Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          I+JjyU3ULq8nJS4B9jckwsTX+rfNFmAsiAGL72K0RlA=
Subject key identifier:   99:FD:E9:B6:B9:F6:4F:0F:38:95:AD:75:9A:83:62:E8:A6:AA:15:40
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       019CAE35694A24706C26869FCF0A6A132658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          CE
Signing time:             Mon 02 Mar 2026 11:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:01 +0000
Files and hashes:         1: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          2: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: h5LmQyQ0LEkhX0PgWcZutXaLSFKfEVeSPRbDqgiQOkw=)
                          3: P_7nMxZMM7y4KXX_mCBDZ7js_QI.roa (hash: iGjx0O2mQCwsWD5wHQrIoNmlbRTh0061OVc3dbeJuto=)
                          4: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:69:4a:24:70:6c:26:86:9f:cf:0a:6a:13:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Mar  2 11:01:01 2026 GMT
            Not After : Mar  3 11:01:01 2026 GMT
        Subject: CN=99fde9b6b9f64f0f3895ad759a8362e8a6aa1540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:c1:27:9a:dc:83:dc:06:e7:2f:9a:8b:ee:
                    73:96:db:94:4f:db:25:30:22:12:e7:c7:6a:19:37:
                    67:4a:bc:5e:34:82:5e:e7:09:9e:1b:f5:ab:7f:a9:
                    1f:1e:9b:7e:a2:b3:0c:84:47:74:5c:2a:5c:ae:8a:
                    89:fe:64:41:19:9c:39:9d:d2:e5:21:81:5d:07:cc:
                    8f:f5:2e:94:4e:e3:26:72:2f:d4:6c:60:65:4b:45:
                    c2:3c:b3:47:d6:35:11:7c:6b:fc:71:03:ac:47:76:
                    2b:a2:c6:22:83:b8:48:8b:d4:cd:5a:28:ab:1a:e6:
                    08:8c:34:6d:1c:a3:f2:81:b0:16:7c:ec:a2:0a:b8:
                    4c:56:50:67:f3:ce:46:29:60:96:ec:1b:be:7e:94:
                    61:3e:76:cb:ec:20:d4:a8:38:b1:cf:a0:32:26:fc:
                    25:56:b5:01:5a:0e:eb:97:71:13:a8:91:59:79:86:
                    88:cd:1d:4b:ff:91:ae:06:12:e2:ac:97:4d:8a:ba:
                    1f:1f:e8:c5:9a:c5:4a:92:43:9c:3a:05:e8:cb:b1:
                    36:08:9c:0d:31:d5:62:85:f9:b2:ad:aa:8e:ba:79:
                    0b:3a:34:12:ea:23:95:97:a9:1e:0d:c3:9c:82:66:
                    85:ee:8e:78:10:bf:48:e3:be:25:67:96:ce:24:c5:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FD:E9:B6:B9:F6:4F:0F:38:95:AD:75:9A:83:62:E8:A6:AA:15:40
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:a2:1d:13:34:c5:6d:cb:cc:36:d7:c3:aa:c8:11:af:22:
         3c:d7:69:1a:f8:06:88:99:00:fc:4b:4e:2f:87:a2:fe:fa:de:
         33:ea:fd:a8:53:62:30:50:34:ed:1e:e5:3c:be:46:c7:6d:a5:
         3f:61:06:40:59:36:0e:ed:72:20:f3:68:3b:3c:ee:87:3a:11:
         be:cb:e8:c0:f9:4f:2d:68:18:ed:48:ad:8f:f1:92:e9:38:dd:
         ac:30:e8:51:d7:7d:fb:00:6d:98:6e:6e:8a:45:20:ab:ad:53:
         e6:82:8a:b4:d7:0b:3f:d9:a8:a9:96:03:bf:a8:50:c4:10:78:
         32:4a:03:c4:42:8a:9d:66:05:a8:a0:cd:d4:55:0a:67:e2:d4:
         67:aa:10:fb:00:4e:87:1d:68:f7:a0:9b:33:93:b1:bc:dd:10:
         de:04:c1:5f:28:c9:c6:9f:81:02:25:6a:ae:f3:c4:6d:70:09:
         c5:de:b0:9b:6e:a7:37:f8:48:bd:a8:20:c4:f6:91:43:ca:22:
         a9:4c:c8:35:26:4e:2d:90:5d:37:c1:09:e9:93:32:ca:49:29:
         0c:f5:d8:ba:be:58:af:28:2f:9d:fb:c4:08:ef:86:6f:cc:a6:
         79:3b:9a:83:37:bc:08:87:df:02:eb:db:ef:1f:b3:b9:f3:ed:
         ec:65:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:22 2026 by rpki-client