Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
File:                     LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json)
Hash identifier:          /k56L9IwhSRaCPcmPuWhvZSNLViHk3NmeFpKSHqMSi4=
Subject key identifier:   97:E1:E6:49:5E:53:BA:BB:3A:34:B8:0C:1E:5C:51:64:52:19:40:FB
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Certificate issuer:       /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial:       019DCDBDEAF673AB2F6A6A6A413530F22D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
Manifest number:          0FC3
Signing time:             Mon 27 Apr 2026 07:01:08 +0000
Manifest this update:     Mon 27 Apr 2026 07:01:08 +0000
Manifest next update:     Tue 28 Apr 2026 07:01:08 +0000
Files and hashes:         1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: Zi2U2kBvhyG8RZSXFWlJBEmzKxBkldj5kic+oeyAuic=)
                          2: hWYG6SA4jMjGfHFArO_-xfjzCA0.roa (hash: M5+XjEjzxKltQFP4I5ZzSuED19Ey6Fm4q51WKuVhoeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:bd:ea:f6:73:ab:2f:6a:6a:6a:41:35:30:f2:2d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
        Validity
            Not Before: Apr 27 07:01:08 2026 GMT
            Not After : Apr 28 07:01:08 2026 GMT
        Subject: CN=97e1e6495e53babb3a34b80c1e5c5164521940fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:ba:8e:b7:f9:74:b9:cd:18:99:b5:a0:7e:
                    06:38:14:7c:5f:ad:f5:7b:67:44:d3:93:a4:48:60:
                    5e:af:04:44:99:2a:2e:4b:74:ca:21:9d:5d:45:c7:
                    97:f8:2a:e8:a8:45:18:5e:0d:82:ed:0c:51:fa:45:
                    7a:4f:52:b0:f2:a4:74:4a:05:98:ba:20:e5:a9:56:
                    ee:43:3d:ed:da:a1:53:4e:bc:86:38:d6:ad:17:8c:
                    81:a4:1f:d9:1a:6d:65:b3:cf:1c:75:fb:94:04:98:
                    9e:f0:88:fd:8a:27:1d:a4:7e:e7:33:c7:45:2e:f1:
                    23:c2:2e:f7:73:71:04:42:62:06:31:36:5b:87:71:
                    b9:9e:64:a3:b8:38:4c:2e:2d:f5:e3:2c:e2:d2:38:
                    1c:e1:75:a1:95:33:b4:3b:d7:fa:ab:4f:18:7e:7b:
                    d5:10:9f:6d:24:75:61:b1:6f:49:7b:1c:de:19:1f:
                    d3:fb:23:38:36:9d:92:d5:72:ec:ef:2a:07:9c:50:
                    68:71:b5:3f:6c:66:28:e1:76:a6:50:71:93:60:00:
                    0d:9c:40:fb:5c:29:ab:7b:4b:44:52:3f:c1:c0:6a:
                    39:86:15:63:ab:1f:bf:e9:47:f0:34:3b:e0:bc:c7:
                    1a:47:18:a3:bc:04:da:cf:52:7a:2f:c6:b3:d5:96:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E1:E6:49:5E:53:BA:BB:3A:34:B8:0C:1E:5C:51:64:52:19:40:FB
            X509v3 Authority Key Identifier:
                keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:60:9c:5a:d2:ae:68:a9:34:ad:b3:d5:5b:d2:aa:a7:20:c1:
         05:47:bb:b8:05:e4:bc:a4:3b:6c:57:1e:b7:19:0a:0e:ff:d7:
         71:3a:0b:6f:c7:99:09:6f:97:f0:d9:2d:ae:5f:94:f2:6a:5d:
         8a:d7:76:09:dc:45:df:15:5d:17:5f:06:4d:4f:6b:eb:92:e8:
         e1:0e:b6:6b:21:64:f2:b0:a8:f0:22:ef:8c:19:06:7b:16:93:
         97:72:ca:74:c0:f1:fa:ed:55:14:1c:f5:d1:fd:de:18:cf:16:
         72:a1:d2:9f:36:6c:b6:93:f9:8b:de:8c:92:ef:ad:25:c5:52:
         07:79:05:34:d2:69:d7:ed:ad:fe:1f:1c:03:7e:63:34:a2:67:
         69:df:54:93:39:99:53:09:8d:f3:a4:d4:0c:41:35:77:27:a0:
         b0:d9:cd:ef:d7:aa:c2:30:18:45:8d:be:61:23:72:1f:75:d7:
         dd:1b:2f:12:90:24:26:89:05:58:41:b4:1a:97:03:aa:8f:fe:
         63:e9:a5:58:c3:7e:6a:b4:51:4a:de:5d:e5:c4:98:20:76:9a:
         fa:98:37:c0:34:37:9a:31:2e:c6:09:a9:6a:17:90:ae:a7:c4:
         1e:70:6e:8c:fd:27:1e:38:df:9c:a7:d0:c7:8d:d2:46:fa:3c:
         5b:61:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:49 2026 by rpki-client