Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File:                     LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier:          mxwlgLOf6LKJQ7o08E0/wzz2C5/IfUUO+/dcXQCFelc=
Subject key identifier:   1B:B7:EE:71:4C:99:3F:7E:A0:51:5A:AD:7E:1F:EC:59:61:E6:0F:07
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer:       /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial:       019EBF23AAC92BE6F9948C351CAD6D127FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number:          0933
Signing time:             Sat 13 Jun 2026 04:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:46 +0000
Files and hashes:         1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
                          2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: Hn2eWI6X58wPHVljiPEsSdK/ahj+jQ1Nvj396PqmHX4=)
                          3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:aa:c9:2b:e6:f9:94:8c:35:1c:ad:6d:12:7f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
        Validity
            Not Before: Jun 13 04:00:46 2026 GMT
            Not After : Jun 14 04:00:46 2026 GMT
        Subject: CN=1bb7ee714c993f7ea0515aad7e1fec5961e60f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:45:57:6f:29:50:2b:12:73:b2:96:69:df:
                    ec:9f:30:86:14:8c:4d:7d:e4:ea:44:d5:a2:c8:57:
                    6e:a7:c5:3b:8a:ca:b2:7f:0c:57:3b:bc:6d:dc:f4:
                    99:a7:64:a7:f8:0c:3f:0e:44:8b:90:fb:7b:d7:f3:
                    9f:c1:37:d3:71:1d:3b:27:18:9c:8f:ee:d4:c3:a6:
                    73:00:cf:6e:53:28:33:69:9b:f3:e1:18:d5:c7:2b:
                    e9:96:9f:f3:5c:38:c6:d2:93:f2:c2:74:e7:eb:85:
                    36:7f:6a:e2:13:8a:c6:46:c1:4a:ad:c5:23:a3:73:
                    c3:c2:a3:0c:b2:05:29:02:43:42:5a:6d:c7:4f:f2:
                    fc:30:f6:55:da:e2:98:66:28:1d:7a:f2:24:b2:68:
                    45:dc:34:41:21:8f:c4:0f:65:5b:4d:f1:b6:42:f2:
                    79:6b:30:ed:73:b8:27:f9:ed:96:c5:59:c6:8b:4d:
                    15:bf:ac:82:86:28:99:04:f1:2d:1a:32:9e:79:26:
                    8d:1d:cf:6e:a3:54:28:2a:33:b0:53:35:7a:eb:56:
                    39:8b:24:59:46:df:a6:49:fe:ac:c6:a0:59:cd:b1:
                    37:2b:bb:af:2f:ef:9b:a3:76:ef:ba:c2:b7:d4:ec:
                    05:8a:e7:1f:1f:ee:59:b2:16:80:43:49:69:8c:d4:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:EE:71:4C:99:3F:7E:A0:51:5A:AD:7E:1F:EC:59:61:E6:0F:07
            X509v3 Authority Key Identifier:
                keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:2b:e2:df:a4:a5:41:ee:26:4a:11:33:56:ad:85:a2:33:
         2f:b5:32:26:35:27:49:df:c1:77:91:1d:a1:1e:a6:cc:bf:33:
         5f:30:95:40:64:73:69:d9:4a:c3:9b:51:19:93:50:d1:ee:70:
         bf:ad:11:86:1a:9d:0e:c6:d6:10:92:00:6a:ce:90:e6:f5:10:
         96:fd:66:7f:ec:ad:64:75:94:0a:6b:03:07:6c:01:ec:ec:8a:
         64:83:54:11:76:7c:d4:3f:79:07:f2:6e:1b:75:17:10:c7:d3:
         a1:9f:d0:4c:cd:4c:9d:b6:15:c9:97:f4:49:df:91:da:9d:6c:
         84:57:5c:a6:5c:31:e2:97:75:25:3e:91:b7:52:81:36:9c:ee:
         32:b6:c2:ca:78:9b:b4:6a:bd:0a:ff:a5:1c:da:e1:b5:31:8c:
         42:8b:cf:69:8c:63:41:59:66:13:30:9a:a1:90:03:9d:6b:11:
         4e:cd:bb:32:b1:80:6a:15:b2:48:5d:40:43:31:2d:f7:71:4a:
         62:5e:90:0a:97:6f:35:fe:47:a1:a8:30:f4:ad:41:61:ef:59:
         0e:b6:6b:59:4f:32:26:d5:a4:fe:1f:6b:66:0d:5d:3f:33:41:
         5b:b5:e7:ad:43:1e:e3:51:31:f4:eb:7a:e2:6a:7a:ff:c5:82:
         7e:6d:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:19 2026 by rpki-client