Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          yYndLg7DDjHxkhbtoUxPA1j2FbIPDGtq9fJZFXbtTuM=
Subject key identifier:   F6:18:4F:69:DA:CF:E1:79:7D:80:3A:9E:E0:31:EF:10:83:B4:81:5B
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       01A16D5B50383F809BF96837F1F4EA7D2047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          0346
Signing time:             Sat 24 Oct 2026 10:01:03 +0000
Manifest this update:     Sat 24 Oct 2026 10:01:03 +0000
Manifest next update:     Sun 25 Oct 2026 10:01:03 +0000
Files and hashes:         1: 0opcnqgGubzmysjCmgsy1w2Z93A.roa (hash: /1gFN6Q5hSb3O2AyPzhVJtZmgB0j29PnyY1ChQtSMBw=)
                          2: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          3: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: zRvmVhhOao8v66tG7PCUJFMF3SbIZyk/ISiswKb8kVc=)
                          4: VPyEZw62iC49LD_5e5811s6wJGQ.roa (hash: xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=)
                          5: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (hash: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=)
                          6: v7qTs-P4kf96NQEVuIjiFlnfrkg.roa (hash: 06QnWdclxVJibPO9oaPeJlCjEUztsjOaTGtfwNdn2zw=)
                          7: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:5b:50:38:3f:80:9b:f9:68:37:f1:f4:ea:7d:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Oct 24 10:01:03 2026 GMT
            Not After : Oct 25 10:01:03 2026 GMT
        Subject: CN=f6184f69dacfe1797d803a9ee031ef1083b4815b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:fa:a8:73:f2:e8:6e:47:d1:74:0d:30:06:
                    1e:73:89:41:2e:e2:ee:28:65:c3:7e:d4:29:16:c4:
                    1b:29:55:e3:3d:b0:38:33:9a:6a:ad:15:75:b9:71:
                    21:7f:9f:c6:b6:dd:88:68:51:5c:f1:f3:7e:15:67:
                    91:3e:f6:74:ae:b5:16:99:ac:49:d5:40:76:47:03:
                    ab:84:fd:10:9f:3d:44:88:0b:16:10:aa:07:30:dd:
                    e2:aa:e1:52:cf:7c:4a:1f:c2:f9:35:17:ab:3d:26:
                    38:74:81:38:d6:7a:c3:a7:d6:fd:cd:e3:2f:fa:46:
                    ac:c8:9d:13:e3:20:85:c3:ac:b0:6b:26:5b:83:3b:
                    9f:a7:92:fe:4c:ac:05:dd:bc:e0:7b:43:81:bf:fa:
                    f6:fb:ba:c1:a9:74:96:14:0d:26:a5:1a:b7:14:48:
                    42:42:88:ae:5e:e8:95:13:4c:45:80:28:07:36:d8:
                    72:18:f6:cb:13:66:ca:46:a7:80:75:06:92:ef:44:
                    d6:dd:4e:f5:6d:63:ed:08:1f:0f:94:c0:95:db:4f:
                    04:cc:c6:d6:b3:08:65:59:b9:a8:6e:e9:34:7b:82:
                    1f:2e:b7:c5:50:8e:ff:3d:41:ec:e3:1a:c1:17:29:
                    c0:8f:af:36:b6:0a:ef:d3:10:21:7a:7c:0c:ee:a8:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:4F:69:DA:CF:E1:79:7D:80:3A:9E:E0:31:EF:10:83:B4:81:5B
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:91:f6:68:6f:47:bc:39:58:07:76:8b:16:1c:32:7f:90:
         77:08:74:f6:3b:b0:e0:0a:3e:8a:47:60:c8:53:ea:2a:7a:31:
         12:59:34:61:99:ca:c2:b9:e9:74:47:dc:88:a8:d7:fa:ca:be:
         50:1e:d4:e6:91:1a:f6:df:eb:dc:5f:68:fb:b3:47:26:bd:89:
         3b:2f:4f:24:eb:5f:f6:a5:6e:24:b8:2f:22:d7:5c:48:ce:20:
         d4:84:ac:96:ed:05:15:c7:67:3c:41:00:00:43:84:18:89:89:
         62:73:58:90:53:d4:e1:95:4a:f5:0e:03:7a:93:a8:e8:13:e9:
         19:45:da:e5:52:eb:48:d3:62:90:53:15:5a:27:88:ee:53:e0:
         98:5b:e5:5f:5f:62:8c:65:40:0f:f8:37:23:b2:7c:6c:a4:9b:
         c2:0b:73:5e:6b:54:9d:2b:d6:fa:1d:25:94:fb:84:c5:95:24:
         39:7b:c9:c3:f6:0c:73:5a:a4:0a:d2:2f:34:09:6e:9c:03:5b:
         87:03:a5:fd:cb:86:12:1d:81:0b:3d:6b:f6:25:cf:11:72:5f:
         d0:a0:e9:c2:19:de:70:46:6d:83:02:e8:71:d2:4d:e5:46:b7:
         a0:ed:87:2b:f4:7f:5e:65:c6:f1:4a:6e:6b:91:d7:f1:73:5b:
         42:59:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:34:50 2026 by rpki-client