Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
File:                     L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json)
Hash identifier:          6GqWt6/HuZmuIQzz47sgbsg5Ur+39sKjRUPhKStk/ao=
Subject key identifier:   7E:F8:00:61:04:19:23:59:D2:E0:76:BA:6C:6F:0A:C2:F3:52:86:EF
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Certificate issuer:       /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial:       019D37F75FDDE0353A0A47836E967E42C0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
Manifest number:          0E82
Signing time:             Sun 29 Mar 2026 05:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:51 +0000
Files and hashes:         1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: M0yzMnc4kwfLEZOaee/IMIhSs3sIFFyXhyt77q/qGXQ=)
                          2: TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa (hash: o/jK1+Sozn92VWRitjnWkL3+T8fEVmw/zg1uz6fdVJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:5f:dd:e0:35:3a:0a:47:83:6e:96:7e:42:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
        Validity
            Not Before: Mar 29 05:00:51 2026 GMT
            Not After : Mar 30 05:00:51 2026 GMT
        Subject: CN=7ef8006104192359d2e076ba6c6f0ac2f35286ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:0e:c8:cd:5f:87:a9:31:e6:9f:81:97:48:
                    70:a5:8f:96:03:93:93:de:1b:41:8b:36:c3:da:76:
                    88:3e:b1:7f:f5:3b:9a:d0:35:f3:35:70:b7:2a:7c:
                    4e:b5:44:c6:91:4c:f1:b3:96:b7:68:c9:5a:2c:4c:
                    5f:30:d2:67:ef:0a:91:88:c1:82:03:53:9f:ca:41:
                    cd:09:e5:c3:c1:1d:42:42:b9:16:5b:9d:f1:5a:ae:
                    ad:90:f9:0d:dd:b0:dd:cd:1f:20:61:52:40:94:3c:
                    95:a5:b9:ce:71:98:7e:11:5e:51:62:19:a1:a3:36:
                    43:77:9b:a5:33:82:46:0f:2b:d9:0c:8a:28:4d:cb:
                    97:2c:45:3a:1c:db:51:ac:e0:60:58:1b:35:33:86:
                    59:e4:a9:bc:77:a7:d7:4f:ef:0a:5f:ce:96:5d:ab:
                    ee:24:ef:e8:62:0b:57:86:c7:52:20:0d:ff:7f:8d:
                    51:3e:aa:6b:6f:1f:57:b9:10:47:3d:40:a4:79:80:
                    36:4a:43:d0:60:31:09:dd:7f:2e:14:0b:5d:f8:b6:
                    d9:a3:40:91:ee:7c:46:10:01:8d:54:0a:9c:d0:71:
                    fc:c1:ef:93:ad:d3:9f:17:28:9f:ed:5d:5d:12:ac:
                    a1:a4:13:89:7e:82:dc:6f:c2:45:79:00:ff:63:3f:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:00:61:04:19:23:59:D2:E0:76:BA:6C:6F:0A:C2:F3:52:86:EF
            X509v3 Authority Key Identifier:
                keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:cc:29:6d:ab:27:2f:0d:09:ce:14:6a:fe:7e:d3:b4:26:
         cd:de:dc:0f:1d:6e:9d:12:b4:89:e5:a1:8f:92:1a:e1:4d:98:
         54:f6:22:f2:09:2c:e2:1c:a9:29:eb:7a:0c:cf:c7:07:68:02:
         d0:c3:d8:20:b5:df:34:bb:1c:bf:66:84:6c:7d:bf:2a:2b:05:
         e7:60:f2:d1:5a:18:e6:b4:61:90:5c:48:0e:2a:97:f9:01:bb:
         2d:00:87:cb:d9:ae:a3:c1:13:d5:b9:5c:17:b0:cb:00:8d:0d:
         bd:b5:b0:70:4a:e4:d3:56:32:9b:06:4a:e0:6b:34:63:f9:f5:
         1e:1c:a1:72:93:34:31:40:73:52:e9:44:5f:b3:94:78:8b:58:
         3d:1b:9f:2c:20:ce:83:1e:b0:bf:3a:dd:fa:8e:6f:30:5b:87:
         12:73:38:eb:aa:fd:8c:73:24:70:5e:48:11:1e:84:20:23:0f:
         92:a4:f5:c8:57:97:ee:29:d2:ad:fd:36:89:d6:00:84:f0:b9:
         6c:fe:b2:7d:5e:6e:18:a5:b8:75:fd:37:23:cb:8e:2c:0e:14:
         e8:e4:3c:fd:76:3a:2e:93:81:38:f4:b3:43:0f:b4:08:f2:f5:
         22:3c:e7:a8:71:e7:5e:f2:08:d9:62:3e:27:4b:42:78:2b:8a:
         e2:cc:80:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391/d4DU6CkeDbpZ+QsDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzA1MzI2NjQzNDNjYjNkMjg5NzAyM2ExMjdmNjBiYTkx
N2E1ZGQwHhcNMjYwMzI5MDUwMDUxWhcNMjYwMzMwMDUwMDUxWjAzMTEwLwYDVQQD
Eyg3ZWY4MDA2MTA0MTkyMzU5ZDJlMDc2YmE2YzZmMGFjMmYzNTI4NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBUOyM1fh6kx5p+Bl0hwpY+WA5OT
3htBizbD2naIPrF/9Tua0DXzNXC3KnxOtUTGkUzxs5a3aMlaLExfMNJn7wqRiMGC
A1OfykHNCeXDwR1CQrkWW53xWq6tkPkN3bDdzR8gYVJAlDyVpbnOcZh+EV5RYhmh
ozZDd5ulM4JGDyvZDIooTcuXLEU6HNtRrOBgWBs1M4ZZ5Km8d6fXT+8KX86WXavu
JO/oYgtXhsdSIA3/f41RPqprbx9XuRBHPUCkeYA2SkPQYDEJ3X8uFAtd+LbZo0CR
7nxGEAGNVAqc0HH8we+TrdOfFyif7V1dEqyhpBOJfoLcb8JFeQD/Yz9rdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH74AGEEGSNZ0uB2umxvCsLzUobvMB8GA1UdIwQY
MBaAFC9wUyZkNDyz0olwI6En9gupF6XdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUt
MzE1YTc5ZjU5ZTE4LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUtMzE1YTc5ZjU5ZTE4
LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRfMKW2r
Jy8NCc4Uav5+07Qmzd7cDx1unRK0ieWhj5Ia4U2YVPYi8gks4hypKet6DM/HB2gC
0MPYILXfNLscv2aEbH2/KisF52Dy0VoY5rRhkFxIDiqX+QG7LQCHy9muo8ET1blc
F7DLAI0NvbWwcErk01YymwZK4Gs0Y/n1HhyhcpM0MUBzUulEX7OUeItYPRufLCDO
gx6wvzrd+o5vMFuHEnM466r9jHMkcF5IER6EICMPkqT1yFeX7inSrf02idYAhPC5
bP6yfV5uGKW4df03I8uOLA4U6OQ8/XY6LpOBOPSzQw+0CPL1IjznqHHnXvII2WI+
J0tCeCuK4syAvA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:21 2026 by rpki-client