Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          tsA1Uc0Z64ylqMEYsUVlk7PxFEdQoA9ECT5Gsbgw5SM=
Subject key identifier:   D2:91:F1:C4:EA:55:E6:8B:A3:2C:B1:E6:FB:28:6E:3C:E7:22:B0:5A
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       01A1DF4CC0C6EABFE96BC2ABBE6C53EB9190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          0381
Signing time:             Sun 15 Nov 2026 13:01:51 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:51 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:51 +0000
Files and hashes:         1: 0opcnqgGubzmysjCmgsy1w2Z93A.roa (hash: /1gFN6Q5hSb3O2AyPzhVJtZmgB0j29PnyY1ChQtSMBw=)
                          2: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          3: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: +V4HFyRRYmS92HcX2MDSDyQCn8XGToVSvJmkct7NgFk=)
                          4: VPyEZw62iC49LD_5e5811s6wJGQ.roa (hash: xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=)
                          5: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (hash: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=)
                          6: v7qTs-P4kf96NQEVuIjiFlnfrkg.roa (hash: 06QnWdclxVJibPO9oaPeJlCjEUztsjOaTGtfwNdn2zw=)
                          7: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:c0:c6:ea:bf:e9:6b:c2:ab:be:6c:53:eb:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Nov 15 13:01:51 2026 GMT
            Not After : Nov 16 13:01:51 2026 GMT
        Subject: CN=d291f1c4ea55e68ba32cb1e6fb286e3ce722b05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:5a:22:80:8c:8e:a9:6e:34:04:fe:1d:9c:
                    d5:bb:6f:d0:cf:f7:0a:48:cb:a1:de:51:18:14:f3:
                    06:17:f1:c1:94:97:87:fb:be:31:2e:e9:d7:f2:e9:
                    40:df:17:79:aa:cd:fa:2b:59:2b:da:27:dc:d6:70:
                    b8:0f:d1:32:92:dd:74:33:a6:00:69:20:bf:84:88:
                    d2:d6:0a:60:a8:2e:af:3e:f2:b9:73:4c:dc:da:3e:
                    7b:45:f1:3e:23:e9:29:87:90:7e:1e:cf:b9:c1:b9:
                    c3:63:e0:14:54:9f:ef:d8:c3:99:bf:e9:e1:37:a1:
                    4b:d5:6d:c3:61:b2:6a:de:fe:f8:e1:19:3f:f0:da:
                    c7:1d:a6:fa:bd:a8:82:71:74:ee:73:ab:5c:a1:8f:
                    1c:7e:f4:f7:3b:d6:79:de:94:59:d7:72:53:a6:44:
                    41:86:e2:d2:6c:06:47:83:95:63:74:09:f1:c6:1e:
                    8c:f9:1b:c4:87:a2:96:89:e3:ab:a7:84:05:62:c3:
                    98:d7:a8:ab:32:24:2f:0f:ee:69:31:4d:dc:fb:06:
                    68:5c:e4:13:da:64:d4:9f:6d:84:7f:fa:16:71:f7:
                    b5:ab:15:a5:73:98:78:46:6d:90:10:37:8a:9a:1a:
                    bb:3b:62:46:22:93:ac:ae:59:b6:84:fb:57:b2:37:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:F1:C4:EA:55:E6:8B:A3:2C:B1:E6:FB:28:6E:3C:E7:22:B0:5A
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:2b:e4:76:b7:1d:ca:ac:04:94:cc:ba:da:a9:b2:21:6f:
         bb:4c:bf:ac:f0:79:6a:8a:cf:61:98:38:79:93:ac:31:11:0c:
         1e:e3:5a:0b:5e:82:a0:76:11:09:47:d2:90:6c:53:9b:54:f1:
         5b:ab:96:61:9f:75:3f:b8:37:cc:ab:3c:ac:bb:d8:f0:5f:a1:
         8b:a5:44:90:25:4a:61:c7:8a:04:fd:e1:c9:2e:40:11:7e:27:
         ff:87:b4:e1:04:e9:93:58:57:dc:34:e2:18:c8:6f:ed:f4:50:
         57:01:ea:9f:20:97:2f:e2:5b:d0:97:a5:61:bf:bf:51:21:88:
         e9:57:5c:e0:b3:eb:b3:40:95:07:be:d4:ae:e3:5a:7b:36:56:
         b9:6c:48:12:32:e5:bf:9e:b4:fe:80:b3:5c:91:44:bc:90:6b:
         ed:62:03:23:92:77:fd:fe:ac:ca:46:1b:7f:90:8c:71:13:f4:
         6f:5c:29:b2:9f:aa:5f:ab:a3:c6:93:87:bd:fc:fa:ed:07:59:
         3d:81:c1:56:5f:54:16:a2:7d:86:24:e9:8c:25:41:e0:30:fc:
         30:e5:90:c9:fc:62:24:32:e7:e4:f7:3a:45:d8:a6:2e:a6:b0:
         ce:ce:ef:70:bd:61:97:cd:35:db:9b:2b:7c:4e:be:42:43:a0:
         b5:6d:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:18 2026 by rpki-client