Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          OjkoWsORIndkBfB0OUbL8l7ZEKOMHblRjw3omUnhMzU=
Subject key identifier:   F3:D7:24:BB:05:6F:50:2C:65:B4:17:F1:B0:DC:DD:34:65:CB:A7:17
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019EC0A42251485117CF79C63CF6DDDBF906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          08B8
Signing time:             Sat 13 Jun 2026 11:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:42 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: Cj7eaUO7OKVQtrNBEmGG51CkI8jQ3K8j5l0WS8vrcC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:22:51:48:51:17:cf:79:c6:3c:f6:dd:db:f9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Jun 13 11:00:42 2026 GMT
            Not After : Jun 14 11:00:42 2026 GMT
        Subject: CN=f3d724bb056f502c65b417f1b0dcdd3465cba717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:6c:6c:79:8d:22:aa:09:5d:a0:90:16:20:
                    50:4a:e9:f5:aa:a8:81:cc:7c:99:38:14:d2:64:78:
                    ff:1a:eb:1b:0f:bc:30:cf:0a:dc:3d:fb:ff:9f:fc:
                    e5:78:7f:59:f6:40:74:88:e0:1a:bb:31:d4:55:ba:
                    bb:13:fb:e3:3d:4e:4e:95:72:5c:fb:4f:ce:83:6a:
                    b3:0c:77:f0:bd:c2:b9:ad:78:9e:b7:72:a6:7d:ce:
                    4a:d0:60:05:f4:8c:9b:3d:28:f8:ac:87:4b:86:70:
                    e6:d0:66:9f:d9:93:e2:da:25:75:33:85:b6:e4:86:
                    3b:70:d1:c9:5c:4d:14:c3:30:65:34:d7:56:9c:61:
                    0a:95:0d:34:55:a5:51:7a:cf:85:e3:b1:24:61:95:
                    26:91:1a:df:a2:97:12:29:59:2f:80:22:e9:52:a5:
                    08:fb:4f:b3:0f:2b:15:8e:ba:b9:0c:83:07:20:e3:
                    04:44:15:c0:b5:bd:86:45:2a:d8:35:f3:2d:c5:1b:
                    68:f6:33:54:16:fe:50:43:e1:40:cd:db:a4:d0:64:
                    be:9b:31:81:14:35:64:7f:ff:d5:fa:46:57:d3:67:
                    f6:7d:3f:28:36:81:93:29:51:e6:6b:dc:dc:38:80:
                    a0:3d:e5:2b:d2:0d:f2:24:56:67:05:e0:b6:9f:88:
                    01:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:24:BB:05:6F:50:2C:65:B4:17:F1:B0:DC:DD:34:65:CB:A7:17
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:12:7c:41:6c:c7:26:44:76:5b:83:ef:ca:18:f4:37:55:
         97:9a:43:2f:f4:5d:9d:58:7e:fc:ec:16:55:e0:ec:ca:34:6b:
         8c:79:37:09:ba:0a:fc:28:0e:45:3b:e4:8f:3e:54:35:c7:f5:
         4a:ca:74:b6:d1:6a:2e:1c:5f:f4:f8:34:70:1c:28:c1:51:d2:
         33:4a:f3:45:46:84:61:c5:d3:50:91:ad:65:93:bf:b3:26:ca:
         ad:35:95:b4:da:0f:fe:81:3b:83:ee:8b:4d:50:6f:89:7c:76:
         a9:f6:1b:d3:ac:dc:9c:0d:73:66:f0:f6:fb:15:54:71:60:5b:
         f3:ab:f2:62:fe:b9:b4:48:e0:36:b0:c2:07:b0:67:c3:58:ef:
         ed:39:5d:2e:d3:99:4d:b4:85:03:0b:02:a7:04:69:51:51:b8:
         5d:b7:bd:0c:31:ce:54:6b:a7:48:e8:a2:2e:ba:67:49:89:ab:
         5d:80:52:86:0c:f5:d4:7f:b2:3c:4e:c9:da:52:77:16:80:e2:
         a1:96:3e:22:ea:c4:db:77:43:f4:4f:f8:d9:d7:72:cc:5b:81:
         1d:ee:2b:79:3b:96:42:fb:46:38:ce:f0:be:ac:08:38:e8:f1:
         d4:c3:bb:3a:08:23:f0:9c:03:6d:f2:88:33:e2:cd:e6:97:10:
         cd:95:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:56 2026 by rpki-client