Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          Ijbdz2osxKiSt4cQv1d4wFnTNBYDRx4djrfVA63FCm4=
Subject key identifier:   36:A2:CA:73:79:5F:52:88:0D:FA:A7:07:45:34:2F:2D:E9:FD:67:14
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019F93242A0F0ED919FBD284D5F0B5D7F1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          0925
Signing time:             Fri 24 Jul 2026 08:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:48 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: JNZtUEkhqV7xsWYMz68eu1s5M7Npvw+En1RSZJB8Chg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:2a:0f:0e:d9:19:fb:d2:84:d5:f0:b5:d7:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Jul 24 08:00:48 2026 GMT
            Not After : Jul 25 08:00:48 2026 GMT
        Subject: CN=36a2ca73795f52880dfaa70745342f2de9fd6714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:32:d2:fc:c6:b4:b6:80:1e:bb:ac:62:e1:
                    44:92:93:0a:97:56:f6:64:66:89:3e:65:a8:67:16:
                    56:b3:78:d0:5f:20:ba:e9:45:6e:8e:c8:ac:69:11:
                    f6:b4:50:bc:70:06:cf:7a:a2:cb:e9:92:99:a4:3e:
                    16:63:60:26:4a:2b:5e:a7:ce:db:bd:2a:29:37:78:
                    e4:3e:25:66:4d:fd:17:fd:82:29:2c:dc:ee:d1:59:
                    d9:1c:89:56:35:28:35:97:54:2c:a5:d9:c8:f0:71:
                    1c:e4:0e:1b:f1:cd:fc:6c:e1:2e:95:c9:01:56:54:
                    71:d3:5d:70:44:a2:85:49:fa:2a:36:dd:7b:28:73:
                    ba:f7:6c:6e:02:d8:3a:b8:0e:bd:55:16:91:a9:68:
                    fa:98:7e:4e:04:0b:d4:fc:20:66:d5:ec:3b:09:32:
                    28:d9:2f:5a:a1:92:d5:f5:b5:c4:07:b1:9a:9c:c7:
                    25:b9:3a:96:a6:cf:04:35:71:cd:51:90:c4:4b:4f:
                    11:ae:6a:5b:0f:59:03:ff:d2:8a:1c:60:05:f0:8c:
                    99:66:8d:ec:c2:ec:5d:23:91:73:f6:0c:8c:3b:b7:
                    77:c3:34:70:12:82:8b:59:47:c5:55:17:f3:5b:31:
                    ee:d9:a2:10:d9:d1:1c:a8:aa:1d:06:96:1a:d7:6d:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:CA:73:79:5F:52:88:0D:FA:A7:07:45:34:2F:2D:E9:FD:67:14
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:de:c8:b0:de:9b:50:b0:04:4c:cf:d7:1d:06:d8:9f:96:6d:
         61:56:59:20:df:6d:27:92:65:1c:61:58:fb:9a:80:0d:6d:65:
         33:35:e2:0f:42:db:9d:9f:ff:80:c1:fa:b5:70:90:a1:12:c5:
         f6:79:1a:17:7b:8f:b6:03:5a:d2:42:46:ad:35:72:14:1b:a9:
         43:fd:63:b1:09:07:e4:d5:59:13:1d:34:50:d5:87:ca:1d:21:
         4a:b0:9a:2f:2d:3e:91:46:80:25:de:5f:a1:a3:ad:33:61:19:
         31:db:cf:8f:b2:d2:19:4c:72:a1:9f:81:40:c2:6e:a1:63:7b:
         48:5e:09:6a:32:68:26:22:0d:ff:d5:9b:3f:20:cb:c8:2b:f1:
         8f:c3:10:df:44:e8:55:d3:8d:1a:59:3f:7b:d3:73:4e:1a:58:
         b8:da:7a:03:34:f8:ee:18:6e:72:a0:2d:31:20:81:1f:1d:21:
         22:39:e6:7d:f3:62:e2:84:45:c3:c5:65:30:3b:9c:8b:0a:7b:
         a9:90:5e:fd:bf:ce:fe:1b:96:f8:95:60:13:a6:c9:60:c6:80:
         34:10:e6:0d:fc:99:63:93:da:25:7a:79:94:ef:9b:1c:52:f5:
         f4:24:68:4a:ee:84:eb:c4:d3:ca:81:15:ca:68:54:16:45:9d:
         fd:3d:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:29 2026 by rpki-client