Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File:                     L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier:          8IDIwva6p6vL6Ibc7V+AHDVPXexjnqtKoXPAUsqTDQc=
Subject key identifier:   FC:2B:47:CD:83:A8:4C:75:13:B6:CA:A4:34:53:ED:70:4B:BC:9C:1D
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer:       /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial:       019D2960B3356471ED9E5507F9A26AAC34FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 09:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:36 +0000
Files and hashes:         1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: xyJhDyi4huAwSu70eteiScUP+7DXaVy8oA48WOiBKkg=)
                          2: ZdecR8hrX1YyqMPIY67JKVKzZYs.roa (hash: XQ5g2MwADxNwGR3HYTHgJ2RXEI0r1OdjOA+p9hgVMZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:b3:35:64:71:ed:9e:55:07:f9:a2:6a:ac:34:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
        Validity
            Not Before: Mar 26 09:01:36 2026 GMT
            Not After : Mar 27 09:01:36 2026 GMT
        Subject: CN=fc2b47cd83a84c7513b6caa43453ed704bbc9c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:2c:96:a4:83:93:65:ff:68:bd:53:c9:ca:
                    ee:cc:3b:d2:9b:1e:85:c4:d2:a3:82:50:0f:c6:95:
                    8c:6c:a5:04:b2:d5:1b:cc:8d:4b:8e:c1:c1:15:40:
                    ab:98:bc:f0:02:03:0d:e8:42:03:dc:fe:84:54:76:
                    db:f4:9a:5e:16:bd:1f:82:5b:29:de:95:87:91:bb:
                    89:ce:82:4d:6f:04:86:d2:a5:87:55:52:11:f7:91:
                    a0:56:58:eb:cb:86:37:35:ad:76:fe:9e:8f:c1:cd:
                    5a:6a:b0:36:17:ea:62:22:e7:8a:7b:45:81:0f:e0:
                    64:78:5c:c9:2a:19:11:ca:92:f6:dd:24:e7:90:81:
                    fa:0d:d3:e3:0f:93:17:4f:86:45:2d:8d:7f:c1:93:
                    35:9d:11:5c:22:e8:5c:ec:a9:90:44:b1:9d:5c:56:
                    c7:ca:97:f1:6c:59:98:e3:38:0b:c9:82:71:43:ba:
                    d5:90:b9:52:14:d0:45:a1:a5:c8:82:29:17:8e:5b:
                    25:56:ff:4e:8b:b7:7d:a9:4b:b7:65:cb:79:57:58:
                    c0:98:f9:c2:bf:4c:ef:ed:21:fd:ae:b8:93:d2:40:
                    12:c0:bf:86:76:5d:1f:84:cd:bd:65:89:3f:7a:17:
                    27:2b:1d:75:8c:f7:12:3d:07:ef:e3:02:ec:46:af:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:47:CD:83:A8:4C:75:13:B6:CA:A4:34:53:ED:70:4B:BC:9C:1D
            X509v3 Authority Key Identifier:
                keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:54:45:fd:d2:fa:31:86:c8:b3:4e:90:ca:e1:d8:51:14:40:
         83:3d:21:a5:f6:77:16:d3:bc:fb:05:bd:d2:c6:5f:61:57:4e:
         f2:91:fa:f9:9c:d6:30:a0:fb:35:3f:1d:60:06:5c:65:f2:0f:
         e9:06:4a:2e:60:99:cc:18:9b:ba:19:6a:06:d2:1e:8c:a7:d4:
         82:ed:a9:54:42:f3:a3:74:c1:d4:3e:11:95:ef:98:5a:74:01:
         60:5a:1e:94:20:70:a8:3c:2f:0f:06:94:0c:07:ba:a0:9c:ef:
         67:1c:98:22:6a:f7:a8:0f:aa:99:92:50:28:fe:5c:38:0f:77:
         d7:fc:81:cd:c0:ff:91:f1:6b:c4:b0:a1:3f:d6:21:f4:dd:d1:
         05:68:90:cd:89:dd:34:67:90:61:3f:ea:c6:34:25:ea:af:8b:
         34:96:91:63:c1:1e:ea:34:44:d3:86:a0:ec:a3:b2:83:c9:9a:
         ec:0c:a7:99:99:78:12:b7:f3:f5:e3:5f:e3:0f:b6:cb:0e:92:
         2a:d7:5d:d2:5b:75:4b:2f:11:f1:e3:39:c9:f8:76:ef:2f:c0:
         52:f6:38:14:5d:7d:bb:ab:a2:e6:06:b1:93:64:6f:28:96:e5:
         98:aa:f1:ad:77:87:e9:df:9d:2c:8c:d2:be:51:7c:c8:a2:8f:
         d4:7e:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:11 2026 by rpki-client