Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File:                     L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier:          Sc28VzrhdMiMndXYxtvWJ1adzxWEdFGmUOYRDYsxqro=
Subject key identifier:   B2:87:2D:A8:81:07:FF:37:82:82:4E:11:A2:D5:BD:45:EB:97:E8:F7
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer:       /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial:       019D9A3E0FE34E4A8E083CB71BF0BDD170A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number:          11DD
Signing time:             Fri 17 Apr 2026 07:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:51 +0000
Files and hashes:         1: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: msVEBx6Oxow/faxQEqSWzko6bzCzHHw46CLf9IW0itI=)
                          2: VJNeRODqD6T5IMeQoh6SGZFSsUA.roa (hash: Zl8wYu5uQXUxR+F5/UErv6oGRThFNITBwnj1Q2V8QHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:0f:e3:4e:4a:8e:08:3c:b7:1b:f0:bd:d1:70:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
        Validity
            Not Before: Apr 17 07:00:51 2026 GMT
            Not After : Apr 18 07:00:51 2026 GMT
        Subject: CN=b2872da88107ff3782824e11a2d5bd45eb97e8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:56:59:79:5e:73:46:de:b2:0e:a3:65:06:
                    8d:b5:57:f9:3a:19:6d:1d:97:90:a3:7a:7c:46:5c:
                    fb:5d:b8:6c:d4:97:65:28:59:ad:64:42:01:50:2e:
                    6d:11:1c:ca:e0:a3:b5:30:f5:1b:ad:c5:34:11:2c:
                    82:c9:7b:e0:de:23:a4:98:ac:bd:7e:20:35:42:c8:
                    43:a7:dd:f3:70:8c:29:d0:9d:6f:f1:ca:a2:00:58:
                    31:21:e3:3b:61:16:a1:b6:1d:70:be:41:57:5f:33:
                    c6:1b:47:05:48:54:f1:82:a0:4f:58:10:43:a1:75:
                    21:ac:48:69:f6:a1:9a:ba:1f:05:06:78:ae:f2:31:
                    f5:81:80:d9:26:d5:8f:28:c2:83:13:c5:90:97:ee:
                    e0:9b:2d:c2:80:f6:b5:f1:7b:99:75:c7:5a:7b:7a:
                    a5:12:ef:f6:67:f1:59:7f:f2:97:f3:fe:26:47:21:
                    8a:61:4a:91:eb:a9:57:4d:83:d0:92:ca:39:32:12:
                    54:c4:39:56:05:11:7b:2d:65:df:c6:9f:b4:0e:ac:
                    20:25:cc:15:ac:4e:29:2c:ef:90:a5:26:19:3d:4e:
                    f5:78:5e:2f:21:c5:f1:f3:59:a0:be:a5:86:de:9d:
                    6b:c4:45:1d:b5:32:b7:34:1b:32:8b:38:6e:49:7e:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:2D:A8:81:07:FF:37:82:82:4E:11:A2:D5:BD:45:EB:97:E8:F7
            X509v3 Authority Key Identifier:
                keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8b:48:ed:fa:bd:52:d5:53:91:4c:88:2a:ae:ac:95:74:8e:
         10:bf:59:c9:92:e9:95:e8:64:d5:cc:4d:90:8f:d0:78:9e:77:
         82:01:11:a6:d9:eb:c0:06:a3:58:08:7e:7a:c9:81:c2:a9:3d:
         72:70:03:53:0b:42:0e:c2:ea:96:c5:fc:7c:73:75:35:6a:97:
         77:4a:eb:46:c8:d8:3f:c7:1c:05:b3:8e:f6:02:4c:24:94:e8:
         7b:57:7e:0d:dd:dc:23:06:1f:9c:4d:f8:cb:9f:5d:fa:b8:c4:
         12:66:5c:42:77:1f:e2:d7:65:9e:a9:b7:6d:d6:11:da:ef:6e:
         3a:67:f5:e1:7f:a9:8f:31:a4:31:9a:73:13:bb:78:7e:86:6a:
         9b:55:0f:ee:09:6f:7b:5a:76:42:e3:1b:79:3f:d4:5f:38:fe:
         0f:1e:fa:be:d1:e7:26:35:bd:df:b4:5d:b9:45:9f:ab:02:97:
         b7:7e:30:48:f3:79:ce:92:55:dd:dc:6f:a0:5d:c3:4e:e8:52:
         dc:07:fb:31:11:7c:34:63:9a:d7:0e:b5:1b:64:c4:0a:88:18:
         04:d5:a7:20:81:41:fe:eb:b1:97:8f:22:36:3e:64:9c:85:bf:
         ae:0c:7f:d3:11:21:88:73:f0:c6:60:d5:c9:60:46:80:21:fe:
         6a:ce:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:47 2026 by rpki-client