Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File:                     LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier:          0gBDZvcjIvomQS87culTr+xy+rD1eLqdi3vHfgAuvck=
Subject key identifier:   D8:D0:A1:0C:C2:F8:19:93:9E:B7:EE:4C:61:66:7F:44:96:D6:93:A1
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer:       /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial:       019E77AFB89E877F94841060DE4300953A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number:          15C8
Signing time:             Sat 30 May 2026 07:01:05 +0000
Manifest this update:     Sat 30 May 2026 07:01:05 +0000
Manifest next update:     Sun 31 May 2026 07:01:05 +0000
Files and hashes:         1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: xtNJ/lCjMzeV8hfVF4reuFvyHh75nlWmcE4Ja3tURjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 May 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:77:af:b8:9e:87:7f:94:84:10:60:de:43:00:95:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
        Validity
            Not Before: May 30 07:01:05 2026 GMT
            Not After : May 31 07:01:05 2026 GMT
        Subject: CN=d8d0a10cc2f819939eb7ee4c61667f4496d693a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:91:8c:ce:ea:fc:36:24:ae:82:84:0c:b4:
                    e4:f8:97:b4:b8:aa:cc:32:93:68:12:22:47:13:e1:
                    c6:59:fc:83:78:7a:c6:98:ad:ef:43:f0:a5:2e:b2:
                    a3:c5:3a:27:fb:73:01:c8:ed:41:16:93:26:d1:f5:
                    13:74:32:4f:9e:a6:18:5b:75:95:0c:60:43:96:0c:
                    69:87:b5:f4:0b:47:70:45:78:9d:ed:b5:06:3b:df:
                    61:01:bb:9d:1e:8e:ef:c6:f8:3a:ec:b5:ee:2f:be:
                    ba:9a:27:cd:b1:8c:f6:41:9d:9a:69:53:00:14:39:
                    86:4a:ce:d2:73:07:dc:83:82:43:79:34:f2:19:c3:
                    a0:e8:c3:de:28:09:1e:d7:69:a2:70:b3:af:09:df:
                    78:0b:23:04:55:68:86:d3:c1:28:11:a3:05:b1:17:
                    29:4f:6f:53:6f:4a:03:99:5f:8a:9b:f1:da:19:29:
                    2f:19:c1:73:ef:c9:61:74:5c:eb:8f:1d:41:d6:9d:
                    d4:06:c1:79:1d:a8:89:16:37:10:e8:11:01:34:c3:
                    e2:8c:5c:f3:0e:8b:5d:e4:97:6b:2d:41:5a:52:32:
                    fb:29:13:18:51:ab:2d:ff:7f:53:e7:7a:8d:b3:c3:
                    0d:55:81:de:a5:63:9d:5a:5e:0a:36:43:fe:57:a7:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D0:A1:0C:C2:F8:19:93:9E:B7:EE:4C:61:66:7F:44:96:D6:93:A1
            X509v3 Authority Key Identifier:
                keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bc:a0:16:ad:0a:96:41:fe:35:4e:01:ab:6c:7c:84:8c:af:
         c3:72:00:86:2f:88:e7:dc:34:b8:5f:31:2b:12:14:e5:39:5c:
         32:76:3c:bc:1d:d4:4e:9c:5c:9f:68:69:f2:27:c9:71:7f:de:
         09:fc:64:bc:bd:e5:e1:64:c6:a1:38:3a:d0:82:a6:ca:3c:45:
         70:08:da:46:3b:be:c2:e8:7d:4d:1f:45:3a:7d:78:ce:d6:01:
         17:0b:58:17:46:8b:79:0e:ce:11:61:c2:2e:63:0a:05:1d:46:
         ec:e2:ab:39:df:07:a3:4e:21:f3:84:87:0f:76:42:b9:2b:c7:
         7f:95:87:85:95:30:c5:b9:cf:33:9c:05:a7:d6:3f:a7:77:5d:
         ea:8d:c7:33:f8:98:b9:bf:20:a4:c7:77:61:f2:49:5d:82:a9:
         b2:bb:17:4c:de:d4:b7:b0:ac:67:91:e9:75:2f:12:2b:53:ff:
         1f:0e:ae:83:e2:7f:d7:3a:83:00:2d:b6:f7:44:0c:77:4f:b3:
         a6:d5:d7:8e:78:5b:25:c8:63:6a:75:81:15:99:9c:6f:9c:94:
         3d:61:5a:de:57:0b:58:55:d7:a0:d8:12:c2:8e:8d:09:99:95:
         59:dc:de:3a:ac:c2:b2:c2:90:b3:8a:f1:fe:4b:e3:bd:f1:96:
         ea:df:17:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ53r7ieh3+UhBBg3kMAlTqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0
MDZiOTAwHhcNMjYwNTMwMDcwMTA1WhcNMjYwNTMxMDcwMTA1WjAzMTEwLwYDVQQD
EyhkOGQwYTEwY2MyZjgxOTkzOWViN2VlNGM2MTY2N2Y0NDk2ZDY5M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruuRjM7q/DYkroKEDLTk+Je0uKrM
MpNoEiJHE+HGWfyDeHrGmK3vQ/ClLrKjxTon+3MByO1BFpMm0fUTdDJPnqYYW3WV
DGBDlgxph7X0C0dwRXid7bUGO99hAbudHo7vxvg67LXuL766mifNsYz2QZ2aaVMA
FDmGSs7Scwfcg4JDeTTyGcOg6MPeKAke12micLOvCd94CyMEVWiG08EoEaMFsRcp
T29Tb0oDmV+Km/HaGSkvGcFz78lhdFzrjx1B1p3UBsF5HaiJFjcQ6BEBNMPijFzz
Dotd5JdrLUFaUjL7KRMYUast/39T53qNs8MNVYHepWOdWl4KNkP+V6d1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjQoQzC+BmTnrfuTGFmf0SW1pOhMB8GA1UdIwQY
MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut
ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm
LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7ygFq0K
lkH+NU4Bq2x8hIyvw3IAhi+I59w0uF8xKxIU5TlcMnY8vB3UTpxcn2hp8ifJcX/e
CfxkvL3l4WTGoTg60IKmyjxFcAjaRju+wuh9TR9FOn14ztYBFwtYF0aLeQ7OEWHC
LmMKBR1G7OKrOd8Ho04h84SHD3ZCuSvHf5WHhZUwxbnPM5wFp9Y/p3dd6o3HM/iY
ub8gpMd3YfJJXYKpsrsXTN7Ut7CsZ5HpdS8SK1P/Hw6ug+J/1zqDAC2290QMd0+z
ptXXjnhbJchjanWBFZmcb5yUPWFa3lcLWFXXoNgSwo6NCZmVWdzeOqzCssKQs4rx
/kvjvfGW6t8XCw==
-----END CERTIFICATE-----
Generated at Sat May 30 17:32:35 2026 by rpki-client