Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File:                     L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier:          /GixcC1B131IsEbnT5o2CqH/RKgzQOrRGXkv7FYZ+4k=
Subject key identifier:   CF:C6:64:1A:7E:19:32:A8:92:C7:AF:30:76:7D:A3:D0:DC:DE:BC:80
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer:       /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial:       019CACB47598A51201957A7D8847C7369C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number:          1162
Signing time:             Mon 02 Mar 2026 04:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:33 +0000
Files and hashes:         1: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: J9KBVh8N7Av2UZhTLM5pSSG/WINOWR6AzsS/bab7SMM=)
                          2: VJNeRODqD6T5IMeQoh6SGZFSsUA.roa (hash: Zl8wYu5uQXUxR+F5/UErv6oGRThFNITBwnj1Q2V8QHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:75:98:a5:12:01:95:7a:7d:88:47:c7:36:9c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
        Validity
            Not Before: Mar  2 04:00:33 2026 GMT
            Not After : Mar  3 04:00:33 2026 GMT
        Subject: CN=cfc6641a7e1932a892c7af30767da3d0dcdebc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:91:2b:68:42:67:06:84:06:dd:2c:67:1e:
                    f7:d3:b4:0b:c2:d7:c5:8e:91:78:cb:ac:c3:69:29:
                    bd:2f:e5:5e:e7:8e:10:1c:97:23:d1:20:40:eb:eb:
                    7e:4e:79:57:b4:4f:e5:30:e3:e0:26:02:6a:91:8c:
                    be:ad:0e:7f:c0:15:2c:bd:eb:1a:94:84:4c:5c:54:
                    57:f9:c1:28:eb:bc:81:61:de:99:75:0c:5d:67:01:
                    70:a5:7e:5e:0e:14:4e:a4:2d:20:05:b9:1b:c5:d7:
                    45:b0:20:c9:e6:a6:67:ab:87:99:aa:dc:64:c4:09:
                    67:99:c3:f4:71:bd:31:10:bc:9c:84:c6:f6:1f:c1:
                    24:93:85:a4:f1:c2:c3:5e:49:69:93:86:d0:f1:10:
                    11:df:4c:67:b1:27:a6:bf:ad:f7:b5:22:d2:17:df:
                    21:d3:12:0b:71:0a:3c:0e:8b:7e:44:27:3a:d7:82:
                    8e:36:15:30:1c:f1:18:56:8d:6e:5c:ef:6f:ce:78:
                    e9:a5:13:8d:d1:a8:c7:61:a2:35:fe:e7:06:f3:d9:
                    75:c2:a3:8b:e9:67:51:73:16:e4:38:10:1b:91:95:
                    f1:3a:3f:4e:54:d3:cc:d7:90:d6:0b:06:ef:2d:c9:
                    dd:f1:a0:e1:4a:28:ed:a4:27:05:35:bb:47:7c:fa:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C6:64:1A:7E:19:32:A8:92:C7:AF:30:76:7D:A3:D0:DC:DE:BC:80
            X509v3 Authority Key Identifier:
                keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:9b:34:bd:b0:ef:94:03:7b:23:1f:71:12:8e:f2:9a:14:
         bb:5e:cc:c3:74:5c:89:56:f6:82:c2:b9:65:e8:a9:00:26:c0:
         4a:71:fb:2b:cd:ae:b4:82:f4:a2:bc:51:0c:fe:a1:af:f6:35:
         03:3d:9b:53:01:8b:c1:76:1c:ed:9e:5c:92:aa:66:fd:1f:99:
         90:8d:78:0e:1f:e6:e5:f4:e0:c9:6b:00:77:b8:3f:34:e0:68:
         97:f9:11:07:ae:32:df:96:77:12:42:3f:6f:fc:3a:ec:ac:d4:
         5a:39:37:45:a4:75:37:ff:6d:83:36:b6:80:2f:f3:bc:a9:59:
         47:8f:b4:cc:e5:42:cb:f3:2c:da:0e:1d:6f:ac:7f:e8:66:1f:
         10:17:71:8a:a4:c7:15:87:2b:df:42:14:2c:b6:31:10:64:37:
         2f:87:88:b9:85:3b:8f:87:ca:5a:7c:db:37:af:b6:33:2d:d5:
         fd:62:df:ad:b1:31:1d:fe:b4:3d:c2:0f:64:72:20:d4:8b:65:
         84:d5:58:5d:b8:7a:53:03:b5:c4:fa:07:7b:ee:d1:b9:9c:d8:
         38:f0:9e:53:20:64:51:6b:09:24:73:5e:d7:48:5d:dd:67:fd:
         58:32:58:07:49:22:d9:a1:a6:a0:ce:54:d9:b4:de:21:c7:97:
         c1:d5:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:38 2026 by rpki-client