Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          paJryjfgSf2o5/Ohk+J8rifF5KaNv1aG1fLw9vmhnyo=
Subject key identifier:   27:BD:AE:4E:CF:EA:DB:97:59:37:48:9C:ED:AB:B2:89:7A:89:6D:09
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       01A0E709CAB0FBF3D150D709132841C65834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          09D5
Signing time:             Mon 28 Sep 2026 08:02:53 +0000
Manifest this update:     Mon 28 Sep 2026 08:02:53 +0000
Manifest next update:     Tue 29 Sep 2026 08:02:53 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: i4844zK+SU1RwLFb/2l8sTgXyD52VJ9hQriRfExRr3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:09:ca:b0:fb:f3:d1:50:d7:09:13:28:41:c6:58:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Sep 28 08:02:53 2026 GMT
            Not After : Sep 29 08:02:53 2026 GMT
        Subject: CN=27bdae4ecfeadb975937489cedabb2897a896d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:dc:31:ac:c9:60:8e:27:7c:f4:03:e1:4a:
                    70:68:88:8f:9a:c2:88:c8:73:01:e3:de:31:cd:4a:
                    23:61:e8:2e:2b:02:f2:82:35:46:a1:1e:07:45:e7:
                    ea:d4:2e:18:a4:c5:6a:73:0f:c3:4a:4d:68:be:d2:
                    1c:3b:46:10:73:c8:24:fa:aa:c1:c4:9c:66:53:a0:
                    0b:a0:c7:b9:4e:67:ca:a2:2a:1c:a1:8a:5e:c9:b5:
                    7a:c0:68:76:9b:38:b0:08:0d:67:73:a3:d7:0c:97:
                    7b:a3:12:f4:4c:73:e6:e3:3a:d5:fe:34:49:26:01:
                    c2:12:c1:89:16:d6:c7:50:92:c0:8d:30:5f:98:07:
                    0a:f4:1b:41:7c:0c:49:d9:9a:99:27:e5:65:43:10:
                    c9:e8:02:70:a3:5a:94:21:8e:8d:53:a9:6f:05:1f:
                    e7:f6:86:f4:7c:fd:3c:c8:9e:ad:57:84:2d:71:3d:
                    c9:34:3e:14:0c:f7:2a:d3:2e:79:9e:82:4e:2d:cb:
                    a7:62:08:ad:68:6f:04:3b:0d:8b:00:9e:25:f7:6d:
                    6d:ab:ee:42:c2:5e:26:c2:06:e8:33:1a:8b:de:94:
                    d1:66:c3:b7:ad:a9:f0:80:d4:76:08:d3:6c:fa:ce:
                    64:bb:30:8d:d6:78:68:57:52:2c:61:6b:88:d3:b3:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:AE:4E:CF:EA:DB:97:59:37:48:9C:ED:AB:B2:89:7A:89:6D:09
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:fb:7a:cd:b0:d3:f2:27:c7:1b:b7:b5:25:1a:c0:42:15:
         6e:73:cf:01:0d:ad:2c:d4:95:af:0b:be:18:a6:c9:af:10:b2:
         40:88:60:b7:2d:85:34:61:1a:80:e2:0e:23:9f:b4:b1:e5:17:
         78:c0:c6:76:9e:ef:73:d0:00:02:31:d8:50:08:5c:83:7f:52:
         06:08:50:26:b9:c2:1f:76:fd:e9:e3:70:fe:0b:a0:5b:d7:8b:
         1a:89:1e:f7:6a:2b:62:10:3d:3c:b4:5b:25:31:a6:a6:4e:41:
         5d:de:f0:63:dc:0e:d5:a5:2a:52:18:e2:12:ea:ee:92:97:d2:
         d0:1a:73:7b:a1:07:0c:4a:86:d2:6a:53:04:4e:1a:7b:be:7d:
         14:ee:4c:08:6e:d4:e4:fd:98:1b:c2:10:db:2f:8c:56:7d:52:
         c6:b0:32:03:0e:31:41:98:a7:02:c6:0d:55:73:3f:a8:cf:ae:
         78:7a:ee:1e:a2:cf:8a:f2:e4:a7:b1:f1:b9:fa:f7:4f:75:ce:
         b2:57:8a:26:b2:44:3b:cc:e1:67:65:af:7c:ef:7a:a3:a5:65:
         f0:59:48:90:3a:78:c4:8e:e7:83:27:89:e5:65:9f:b3:f7:7f:
         fc:59:1d:c8:5d:d0:fa:ee:65:05:a3:d7:33:2a:7c:02:d9:55:
         76:43:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:14:56 2026 by rpki-client