b7:36:31:b9:b1:6a:d0:a8:ab:a2:4c:66:62:e4:85:88:82:f4:
         54:99:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:18:54 2026 by rpki-client