Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          cSYZsj8J9F4kpcP6mZ2j6S7QFxRtaLWxSYCHek20YkQ=
Subject key identifier:   8E:50:8B:F6:C3:0F:12:68:B8:2C:32:8B:FC:BA:A1:C0:AD:61:EA:E3
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019D992B5E70BC8852D54A982663EEB76027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          081F
Signing time:             Fri 17 Apr 2026 02:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:49 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: oSXwV3sfSc4lOgbDyzF1NPoARCFI4zyOTcZvcfdHvJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:5e:70:bc:88:52:d5:4a:98:26:63:ee:b7:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Apr 17 02:00:49 2026 GMT
            Not After : Apr 18 02:00:49 2026 GMT
        Subject: CN=8e508bf6c30f1268b82c328bfcbaa1c0ad61eae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:ca:24:70:b9:8a:88:e7:3e:21:05:c8:e7:
                    84:89:2a:8d:39:46:39:53:91:51:fa:6b:05:85:da:
                    9f:0b:3d:f8:70:a5:08:51:7a:ae:0a:e0:2e:7c:4b:
                    2d:7d:4c:9e:18:41:c5:12:5d:a4:16:56:9b:13:c9:
                    cd:fd:b0:05:16:d0:59:3b:5c:56:77:f9:4c:c1:76:
                    c9:9a:ff:c4:79:0f:fe:5d:e2:46:96:0d:a9:5a:a4:
                    a4:56:b9:39:10:ac:b7:07:33:6f:fb:fc:71:f9:c9:
                    6d:c7:c2:13:24:4c:10:81:2a:50:9f:7b:2a:56:2b:
                    d8:5d:f4:e5:a0:e5:09:e0:c9:91:2d:32:23:7a:f0:
                    dd:da:3c:48:14:f3:f5:b9:f3:af:c4:ab:ff:3f:db:
                    d1:bd:87:8a:98:c1:95:44:36:38:f1:c4:e6:15:f6:
                    34:f8:33:ac:69:18:b3:d4:d1:d6:db:6a:d7:b0:d8:
                    d5:62:75:8c:34:34:12:3f:4a:31:6b:13:05:13:32:
                    21:ce:1f:cd:d7:03:fc:35:4a:f7:20:bb:76:5e:64:
                    5d:30:b5:41:32:8a:de:6b:df:a6:17:f0:4a:73:67:
                    46:65:a6:49:15:e2:4c:14:8d:38:2e:b7:2f:16:2a:
                    a2:5d:e0:ee:5b:08:11:4a:75:e0:c3:d2:a6:ee:74:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:50:8B:F6:C3:0F:12:68:B8:2C:32:8B:FC:BA:A1:C0:AD:61:EA:E3
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:b0:7f:ee:63:22:bd:12:95:78:b2:a8:1e:1a:d6:b5:1d:
         41:81:e1:59:c2:45:9b:e4:21:54:78:3b:18:84:b1:af:87:c2:
         f8:c3:96:5e:6e:db:e9:58:f0:58:bb:c3:69:d0:61:a2:e2:05:
         5e:cd:1c:12:58:00:e8:72:21:2c:5b:e7:85:a1:4a:0c:70:9f:
         62:4b:51:59:e8:14:3b:b1:72:6d:f6:53:1c:7e:08:1b:6c:91:
         4e:9e:cc:6d:cb:72:0d:6f:5a:e4:3e:f3:cb:8d:87:71:cf:fe:
         56:c2:1a:80:7d:f2:3f:72:f4:51:51:43:4a:5d:00:0c:5c:3c:
         a0:4c:76:92:19:db:62:95:3c:ec:11:8c:7a:5e:72:f7:51:a3:
         fe:bf:c7:ed:18:d3:c7:7d:7a:97:5a:86:52:fa:48:d8:62:49:
         9c:5e:34:0f:61:20:9f:98:f2:ef:8d:22:74:42:ad:8f:b3:ee:
         a3:3e:3f:b7:92:c8:b1:ff:9e:ff:8a:9a:01:cf:d6:1e:b0:8b:
         2b:6a:74:2a:21:ce:0b:93:9e:5c:ea:01:4e:b3:d4:9c:7a:2b:
         d5:e6:f9:62:ac:a7:04:54:c2:d1:70:9c:75:c8:d0:01:a7:0a:
         68:dc:2c:ad:25:3b:ad:95:e8:ff:18:12:5e:9c:53:89:95:a0:
         4a:21:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:50 2026 by rpki-client