Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File:                     llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier:          bFGgpYEk4RUMew4c127HL84TN4BnPfLlRC4N4ICZXYg=
Subject key identifier:   01:F5:0C:A2:77:DB:E5:81:64:5E:20:C2:4C:63:3F:F4:ED:DF:04:60
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer:       /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial:       019FEBC36785D657094788B8D65ED5A9200F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number:          19F5
Signing time:             Mon 10 Aug 2026 13:01:19 +0000
Manifest this update:     Mon 10 Aug 2026 13:01:19 +0000
Manifest next update:     Tue 11 Aug 2026 13:01:19 +0000
Files and hashes:         1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
                          2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 0YwA2IoOHy5r7kAirmXy322APfvvqoevGqzjoZpDX/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Aug 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:eb:c3:67:85:d6:57:09:47:88:b8:d6:5e:d5:a9:20:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
        Validity
            Not Before: Aug 10 13:01:19 2026 GMT
            Not After : Aug 11 13:01:19 2026 GMT
        Subject: CN=01f50ca277dbe581645e20c24c633ff4eddf0460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:6f:ef:7b:9e:0f:66:79:9f:a8:87:a2:b4:
                    1f:04:55:43:f3:8a:09:b2:b3:18:9e:75:34:0b:4c:
                    bf:69:58:38:f2:62:39:ff:81:7f:4d:64:74:e1:d2:
                    84:c5:27:82:3c:8c:c2:00:9a:c6:77:fa:b6:c9:27:
                    2a:be:86:ca:fe:b2:43:e6:fb:e9:0a:7c:f1:ef:bc:
                    7f:e6:81:77:74:24:e4:f8:1a:65:30:eb:7b:87:c9:
                    b5:35:f2:05:99:19:33:df:6f:25:05:89:8b:be:81:
                    7b:4b:21:bf:2a:45:b7:c8:7a:fc:dc:be:9a:1f:cd:
                    6f:12:0c:91:8e:fc:46:c7:0c:93:ea:9f:48:4d:55:
                    80:03:26:b5:7f:e7:4d:db:ba:0c:d6:14:60:0e:bd:
                    6c:08:f5:c7:10:0b:51:be:4d:12:62:7a:30:a8:2e:
                    fc:2d:2c:ae:1e:cd:70:04:62:89:01:00:90:85:a9:
                    7d:6a:fb:e9:d8:72:c4:5b:4d:6e:b9:2a:ec:73:1a:
                    41:fb:3e:f6:00:85:91:dc:c3:16:98:ea:e0:fd:5c:
                    66:d5:ec:a3:2f:1c:bb:cd:e9:fa:8a:68:8c:a5:bf:
                    9d:1b:1c:a3:4f:65:11:1f:77:74:9f:59:eb:5f:9c:
                    3b:df:31:08:a6:65:ee:3b:bb:e0:31:60:04:63:d6:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F5:0C:A2:77:DB:E5:81:64:5E:20:C2:4C:63:3F:F4:ED:DF:04:60
            X509v3 Authority Key Identifier:
                keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:cd:c1:dc:9a:67:1e:81:47:81:44:ff:1c:93:06:69:17:
         98:f7:44:e8:d8:78:15:4a:e6:8e:48:5a:19:06:e8:83:3f:a3:
         28:9d:9f:ca:0a:c9:4e:15:be:54:78:28:14:53:eb:d5:b5:45:
         4e:10:b9:b3:c9:bf:39:cd:6f:a0:a7:fc:b8:72:2b:e4:ee:59:
         5b:bf:4f:08:94:d3:2b:4a:a0:09:9c:af:e5:16:0f:bc:b9:e8:
         c7:43:03:e6:aa:d0:85:4b:45:83:dc:09:c2:d8:96:f0:ac:fc:
         fd:74:3f:5c:62:f2:63:d4:91:82:23:0a:c1:65:5e:54:59:8a:
         00:06:c2:14:86:ec:bf:bc:a5:30:0a:c7:b7:04:b5:8d:6a:74:
         51:9a:7f:dd:a0:6b:1e:b9:2f:56:4f:66:f5:97:74:3e:e3:06:
         e1:b6:98:e4:a4:1f:99:27:61:6b:8a:f5:08:7c:50:75:8d:8e:
         36:5a:ec:f7:40:93:09:aa:96:1f:49:7d:1b:ad:22:4a:d4:ee:
         5d:63:1e:1a:71:6d:7c:9b:1d:bb:3a:8d:8e:4b:7a:b6:66:f1:
         8e:9c:00:c6:a1:36:a0:a5:2d:f9:c1:e1:7c:ba:15:7f:36:72:
         b1:ab:0b:34:c8:d5:c2:6b:d3:fc:9a:af:1b:14:6a:1e:ec:05:
         78:9b:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 18:53:23 2026 by rpki-client