Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          XSNBvIj6aQlLlxahe2PoAhDGzXW4Vp0DJsWqRZ5PWKc=
Subject key identifier:   2D:61:79:AE:EA:88:E7:D9:68:1B:1E:4D:06:4C:76:B5:E3:09:CA:71
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019EB6FC48BC0327B86F2D48FE746BE07711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          08B3
Signing time:             Thu 11 Jun 2026 14:00:47 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:47 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:47 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: RTHNxsyVv2VlwAeGoa0An3uk/Hju5BU1bwQgy5HL7YI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:48:bc:03:27:b8:6f:2d:48:fe:74:6b:e0:77:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Jun 11 14:00:47 2026 GMT
            Not After : Jun 12 14:00:47 2026 GMT
        Subject: CN=2d6179aeea88e7d9681b1e4d064c76b5e309ca71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:2f:87:a0:a4:c4:22:c6:db:d0:01:d3:e5:
                    36:c1:2c:6f:94:23:05:80:9b:91:26:a3:64:a0:fd:
                    ba:3d:06:f1:44:78:25:7b:87:dc:d2:a1:90:da:07:
                    8c:3e:e6:96:13:b4:53:dd:24:bf:11:a3:de:8a:df:
                    a3:26:61:c0:72:59:3a:94:56:4e:34:3c:e5:8f:9d:
                    1b:ab:1f:85:05:1a:cc:5a:3b:83:f2:1e:9b:01:e3:
                    83:9e:90:15:32:9c:09:c5:6f:52:f7:02:f9:d7:4c:
                    f5:4c:62:88:e5:48:32:7f:2b:e4:43:f2:72:62:3e:
                    71:10:82:be:cc:04:f6:22:26:88:b0:7b:62:e4:33:
                    ba:7e:96:5c:0e:19:b7:b1:72:fb:f6:b2:78:3a:55:
                    54:21:5a:46:03:94:78:46:28:f9:20:8f:35:8e:55:
                    2f:e2:03:41:d0:3a:90:87:76:41:6a:7f:0c:10:ed:
                    73:fe:c6:08:26:ae:97:1d:ab:32:f1:65:f9:c4:9f:
                    f7:7f:41:5c:ae:c0:f2:d1:65:78:1f:18:c9:d5:c3:
                    29:08:2a:97:ea:71:dd:ef:2c:0f:09:c4:0a:6c:83:
                    cc:b9:95:d4:a2:7f:7f:30:81:d9:e2:ff:72:1f:e2:
                    40:ee:a3:df:6d:e4:a5:e8:15:d4:4d:d8:c5:53:c3:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:79:AE:EA:88:E7:D9:68:1B:1E:4D:06:4C:76:B5:E3:09:CA:71
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:10:eb:b4:f6:78:c2:55:4b:20:61:e4:20:ea:b9:2d:76:48:
         c3:2b:80:ab:0b:9e:e9:87:09:f0:8d:8e:ff:2e:0a:76:24:71:
         a0:c8:bd:2d:c4:43:72:14:aa:7b:3e:d0:75:34:0b:4d:fe:c7:
         b5:d5:b0:d2:2c:9d:29:2f:a3:84:3f:c5:3d:7d:ca:a7:53:a7:
         6a:8c:09:de:e6:af:d5:25:b9:5e:14:9f:89:9b:7c:34:a3:00:
         b4:7a:da:a8:b2:0b:db:38:f0:3a:ef:b2:f1:2d:a4:8a:a0:25:
         8d:55:51:81:c6:f4:17:d7:72:62:49:be:94:27:c8:59:a0:fc:
         01:8d:60:4f:f9:08:55:af:c3:bd:17:f5:f1:2e:00:ce:09:df:
         a8:cb:61:09:92:0f:cb:a8:e9:c0:39:e9:2e:34:66:21:81:fc:
         d5:27:ff:90:19:97:46:b1:04:98:a7:1e:ae:bc:42:45:d4:6f:
         5e:7c:a3:39:a6:eb:bd:a1:2e:55:e9:7f:87:92:16:ad:51:ca:
         6d:ae:cb:30:a1:d4:52:bd:27:27:a8:5d:5a:b8:a9:fc:f4:d9:
         ba:bb:8c:bb:2c:c7:b5:a0:bd:fb:cc:b3:dc:c5:d6:5c:d5:85:
         00:f4:d8:60:b6:9e:95:d6:e2:b6:88:b7:77:06:9b:4e:7e:28:
         45:23:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:11 2026 by rpki-client