Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          xgvk48UV0D2ZlHa88RP1u/AEAFcLIpnMs9LtKLJywMg=
Subject key identifier:   37:07:74:38:57:A3:2E:2A:03:A0:0E:D6:6C:03:9A:E2:25:FF:18:C3
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019FAC3F526AF0CDCEB98061928F2798DF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          0932
Signing time:             Wed 29 Jul 2026 05:00:58 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:58 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:58 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: yXa4ThC/tNHShqwkBsZoG/vdIHF0V+19bDYBq+C8VlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:52:6a:f0:cd:ce:b9:80:61:92:8f:27:98:df:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Jul 29 05:00:58 2026 GMT
            Not After : Jul 30 05:00:58 2026 GMT
        Subject: CN=3707743857a32e2a03a00ed66c039ae225ff18c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d5:dc:d3:3d:23:a2:bf:6e:54:e1:15:0c:e0:
                    82:c6:75:0e:71:80:53:cb:f3:2d:62:66:84:45:94:
                    8a:4d:52:cc:c6:cc:fe:78:81:3c:54:31:63:3d:8b:
                    d1:b8:79:1c:e6:01:5c:d4:ed:af:7c:59:a7:71:cb:
                    d3:a6:e1:7d:61:0e:aa:0f:25:ac:7c:79:09:50:9b:
                    8d:4b:12:1b:24:58:30:f6:1e:c4:0a:18:cf:3e:7f:
                    f2:be:4e:b7:67:cf:f0:d9:a4:05:2d:68:e7:40:6a:
                    3d:79:8a:b1:c8:b0:66:70:9e:b9:16:4e:64:a6:b6:
                    43:b8:53:d4:60:0b:89:91:90:62:f3:f9:84:a7:2c:
                    a9:77:d6:5e:8a:2d:d4:8c:dd:0a:9b:b5:f8:cc:e2:
                    c3:13:d4:1a:25:67:33:8a:41:4b:a3:df:9c:1d:c5:
                    b8:b7:22:85:2c:f6:37:df:1c:f0:45:61:8d:df:64:
                    4e:1e:96:63:95:fa:26:29:89:46:63:2a:0a:1b:ac:
                    d8:a4:99:14:8a:3d:af:ea:68:23:ee:41:10:2c:f9:
                    2d:32:9a:47:ba:7c:c7:17:a1:06:50:dd:16:aa:de:
                    ea:bb:fa:bc:07:16:33:c4:7a:e9:b9:61:04:6e:d8:
                    fb:70:32:bf:5b:fe:65:a1:94:b7:03:08:5d:8a:c3:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:07:74:38:57:A3:2E:2A:03:A0:0E:D6:6C:03:9A:E2:25:FF:18:C3
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:cc:d5:81:72:65:85:9c:c2:07:eb:bf:6b:fc:18:81:de:
         95:42:90:e9:4b:02:14:1a:77:f6:b0:b7:78:ff:c0:c4:55:8e:
         a2:70:64:66:fe:2e:84:d3:11:85:b9:df:9a:16:bb:7c:06:7c:
         08:47:8f:76:3d:bf:f2:38:c6:d0:f7:86:56:82:c6:27:d0:53:
         97:ed:18:da:9d:ff:be:f7:ab:58:57:1e:6b:93:2e:9a:47:c9:
         85:15:1c:49:eb:73:a7:df:2d:e0:88:6d:ba:e8:c0:38:5f:84:
         8a:68:02:43:d1:24:22:d7:64:1a:6d:6c:fa:11:8c:49:db:cd:
         1c:a9:a1:1a:fc:89:59:bf:f8:a0:42:65:e9:6d:71:9b:3c:ce:
         c4:d5:66:14:ab:4f:d6:ec:f9:a4:48:b7:35:a3:56:8c:91:21:
         d6:f6:9a:fe:05:e5:e9:f6:e3:79:41:b8:48:14:15:99:f3:1e:
         45:9e:be:79:96:95:8d:62:63:20:c0:d3:22:c5:09:90:a6:d2:
         f8:22:4b:c2:2a:4f:6d:c3:56:c6:44:c9:06:43:02:40:82:26:
         c9:36:e8:98:fd:19:48:65:3a:f7:2d:02:0f:a6:0f:99:c8:c1:
         26:97:ed:c1:d7:88:a4:2c:33:b7:1d:23:de:0a:de:11:2e:5c:
         52:7c:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:13 2026 by rpki-client