Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File:                     llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier:          WD2dms36B0wYfNs70zvUjqQx5ozWeFlMOEkdBxs5Ejo=
Subject key identifier:   93:00:64:F6:42:99:F0:36:3D:57:CD:1C:A4:D6:14:E6:FA:AB:07:E8
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer:       /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial:       019FA116E9A556F3489CA7542F8301CA02C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number:          1736
Signing time:             Mon 27 Jul 2026 01:01:00 +0000
Manifest this update:     Mon 27 Jul 2026 01:01:00 +0000
Manifest next update:     Tue 28 Jul 2026 01:01:00 +0000
Files and hashes:         1: FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa (hash: 3HUhYNCu5qpy7dP4zYZjir8YCzM2yFohiBtl0jP26zw=)
                          2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: JUNJ8sFPFB95s1VGihCFyjCcxkOXQIUMMqfih3ozZ9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:e9:a5:56:f3:48:9c:a7:54:2f:83:01:ca:02:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
        Validity
            Not Before: Jul 27 01:01:00 2026 GMT
            Not After : Jul 28 01:01:00 2026 GMT
        Subject: CN=930064f64299f0363d57cd1ca4d614e6faab07e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:f1:8c:1d:2b:7b:5f:e4:81:e4:68:55:a2:
                    76:e3:fc:7f:4e:d9:84:a7:4a:03:b1:34:ff:d6:9c:
                    f1:e8:8b:69:f6:1a:78:fa:64:a5:34:ca:33:d7:3e:
                    4a:59:80:54:c1:6e:f7:a0:65:cb:04:aa:2b:6f:70:
                    8e:90:c7:78:1e:0f:55:e4:67:df:4f:bd:11:15:41:
                    4c:06:92:53:36:2d:7b:e2:a9:87:f9:07:bb:88:d2:
                    d2:ea:3e:76:77:05:14:be:2c:9e:8d:74:a5:6d:ec:
                    6c:6a:cd:23:7d:6f:0c:ea:2e:2e:12:26:c3:bd:48:
                    6f:e5:93:2c:13:95:e6:cf:71:51:3d:a7:e2:b4:f3:
                    26:c3:a4:0e:64:c9:a6:83:65:2f:b2:bc:6f:de:53:
                    75:54:3c:e9:5a:63:b5:4b:4f:2d:6d:b6:a5:e8:8c:
                    d8:54:45:8f:1b:1a:59:7c:e4:9b:e5:36:3f:20:b1:
                    02:66:a2:dc:1a:13:56:45:03:7c:25:f7:38:d0:5c:
                    cf:ad:49:db:86:12:6d:fd:79:a1:d4:9a:c2:26:22:
                    a3:59:0b:82:cd:17:7e:26:df:79:e2:1b:9c:b9:82:
                    6c:2e:eb:43:c4:49:cd:28:ae:7e:84:db:66:df:71:
                    73:10:87:c8:83:6d:3b:a9:db:31:d2:4a:94:56:99:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:64:F6:42:99:F0:36:3D:57:CD:1C:A4:D6:14:E6:FA:AB:07:E8
            X509v3 Authority Key Identifier:
                keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:47:66:0c:7d:fc:67:19:ab:ad:58:e6:bb:07:07:5f:4f:
         a6:73:ef:5a:20:05:77:87:5e:82:c3:89:d1:20:89:27:5c:c2:
         9b:bb:80:cd:5a:6f:d9:f6:b9:d8:bd:7c:43:3a:02:59:fa:0d:
         c8:cd:54:20:61:0d:73:c4:4b:0d:95:88:84:5d:e8:47:b5:d0:
         4f:36:8f:d7:aa:b7:50:77:c7:6b:66:37:11:36:59:aa:e8:84:
         92:65:fb:c2:bc:6b:c3:75:8c:f4:de:fa:f0:e0:cc:17:3a:a4:
         dc:c8:0e:95:e8:06:e0:c9:79:92:07:0d:bb:01:bd:1b:bb:14:
         94:3e:19:8a:2d:17:d9:99:5f:f1:c8:05:49:65:6b:79:fe:00:
         d4:52:b9:5d:11:8a:08:1a:47:fd:eb:05:71:ea:13:2f:95:0c:
         20:51:d7:f6:a7:dc:76:78:2d:53:09:0d:9b:d2:43:48:84:4c:
         bb:54:2a:18:e3:7b:b1:99:14:e0:84:5c:7f:f2:d9:72:f3:92:
         fd:bd:ef:c8:79:c6:dc:98:b8:06:82:66:70:b7:43:3f:27:75:
         e4:2c:cb:76:69:c3:df:b5:47:94:45:f4:16:b3:4d:6a:25:03:
         bd:79:f5:ab:6a:37:b7:12:12:b0:60:81:33:31:41:d7:7a:85:
         0d:99:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:04:44 2026 by rpki-client