Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          ZI3Jqx3hJku0DROrY76/7r+g6vmX2LQo/7IewJL6oG8=
Subject key identifier:   7B:DE:31:D6:18:C6:BF:28:7F:BC:9F:6B:05:C0:B8:1E:17:13:FA:91
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019D273B28AE6BBD20BCDA8DF4748FF0DD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          07E4
Signing time:             Wed 25 Mar 2026 23:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:21 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: GT0o6f3NWhGbI+PkJ8Sgdy3kaBS/AitMSYJPzqrgjLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:28:ae:6b:bd:20:bc:da:8d:f4:74:8f:f0:dd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Mar 25 23:01:21 2026 GMT
            Not After : Mar 26 23:01:21 2026 GMT
        Subject: CN=7bde31d618c6bf287fbc9f6b05c0b81e1713fa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b8:77:89:33:93:32:33:36:61:09:34:72:6a:
                    28:5f:b9:24:40:56:0c:fc:36:6a:10:31:ed:96:b9:
                    b2:69:54:dc:b2:c7:ab:74:07:9a:85:a3:7d:fa:e9:
                    1e:b7:5c:16:05:54:db:66:bf:e1:8e:c2:78:ec:18:
                    2a:f6:45:63:28:41:d9:3f:e4:b4:c0:b5:f2:c4:45:
                    ab:92:5a:10:36:e3:54:4a:22:bb:59:ea:8b:16:bb:
                    a3:78:f5:10:a0:c1:20:55:c8:b5:91:e6:46:8f:31:
                    70:d5:6e:a2:9f:f4:32:d8:0e:89:ba:33:a2:d6:03:
                    93:3a:c7:9f:40:33:ab:f5:3c:97:fe:94:d7:a8:46:
                    fc:a1:30:c3:c9:3b:bf:5e:cd:42:98:84:a9:2f:bc:
                    98:9d:67:16:f2:5f:f7:36:cf:1b:46:69:8f:77:88:
                    a8:56:0c:6c:fa:a8:b1:b9:3a:27:7c:96:45:d4:97:
                    44:82:33:55:8f:cc:6d:38:6f:29:ef:66:c0:db:73:
                    59:07:9d:4f:bc:f1:69:ba:b0:d8:6a:3f:89:28:98:
                    c8:08:21:1b:9a:4e:4e:2e:65:13:79:de:bd:1a:a2:
                    c5:65:99:8d:53:62:96:38:d2:1c:37:bd:ee:1e:78:
                    74:cb:f1:33:a6:d5:00:7c:72:b4:e2:63:f5:56:f2:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DE:31:D6:18:C6:BF:28:7F:BC:9F:6B:05:C0:B8:1E:17:13:FA:91
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:43:6f:41:a1:de:0d:88:e8:2f:24:e9:d8:73:f3:f6:a8:5b:
         7c:fd:50:48:91:80:d2:20:51:aa:8a:34:18:01:d7:1d:d5:ff:
         1a:08:48:7b:77:ea:2c:04:73:b1:d9:1b:b5:13:c8:99:85:06:
         a5:eb:fc:40:ae:75:ba:33:4b:1e:ba:13:3f:3a:f2:5f:8c:60:
         1d:7b:85:80:bc:f7:c2:42:b1:c4:30:d4:2c:cb:33:e4:a3:40:
         b9:83:c4:9c:81:fa:db:87:3f:82:be:2e:94:c2:f2:a2:20:6a:
         c7:f7:ea:e7:80:8a:08:df:6b:4e:15:40:87:c2:83:fd:93:0e:
         1f:c1:c2:d3:c9:9e:fc:77:c4:0e:7a:7d:0c:60:1b:c1:f0:ba:
         df:31:6f:1e:a6:35:43:9a:60:14:1e:53:ad:67:35:0c:6c:67:
         50:85:56:45:5b:d3:94:95:22:6d:7b:f7:1e:4d:0e:dc:3c:37:
         82:0a:c1:83:a5:5e:23:58:30:4a:4e:2e:d0:bb:fa:b8:ab:fc:
         42:9e:a5:a0:fd:dc:c9:23:94:ec:96:23:f8:57:30:f5:ec:51:
         08:8c:9e:a8:cc:a5:49:29:6d:b6:9d:9e:b0:d8:f4:f9:76:f7:
         52:50:20:26:34:47:b5:d5:72:e3:5f:8a:90:4c:7f:93:1a:58:
         4c:57:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:33 2026 by rpki-client