Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File:                     LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier:          ZCtUBKoOz9puSh9SvPRV2vIj6GyARcfkZcRyu9ZqyW4=
Subject key identifier:   43:1C:36:8E:F1:FA:85:D9:7A:E6:CD:0F:72:5A:4E:38:02:F6:E5:11
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer:       /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial:       019D37F6DF6878C1A0E46D6A4D9BAB50734F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number:          175D
Signing time:             Sun 29 Mar 2026 05:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:18 +0000
Files and hashes:         1: GcH-WF46-Cx6ySovZfxGMRK-ScA.roa (hash: vLUhEA8jeh8KPUh1zpLwKiZLSX3eBBb9XYrIml4wnm4=)
                          2: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: eKfkQlFdCQJ0U/nkchI1fllbitb4LhNcg+FC8/0i8oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:df:68:78:c1:a0:e4:6d:6a:4d:9b:ab:50:73:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
        Validity
            Not Before: Mar 29 05:00:18 2026 GMT
            Not After : Mar 30 05:00:18 2026 GMT
        Subject: CN=431c368ef1fa85d97ae6cd0f725a4e3802f6e511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:19:57:d4:fc:04:9d:32:b7:6c:82:82:ae:
                    39:6d:1d:66:3f:4c:21:a9:07:92:cc:3e:2d:10:f3:
                    7e:bc:d6:1d:f9:1d:84:eb:e7:1a:60:a4:5d:07:92:
                    d2:b5:9a:94:53:25:a8:be:ed:e8:00:94:94:0f:01:
                    03:45:35:29:05:ee:b6:c0:45:0a:7d:c6:93:b9:a9:
                    0f:69:9c:1d:3d:41:97:fb:88:61:1b:04:1a:77:54:
                    0b:bc:d2:a9:de:35:f3:9d:1d:bc:4d:f1:59:0a:e6:
                    18:e1:b1:50:61:db:06:ba:d5:76:d0:cf:55:ac:a6:
                    6f:ab:45:d3:4d:cb:8a:90:79:39:0f:cd:f0:18:d6:
                    7a:ab:c9:ba:7d:b5:b9:ad:d3:f5:e5:fb:5c:1f:e7:
                    ed:9e:09:1f:6f:f2:df:62:7a:13:9f:e6:56:f7:f1:
                    67:67:30:d7:b2:9b:46:eb:dd:94:36:9d:55:b0:27:
                    89:91:39:74:9c:ee:31:36:c4:40:5d:48:60:f5:fc:
                    f9:6f:0a:21:96:2d:00:41:06:28:b7:7a:6e:b0:c8:
                    81:c1:48:e1:cb:2c:fb:8a:34:7d:cf:25:11:e6:f1:
                    e2:45:e8:22:2d:9b:62:af:0a:34:22:a0:f7:98:40:
                    3f:27:43:e4:ef:e0:f7:40:b7:72:12:11:86:c2:36:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:36:8E:F1:FA:85:D9:7A:E6:CD:0F:72:5A:4E:38:02:F6:E5:11
            X509v3 Authority Key Identifier:
                keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:e5:d4:13:84:f8:f2:59:c6:11:5a:17:52:f2:a9:01:5f:
         de:58:9f:c2:d4:48:f1:58:c5:55:4a:f6:fa:89:ac:50:36:1b:
         61:7b:9d:43:17:92:4a:db:1a:72:3f:9c:5c:fa:a7:03:fb:e4:
         94:6b:7f:2c:3a:b1:95:b7:df:47:4e:36:e9:6b:e7:de:83:38:
         11:67:79:51:8a:1a:54:01:3d:5b:35:e1:18:cd:76:7a:3a:45:
         3a:44:25:b5:ca:de:1f:29:95:3c:df:67:82:78:93:4a:92:d0:
         7d:36:eb:6a:7c:f1:77:0d:18:5d:5a:81:06:bf:36:ee:c9:07:
         b7:81:65:19:66:41:95:aa:16:11:bc:e9:1b:2f:2a:f0:d7:d6:
         ed:4f:f6:fb:af:b5:b7:93:dc:43:ec:40:1f:6f:35:69:7f:08:
         c0:46:48:85:fa:13:3c:57:93:10:3f:33:35:ad:cb:c5:de:b5:
         bd:ce:5d:38:54:32:76:bf:57:25:7d:de:b8:06:d3:31:3d:3a:
         62:59:89:97:f6:2c:82:b1:ed:09:0a:16:93:5f:3c:6a:db:cd:
         8f:99:38:6e:5b:e9:2a:65:e1:1f:41:f4:59:37:d8:84:5a:bf:
         36:e1:7d:53:5e:d7:8a:f7:a4:7c:d3:45:a5:a6:f5:96:01:5d:
         e8:76:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:39 2026 by rpki-client