Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File:                     LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier:          c6CzdnfU/yF1U5mw09qQapH5pKMB6uOlzPEwHZ4LGkQ=
Subject key identifier:   33:4C:41:DB:81:6F:12:96:98:A8:02:BA:26:5B:92:19:B3:C7:23:FB
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer:       /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial:       019CADFE3FDC622F6CC44760AC413AA1FFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number:          14DB
Signing time:             Mon 02 Mar 2026 10:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:46 +0000
Files and hashes:         1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: dRc18eco/t6hQSzn4E0Lfli+IbG6d+cELVcCLJwSjPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:3f:dc:62:2f:6c:c4:47:60:ac:41:3a:a1:ff:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
        Validity
            Not Before: Mar  2 10:00:46 2026 GMT
            Not After : Mar  3 10:00:46 2026 GMT
        Subject: CN=334c41db816f129698a802ba265b9219b3c723fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:c0:14:51:20:99:47:c5:ca:27:c7:71:f6:
                    4f:70:17:ce:ab:55:cd:a1:43:4b:62:bf:4d:83:fe:
                    90:79:cc:62:11:f8:26:db:a7:b2:eb:53:b0:53:64:
                    f1:00:56:af:98:f6:1f:cb:dc:0a:25:5c:d1:04:cf:
                    a2:f6:f2:2d:91:c3:67:b9:9c:1d:fd:e7:36:12:c8:
                    7f:a8:ec:89:b8:40:c5:47:3f:df:bf:d7:83:5a:6e:
                    d3:44:bd:c1:1a:a8:00:70:00:25:e0:f8:2b:bf:65:
                    8f:1c:3c:5b:29:bb:ca:4f:59:c6:32:6d:1b:96:91:
                    47:8d:2a:ec:0d:30:f9:fe:e6:66:2a:36:b0:6d:a2:
                    67:08:33:ae:42:a1:61:91:a2:7c:bc:6d:7f:80:33:
                    e4:19:24:dd:35:cf:29:bd:eb:f2:e5:42:c2:56:fc:
                    bb:c3:d4:79:87:a9:6a:82:66:d0:75:2e:a7:b3:e6:
                    1e:4a:7f:28:13:06:18:94:47:b1:d2:56:bf:81:a0:
                    15:4a:c1:9d:a5:ca:11:44:c6:0b:a4:64:65:34:21:
                    a0:72:75:ec:dc:3b:04:7d:b5:fd:88:f3:27:89:f0:
                    6d:0f:e2:49:a1:e4:cd:3a:48:fb:96:54:c8:1a:ef:
                    3b:2d:f1:de:3c:12:a9:1c:09:6e:8b:35:d0:eb:9f:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:41:DB:81:6F:12:96:98:A8:02:BA:26:5B:92:19:B3:C7:23:FB
            X509v3 Authority Key Identifier:
                keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:5f:1a:49:64:8b:1f:1c:08:1d:29:d6:e7:3e:e5:b1:e1:
         0d:0e:07:36:e1:a9:8f:3c:ab:78:7a:96:ba:e0:c5:d6:5e:d1:
         77:f4:94:32:48:ba:66:91:97:60:7a:43:3a:12:47:eb:e3:a2:
         13:28:da:3a:5e:4d:61:74:ce:75:f5:84:46:da:cc:92:0d:c7:
         aa:6c:03:34:56:91:07:ed:26:e5:89:11:71:63:68:27:b4:72:
         de:34:23:d0:83:27:e0:6e:46:59:85:9b:53:aa:20:a3:45:a0:
         57:14:87:08:d4:2b:c6:ae:69:07:8d:3a:90:33:e1:ad:bf:74:
         1e:f0:d5:d9:42:3b:75:ce:5b:ed:c3:78:3a:16:ef:4e:76:57:
         f7:8d:bb:f2:50:74:08:14:3b:c1:4e:2a:e9:8d:f0:05:eb:ad:
         ca:53:72:c2:26:26:a9:ad:8e:e6:1c:44:ce:bc:94:71:91:d9:
         fb:c6:9b:da:8b:8a:50:96:96:fb:13:17:34:e7:e2:c2:7d:d7:
         ea:bd:35:8f:a2:bf:97:ec:a6:8c:18:18:60:1d:33:7d:77:80:
         32:8d:62:dc:9e:48:43:36:bc:d1:ce:77:ca:94:39:79:46:a6:
         12:8d:73:4f:ba:f1:fb:af:e4:6f:f9:ec:00:40:fc:2c:13:be:
         2e:a7:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:21 2026 by rpki-client