Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          UYU5Z1VGA+dzTjO8oXhgLMww5KrPo4ewvMwqFs3Jd6Y=
Subject key identifier:   5F:D8:1F:41:06:30:91:98:5B:80:61:3D:4B:FE:0A:06:41:32:D4:FE
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019DCD4FF2C6A5EE242EC6243262F4E75B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          083A
Signing time:             Mon 27 Apr 2026 05:01:01 +0000
Manifest this update:     Mon 27 Apr 2026 05:01:01 +0000
Manifest next update:     Tue 28 Apr 2026 05:01:01 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: POov+8VpnvCEHrwEsggBt9EVBHsX0wsz0/NVlbjUL88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:4f:f2:c6:a5:ee:24:2e:c6:24:32:62:f4:e7:5b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Apr 27 05:01:01 2026 GMT
            Not After : Apr 28 05:01:01 2026 GMT
        Subject: CN=5fd81f41063091985b80613d4bfe0a064132d4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:17:6a:5d:d4:71:79:1a:06:5c:8d:31:46:
                    2e:0a:55:9a:53:c8:77:54:0a:ba:c9:a7:4c:6e:06:
                    1a:12:77:29:43:29:0d:8d:33:dd:90:bf:67:b1:5f:
                    84:93:e8:47:76:63:ef:02:75:a9:bb:94:4f:5f:2c:
                    83:1b:ca:49:dc:52:8f:dd:3b:25:5e:ab:2a:f0:73:
                    6c:10:9a:90:de:9a:2b:47:cf:cd:da:d9:41:94:25:
                    46:65:76:80:c4:a8:c7:2d:d6:a9:e5:a9:1b:a1:6d:
                    0e:47:5a:fc:28:e8:6b:17:f9:11:fd:bd:9f:f5:03:
                    04:a6:84:2f:38:38:f8:a7:8d:5d:14:35:63:e0:1f:
                    03:99:91:4b:00:d7:40:f1:91:8d:23:32:a2:d4:97:
                    ab:21:5f:92:18:11:f5:1a:a0:ec:8e:db:35:33:f4:
                    22:bf:d4:14:8b:6f:f6:c8:0c:de:d0:56:15:2f:dd:
                    71:0a:e7:7b:e7:63:e2:51:c9:3a:60:97:2f:86:9e:
                    70:20:48:c9:99:28:af:c7:5a:53:ed:f7:ee:32:a3:
                    09:55:38:13:1b:27:03:18:84:b5:72:7b:5f:04:81:
                    25:10:29:86:06:84:88:0f:29:d6:94:67:b6:d3:f7:
                    bb:99:d7:0b:a4:f0:1b:1d:8c:6d:c5:53:78:27:ec:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D8:1F:41:06:30:91:98:5B:80:61:3D:4B:FE:0A:06:41:32:D4:FE
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:68:e2:fb:fa:b5:c6:34:e3:f6:61:7e:6b:b5:a6:df:4f:54:
         4f:df:e3:c3:2c:be:df:71:fe:4a:b5:9c:36:58:47:8f:e2:4a:
         46:ce:6e:f1:2e:95:ae:d9:03:7d:bf:c8:ba:09:fb:4c:0e:e7:
         ac:51:a7:59:b7:05:8a:9d:bd:48:ec:f9:f3:6e:2a:e7:73:a1:
         3c:66:31:5e:9a:bf:55:e1:07:03:93:8b:c3:c6:77:cd:18:83:
         a4:2c:0e:58:ee:6a:ec:00:b6:b5:3e:e9:d7:45:48:27:30:4d:
         a7:8c:fb:9d:c3:56:1e:25:af:2b:cc:d3:73:01:78:1d:17:09:
         cc:80:bf:a2:a6:12:93:12:0e:49:9b:f6:0b:73:49:9e:2c:d2:
         c0:61:64:fd:1a:4a:11:61:0f:30:a7:3d:34:f7:60:bf:22:a1:
         15:25:10:e0:93:2b:b2:23:c3:d5:4c:42:a4:58:69:a6:f7:55:
         c9:58:48:31:5f:13:0e:20:4b:bb:83:6a:55:80:1f:ea:f6:11:
         57:37:5b:d5:04:ae:d1:9e:53:94:28:36:dd:11:f8:71:a6:3f:
         4f:a5:2e:ca:46:4c:b6:15:dd:50:a0:39:b6:00:1b:73:68:99:
         3b:77:15:b9:a1:52:08:53:97:ca:24:73:ca:87:9e:1a:03:46:
         9d:9f:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:33 2026 by rpki-client