Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          pg0SEUZ7LT6JU5HiNuXHtbBNygCKjNM8d752twRtiCY=
Subject key identifier:   D1:CE:5D:F0:6A:9E:95:20:90:3F:00:3E:4E:80:30:11:F0:93:5B:67
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019CE3A3001067A0A0094B6CF4CE6D338D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          07C1
Signing time:             Thu 12 Mar 2026 20:00:36 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:36 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:36 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: gJ4s9+rnotrqBqEgbWJc3dvsIMrkn5qmeodJhmO1Zoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:00:10:67:a0:a0:09:4b:6c:f4:ce:6d:33:8d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Mar 12 20:00:36 2026 GMT
            Not After : Mar 13 20:00:36 2026 GMT
        Subject: CN=d1ce5df06a9e9520903f003e4e803011f0935b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:a1:c1:73:4f:1b:9d:66:74:c4:46:7f:fa:
                    90:2b:d5:de:a3:09:00:52:c3:83:74:9d:2c:b9:4b:
                    c4:89:9f:cc:fa:a2:b0:33:42:45:e5:b4:60:66:b4:
                    af:39:70:82:81:1b:0e:11:36:01:16:72:fa:d6:e0:
                    5b:d5:79:e5:03:ec:b9:d2:ca:39:97:81:b6:7f:d3:
                    dd:65:ea:0c:25:60:93:d0:78:e3:1c:bc:88:92:6c:
                    6a:45:d8:f9:18:21:f7:c8:a7:66:f8:f1:83:73:a4:
                    d6:97:4b:2d:66:c4:f5:03:d2:65:8d:84:55:84:b8:
                    c7:6a:c9:5c:ed:7e:cb:1c:59:b2:f8:47:56:e7:8c:
                    6d:6e:a0:2d:69:75:a1:e5:ec:80:fc:4f:e3:6a:52:
                    6f:1f:3e:6d:75:dd:c1:9e:2d:38:1c:9f:fa:7b:64:
                    b7:09:4f:23:5f:d7:87:3a:9e:e2:1c:75:fb:1a:8f:
                    90:6b:91:7a:bf:f5:15:51:0f:f9:d5:73:35:c6:0f:
                    8c:1c:d1:73:57:ea:5f:0c:7a:68:08:28:4b:df:0f:
                    4a:61:73:ed:f4:75:e9:75:3d:48:bb:9d:30:94:67:
                    5a:b3:94:ae:19:66:9a:eb:f1:9c:59:62:82:35:c1:
                    91:fd:a0:9c:f9:66:83:b2:16:ad:03:6b:51:8c:9a:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CE:5D:F0:6A:9E:95:20:90:3F:00:3E:4E:80:30:11:F0:93:5B:67
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:84:cb:24:dd:15:80:db:16:46:1f:35:bd:05:1d:65:c7:
         c9:93:63:41:94:95:f8:19:70:1f:3c:55:ae:15:4f:49:a9:b3:
         85:52:a3:f2:e3:70:aa:72:eb:bb:c6:07:24:4d:51:3a:ef:5a:
         bc:47:3a:43:bc:85:31:05:64:b3:fb:79:60:b2:1d:cd:04:d3:
         96:bc:ae:d2:42:37:ba:7d:71:5f:12:60:be:da:6b:3b:f4:5b:
         a4:e5:29:f4:25:dc:fa:d3:48:39:22:19:95:04:be:b7:a2:c2:
         b6:47:ed:8b:a5:11:d2:35:4e:70:a6:39:81:9a:6f:0c:20:60:
         d0:39:d9:c6:aa:8b:7e:a4:61:68:fb:c1:6e:e0:4a:39:4a:ef:
         84:ab:c6:0a:88:70:6f:07:2b:75:35:d5:18:dc:eb:3d:55:16:
         53:30:82:b2:83:72:61:03:90:fd:3a:49:f1:39:50:b5:d6:0e:
         9b:a4:d7:62:0e:ca:0c:15:df:00:99:d0:74:e5:bd:e8:bd:27:
         82:de:8c:bb:eb:60:4a:0d:d9:80:d2:66:d7:35:1c:b0:a1:62:
         6b:54:22:47:89:c7:0a:d4:5f:35:09:a9:06:ac:9a:d9:2d:3a:
         61:2f:39:a6:5b:ae:c6:8d:a2:92:7f:a6:00:93:51:a0:00:a4:
         01:7e:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:16:05 2026 by rpki-client