Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          66gNBxVnOI9cozMsuIH1km+TaN7/wTlgdUFwN7p7KGs=
Subject key identifier:   C2:FF:CA:4B:6F:90:CE:F5:4A:4E:0C:22:92:02:0E:EE:B2:EF:84:CD
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       019D269649DDB79F085901BCC59510899D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          15CC
Signing time:             Wed 25 Mar 2026 20:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:16 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:16 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: ZbI6/1w5CzBu/BtfQDQnND5INHAqIDRp8XHtHsrmTaU=)
                          2: tNjZH9-x1g7HqUfJGt0InZjB23w.roa (hash: RRoUsNS1EP4tRlbwAyzXgXLAhFiDzTM4MGWjbgquZiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:49:dd:b7:9f:08:59:01:bc:c5:95:10:89:9d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Mar 25 20:01:16 2026 GMT
            Not After : Mar 26 20:01:16 2026 GMT
        Subject: CN=c2ffca4b6f90cef54a4e0c2292020eeeb2ef84cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:4e:62:f5:cf:6e:7e:31:e6:fb:8a:7c:de:
                    64:64:27:ea:f6:91:0a:53:66:66:22:60:c2:bc:83:
                    9d:8f:14:8a:53:aa:72:25:73:2c:13:75:a0:a2:ed:
                    d6:c8:b0:0e:fb:e6:c4:69:9f:73:03:3a:01:9a:8b:
                    67:fa:33:d2:40:3c:39:ad:bd:a1:a9:ae:77:be:7e:
                    c6:09:4d:5c:c0:ea:ae:f6:a0:0a:20:af:da:06:18:
                    9d:45:f8:00:95:22:79:f7:3d:ae:7b:82:d8:c4:1c:
                    b4:cc:99:cd:66:b4:24:c9:b9:fb:0a:09:9b:03:ca:
                    a4:e7:5b:6b:09:b0:02:cc:ee:27:c8:d9:74:63:c2:
                    a7:99:a9:12:26:a1:b8:0a:fd:01:99:43:21:04:fb:
                    cf:73:d3:bf:56:7b:76:37:0b:d9:25:ee:e7:ea:50:
                    47:de:1d:d4:8d:cb:86:eb:da:b7:8e:21:43:14:b2:
                    e6:54:7c:a1:5e:dc:4a:2e:59:4d:81:76:c4:32:5a:
                    7a:fc:fc:bb:fb:21:10:03:3b:b1:44:ce:c5:44:81:
                    07:9d:2c:dc:79:f7:61:8c:50:37:bd:93:89:ed:2f:
                    23:f1:73:8a:04:2e:f8:22:93:84:7d:c4:a7:55:4d:
                    2b:b9:b5:de:10:a0:52:b8:33:dd:fd:57:c6:2e:34:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FF:CA:4B:6F:90:CE:F5:4A:4E:0C:22:92:02:0E:EE:B2:EF:84:CD
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:3b:16:22:de:b7:8a:9d:60:ae:42:f0:6c:4a:93:92:ac:
         5c:6a:1a:ac:da:77:df:4d:d6:d4:07:65:ac:c8:4d:69:08:82:
         2d:ea:7b:01:b9:7c:f9:58:d9:85:e2:af:ea:fa:e4:0a:b8:c1:
         03:f6:7b:f8:37:16:85:c8:43:6a:41:b1:c1:15:71:38:08:9a:
         fb:64:26:8d:b5:8f:ed:e0:f9:9f:27:0d:4a:7d:9a:75:66:90:
         17:c1:0a:f4:b5:a7:aa:1e:7b:70:f1:5f:14:52:10:b8:da:c3:
         4e:d6:9a:e0:c4:2a:2c:3b:bf:5d:88:b6:c0:57:36:40:29:3b:
         a2:44:4b:03:40:09:ed:11:b9:8e:16:0e:a1:e1:70:99:2e:32:
         99:2d:f9:8a:24:ca:9e:96:7c:98:0c:62:29:9e:ca:f8:d5:60:
         57:04:aa:05:36:11:67:d1:48:9c:3c:7a:b2:b0:98:ff:c6:4c:
         0c:49:5c:a4:61:0e:35:76:42:20:c9:d6:f5:f2:f1:ce:28:77:
         93:70:06:ff:ae:5a:e4:44:87:18:04:50:3e:a2:e7:5d:17:6f:
         c1:f0:2f:24:f6:56:82:d3:0c:83:84:f6:5e:36:00:92:7f:39:
         6f:3a:81:06:de:eb:99:c5:9c:ed:1e:1b:07:ff:06:50:a8:68:
         42:fc:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:58 2026 by rpki-client