Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File:                     llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier:          1LU3JXc4opiv73DIXQAW7Qb3xg0qiy8jjzJ6dMtN47w=
Subject key identifier:   AD:9D:69:A3:15:2C:00:06:A4:99:7F:9D:BF:2E:AE:DA:99:13:5B:7C
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer:       /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial:       019CE3DA10AF12386F4F954CA51CB47809DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number:          0FC9
Signing time:             Thu 12 Mar 2026 21:00:44 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:44 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:44 +0000
Files and hashes:         1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: TpaWTG76Elc1N/hIKwCqZWGyvJTldg9jwklL1wv+mEs=)
                          2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:10:af:12:38:6f:4f:95:4c:a5:1c:b4:78:09:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
        Validity
            Not Before: Mar 12 21:00:44 2026 GMT
            Not After : Mar 13 21:00:44 2026 GMT
        Subject: CN=ad9d69a3152c0006a4997f9dbf2eaeda99135b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:30:81:46:81:39:ce:20:44:8c:45:24:14:
                    88:e1:e6:ee:3d:69:2f:d7:ac:a3:94:77:8e:7a:f7:
                    6b:1d:c9:e2:2c:d2:ba:35:6b:8d:36:e8:56:b8:47:
                    26:fb:9e:29:1b:51:7a:78:b9:b7:5e:64:bc:39:84:
                    e7:3b:27:50:5f:9f:3d:d7:d2:50:4d:50:d9:ed:45:
                    34:4c:5f:a3:2e:d3:b2:dc:65:d7:d0:e5:24:be:29:
                    cb:09:e5:36:73:8d:27:39:27:2d:23:43:36:1c:f7:
                    3b:02:9b:11:6e:a8:f0:4c:43:61:51:a4:86:c0:30:
                    32:68:4e:78:77:a5:c9:0d:c6:33:5f:c6:5b:44:fa:
                    eb:ed:3b:17:39:2d:42:7a:86:e7:1a:bc:59:64:10:
                    59:47:df:39:fd:ba:93:60:fe:00:9a:f4:7b:15:f9:
                    80:19:22:cb:fc:88:6c:8b:ab:da:c9:69:e5:3f:4b:
                    5c:b3:20:27:8b:80:d3:0c:47:74:ca:05:ce:18:de:
                    e8:a3:57:e7:5f:64:ea:cc:c7:55:b9:93:f7:0c:e0:
                    73:a2:2c:ba:28:ff:3b:d9:8b:5b:20:db:30:34:93:
                    d8:50:38:7a:28:58:9c:96:3c:84:df:3d:1c:a5:2b:
                    a7:9f:07:0b:2e:61:e3:20:96:51:aa:0f:49:3b:2d:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9D:69:A3:15:2C:00:06:A4:99:7F:9D:BF:2E:AE:DA:99:13:5B:7C
            X509v3 Authority Key Identifier:
                keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:71:fe:ea:0d:d3:ad:93:48:74:31:0a:9a:5b:cc:2c:1c:
         a0:d8:27:34:49:d3:d2:56:83:5f:97:2c:48:d5:d8:33:15:57:
         62:47:10:6d:84:6a:f9:fe:7e:57:67:0d:e3:f5:46:e9:f5:e8:
         19:af:71:9a:b3:13:6b:65:f2:d7:3a:a1:e1:05:f4:5d:89:04:
         e6:3b:11:95:73:c5:c6:79:fc:07:92:a2:f4:54:82:5f:bc:23:
         02:23:52:3a:2e:62:e9:0e:25:05:7c:47:fe:03:55:e9:01:b1:
         9e:e0:12:25:2d:06:d5:4b:c4:dc:5e:3b:17:d1:a0:7e:97:9a:
         77:82:08:7a:5b:2e:b4:a4:04:b1:7f:eb:bc:d4:33:b4:09:d0:
         98:11:0b:99:bc:94:12:ca:6d:5d:dc:e5:3c:a7:fc:ad:de:8b:
         cc:d6:c3:50:da:f8:38:05:43:a7:88:8a:f5:9e:11:c5:85:a3:
         5b:2a:d7:15:a3:75:ca:1b:2f:f5:49:41:f0:fd:e5:e6:e2:a6:
         9d:53:2a:90:1a:3d:ab:08:e7:f6:19:6a:a6:c3:b9:49:e1:a5:
         c3:22:43:3b:c5:a2:b6:e3:8d:cd:21:e3:9b:73:96:7c:3d:68:
         6f:ba:a6:e7:97:5c:d2:ce:9e:17:7d:c9:1e:fa:2f:d8:c9:61:
         1d:3d:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:50 2026 by rpki-client