Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File:                     L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier:          kvZry02YNAWkc5DuHV8u5CUf5gDbfQc+xXwYemRUyVQ=
Subject key identifier:   A3:D9:ED:BB:80:3A:F1:08:B5:F5:5F:D8:1D:55:27:8F:9E:EC:06:FD
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer:       /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial:       019D33E39FC8718A0A731E9AB2F4F9603B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number:          11A8
Signing time:             Sat 28 Mar 2026 10:00:48 +0000
Manifest this update:     Sat 28 Mar 2026 10:00:48 +0000
Manifest next update:     Sun 29 Mar 2026 10:00:48 +0000
Files and hashes:         1: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: yKPRZNAWLGT/8IC9Y5Gb6vVs62bo1VmLUViF3MYR7Qk=)
                          2: VJNeRODqD6T5IMeQoh6SGZFSsUA.roa (hash: Zl8wYu5uQXUxR+F5/UErv6oGRThFNITBwnj1Q2V8QHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:e3:9f:c8:71:8a:0a:73:1e:9a:b2:f4:f9:60:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
        Validity
            Not Before: Mar 28 10:00:48 2026 GMT
            Not After : Mar 29 10:00:48 2026 GMT
        Subject: CN=a3d9edbb803af108b5f55fd81d55278f9eec06fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:22:85:56:5b:3d:cc:4d:c3:51:ab:09:a4:
                    76:a2:86:b6:1e:8c:b8:76:aa:41:b6:96:82:c5:a1:
                    46:53:7a:5d:6f:7d:b7:09:f4:e1:e1:f6:86:80:bb:
                    4f:09:89:6e:7e:fa:1e:ea:74:35:f1:c9:ab:c9:c7:
                    dc:a8:a9:bc:52:47:11:69:9d:69:c8:d7:b1:cb:4d:
                    58:11:2a:f1:18:69:9a:b8:c2:f3:8b:6f:af:77:6a:
                    8b:b3:d9:6d:5e:f9:05:71:c2:71:7d:ea:00:78:f4:
                    8d:11:2a:17:8c:4d:ee:73:1c:48:bf:10:c5:e4:d2:
                    3b:5d:41:29:af:6d:ad:45:40:5d:dd:e7:a5:e0:01:
                    34:12:f1:c1:91:ea:d4:5e:8c:2e:d3:9c:64:10:9e:
                    b6:01:95:9e:7c:a4:ae:d0:15:65:c9:5a:43:f5:74:
                    10:4d:e6:46:63:eb:5a:44:6c:f1:82:94:e4:7e:90:
                    4a:3a:f0:e3:f6:a8:17:78:28:6c:8a:23:1b:ff:3d:
                    f0:6b:c6:03:e4:e2:9a:ed:d9:bc:f3:cb:c2:51:d7:
                    c9:53:10:f6:ff:cd:c8:8a:c3:b0:5b:02:95:d4:a2:
                    11:5b:8e:1e:87:a1:8c:a8:f2:ea:cf:dc:fd:ef:c9:
                    cb:3c:86:bc:3c:f5:c4:68:b1:1c:38:ae:f6:c2:1b:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:ED:BB:80:3A:F1:08:B5:F5:5F:D8:1D:55:27:8F:9E:EC:06:FD
            X509v3 Authority Key Identifier:
                keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:31:4d:27:b9:c4:08:14:4d:56:be:40:19:54:05:2f:97:
         c4:54:4c:41:a6:dc:ab:17:56:ce:e9:fd:66:3f:62:25:48:fe:
         15:bc:d1:b1:22:75:d7:0b:3c:d6:1e:a0:5d:5b:59:92:ad:06:
         a0:99:47:df:52:50:67:1e:bb:c5:8d:b6:aa:53:8c:d5:5e:53:
         78:49:1e:e3:73:ec:50:8f:9a:02:a3:4c:f6:23:d1:f5:70:65:
         92:88:d2:c8:e3:08:97:80:04:94:14:4c:d1:bd:fe:45:15:be:
         d0:8c:55:4d:84:65:18:b8:f4:58:2e:b5:9b:11:58:30:46:ec:
         85:4d:fe:5a:b4:87:0a:0e:64:35:47:20:38:7b:be:40:87:8d:
         8c:cc:1b:23:61:81:da:f6:34:0c:44:13:61:d9:8c:a0:e2:d0:
         fd:ba:e5:b3:ad:b8:58:3a:3d:07:d1:b0:ba:3b:e6:16:4e:e1:
         84:f3:51:81:62:c0:b6:16:fa:7e:bd:d6:61:40:17:28:d9:0e:
         64:5f:72:cd:e6:ca:d7:e7:7a:f8:cc:70:24:c1:83:4e:cd:1b:
         06:31:ea:e8:b3:96:f4:55:aa:ee:47:31:dc:20:ac:f9:3f:b4:
         83:09:44:6d:88:08:72:a9:d4:b8:92:c7:54:0c:1a:bf:7f:d5:
         67:c5:6e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:00 2026 by rpki-client