Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File:                     llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier:          /FrDbUn/CFryWg9OP44iXf1Y5gOgeGqTeTb8T+W5cII=
Subject key identifier:   F6:09:1D:01:61:AA:85:B3:DD:CE:C2:E5:8D:24:8C:43:FC:A2:04:C0
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer:       /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial:       019EB845C002D7059049A69F07D3684016F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 20:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:39 +0000
Files and hashes:         1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: 3CT2wS17D66ufu3ALcnbkXI7VUvaL+HFY2hUAk55SbI=)
                          2: xlcC7OzJncwz3-3fDqQVCRiRUuA.roa (hash: +tBbtDRSVVjOD+h/7bnuccyOYojgyYfukEn9rcwiF1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:c0:02:d7:05:90:49:a6:9f:07:d3:68:40:16:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
        Validity
            Not Before: Jun 11 20:00:39 2026 GMT
            Not After : Jun 12 20:00:39 2026 GMT
        Subject: CN=f6091d0161aa85b3ddcec2e58d248c43fca204c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:54:e5:cf:da:8a:4b:68:b6:be:66:34:8b:
                    33:2a:97:e9:87:e7:d1:55:3a:a2:4c:31:16:b1:f4:
                    d1:c2:33:8e:1b:fa:ee:bb:f1:23:c0:2b:09:c1:98:
                    50:b6:f0:49:c8:76:98:1a:76:8a:55:c9:e9:db:f3:
                    67:34:0d:af:c2:51:46:b7:ed:bc:86:ea:1a:68:8b:
                    d3:0c:12:3e:42:db:1c:5f:8e:20:78:31:84:97:c4:
                    65:63:e8:34:b5:93:86:93:85:51:0d:30:ce:1b:0d:
                    db:18:e4:50:84:1d:0f:df:11:bf:a2:e8:bb:be:8f:
                    67:66:32:61:a6:39:fa:b9:cb:af:9b:43:82:ee:ce:
                    bf:d7:f9:06:10:c4:37:31:f5:d9:81:1d:a3:a2:a4:
                    50:ef:20:7d:4e:d3:dc:f7:3d:d9:b5:21:41:22:80:
                    12:d9:8f:1e:b8:41:6e:c2:c5:19:70:e7:51:bc:2c:
                    45:1c:41:e9:9b:c6:eb:66:ba:0c:af:36:df:91:2d:
                    9e:c9:a9:44:d3:eb:48:4e:73:2b:37:4b:e6:19:2b:
                    b8:5c:df:e0:82:d3:9b:3b:96:68:4a:75:1c:cc:cc:
                    f4:a4:9d:f2:70:b7:28:c4:50:8d:68:b0:e1:f4:d6:
                    8c:af:8e:9e:9f:d4:e1:0d:ec:4e:36:c4:2c:74:50:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:09:1D:01:61:AA:85:B3:DD:CE:C2:E5:8D:24:8C:43:FC:A2:04:C0
            X509v3 Authority Key Identifier:
                keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:de:58:9d:70:2d:a9:60:e7:83:9b:06:6e:c9:ce:57:3d:
         b1:1f:d0:04:1e:d2:86:1f:a3:e7:6c:e6:ff:fc:46:b3:82:4d:
         75:cb:fb:8b:b3:71:54:62:50:38:26:e7:bf:56:87:15:f2:41:
         ff:fe:e3:9d:60:1d:c6:3a:35:01:e6:5a:7c:af:c2:97:55:76:
         39:c8:cb:58:c2:24:04:4e:41:16:48:01:4a:94:12:75:84:73:
         ff:83:dd:6e:7a:aa:66:1b:3f:bd:a2:61:f6:db:dd:8f:6e:89:
         19:97:ac:90:26:58:05:7b:b5:a7:2c:cd:b8:84:27:01:0a:d1:
         04:98:17:5c:cb:8e:20:d8:33:72:0f:38:5c:bb:99:58:e9:4a:
         be:f7:fc:35:1b:e5:70:47:a7:7e:90:6c:94:ee:9c:a4:26:8d:
         eb:55:98:20:4c:33:39:30:81:44:b4:d7:19:7d:99:5d:e0:a9:
         43:d7:66:3d:ff:d9:ff:ea:74:17:03:cc:be:ef:d0:c0:23:3e:
         c0:46:0c:f2:55:31:d7:2f:b7:df:31:43:84:14:34:e0:98:df:
         a5:31:c4:80:1d:ae:44:c7:2f:99:eb:03:c1:8f:46:84:2c:ca:
         6d:26:72:f7:d8:0d:80:2c:b6:c3:dd:3e:0b:83:a3:d4:85:1f:
         57:26:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:01 2026 by rpki-client