Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          +BytL8JdOjFfkSuLs+ycGQ2VvtPaMvV9e2uW3cwEPPI=
Subject key identifier:   92:77:B8:7A:3F:5A:A6:54:5F:C7:D7:98:B3:27:EA:C1:30:1C:DC:A7
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019E1E6CC47A687BAF6E2437F7FBE4B583E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          0864
Signing time:             Tue 12 May 2026 23:01:45 +0000
Manifest this update:     Tue 12 May 2026 23:01:45 +0000
Manifest next update:     Wed 13 May 2026 23:01:45 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: KO7UxneUKNXzDnTlgiALoLub+Eigm7nyUPoeYfP7DAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:c4:7a:68:7b:af:6e:24:37:f7:fb:e4:b5:83:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: May 12 23:01:45 2026 GMT
            Not After : May 13 23:01:45 2026 GMT
        Subject: CN=9277b87a3f5aa6545fc7d798b327eac1301cdca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:ed:73:12:52:3c:e0:11:76:80:a1:ac:be:
                    9e:eb:79:1d:2d:0c:c0:5b:cd:90:44:c3:d9:74:af:
                    13:0f:b9:e0:c3:fd:e7:e2:b8:86:ae:a9:13:13:be:
                    20:95:f8:7a:7d:99:8b:a9:a1:3d:68:a5:a9:22:2e:
                    47:35:ae:d8:37:e1:da:4a:12:73:06:87:56:05:15:
                    75:e4:40:e5:3c:d1:d3:f4:4b:dc:4b:9d:d5:0b:ab:
                    f4:db:d2:e6:02:79:28:c7:91:b0:5e:d5:0d:d0:e7:
                    e0:a7:3f:fa:cf:9a:18:3b:6a:46:e1:44:0b:ab:48:
                    64:f4:fb:86:70:72:9b:9b:3e:0c:ad:c2:e3:59:a8:
                    5c:c2:6d:70:74:2b:06:ab:90:f6:f0:1c:cf:43:58:
                    c5:45:93:d4:d3:26:e2:e9:e1:e8:9e:e9:3a:c0:65:
                    a0:a7:f8:2c:ce:7d:4f:f6:2a:43:66:65:57:d8:79:
                    53:d7:52:38:de:cb:2a:0e:3e:a2:5c:d9:93:98:a0:
                    1f:01:94:32:36:0c:1d:c7:5f:65:3e:69:f2:92:9a:
                    e1:92:f6:97:35:83:e7:a5:49:d1:66:bd:47:1b:15:
                    95:50:2f:54:7c:ec:68:e9:b3:a9:c4:40:4f:6e:f3:
                    21:15:38:45:dc:7e:d5:64:de:d0:e6:ea:8f:7e:2b:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:B8:7A:3F:5A:A6:54:5F:C7:D7:98:B3:27:EA:C1:30:1C:DC:A7
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:e2:fe:21:5d:ad:29:52:2b:ea:34:c5:0e:a1:bd:58:cc:
         44:48:f5:1b:5e:64:3b:6a:63:a7:cc:e8:fc:bd:7a:ac:da:74:
         f1:80:d8:3a:2d:3c:90:35:b4:d9:9a:8b:73:99:49:80:73:cb:
         cd:d5:5f:af:3b:dd:70:a2:3b:d5:69:ba:fb:c4:f2:ed:21:66:
         8e:21:d0:bd:5f:37:5c:e7:a2:b6:f1:ec:52:89:bb:60:ab:05:
         eb:5e:73:f4:13:c0:4b:03:8b:0b:1e:48:24:cc:fc:f2:1f:a1:
         74:43:2c:d0:ab:ab:ec:a7:bc:d5:ad:03:cd:44:6d:c3:bf:ae:
         49:18:c1:53:31:d3:6b:7f:23:25:81:6b:97:6e:1c:8c:72:bd:
         e1:49:a9:fc:e6:7a:bd:27:d4:43:73:bf:51:db:c0:22:a8:96:
         bd:6b:98:d2:3b:03:0b:60:35:4c:79:df:ac:e8:fe:a4:37:f1:
         80:c2:a8:d0:2f:a4:1f:4d:e5:68:e6:42:08:17:d1:2f:92:27:
         d9:c5:58:4d:ec:b1:17:6a:3f:3c:2e:48:9b:7e:4b:17:ea:dd:
         ee:54:6b:27:0e:96:2f:8c:a3:cc:bd:05:d5:cb:ba:0f:03:93:
         11:29:6e:2a:17:56:dc:7c:b1:52:98:e6:e4:6c:0f:6c:23:c9:
         1a:34:6b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebMR6aHuvbiQ39/vktYPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYWU0MTJjZmZhOGNiNWNmYjkzYmIzMWFiNWU5ODkwMzg3
ODRkN2YwHhcNMjYwNTEyMjMwMTQ1WhcNMjYwNTEzMjMwMTQ1WjAzMTEwLwYDVQQD
Eyg5Mjc3Yjg3YTNmNWFhNjU0NWZjN2Q3OThiMzI3ZWFjMTMwMWNkY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/7tcxJSPOARdoChrL6e63kdLQzA
W82QRMPZdK8TD7ngw/3n4riGrqkTE74glfh6fZmLqaE9aKWpIi5HNa7YN+HaShJz
BodWBRV15EDlPNHT9EvcS53VC6v029LmAnkox5GwXtUN0Ofgpz/6z5oYO2pG4UQL
q0hk9PuGcHKbmz4MrcLjWahcwm1wdCsGq5D28BzPQ1jFRZPU0ybi6eHonuk6wGWg
p/gszn1P9ipDZmVX2HlT11I43ssqDj6iXNmTmKAfAZQyNgwdx19lPmnykprhkvaX
NYPnpUnRZr1HGxWVUC9UfOxo6bOpxEBPbvMhFThF3H7VZN7Q5uqPfitK0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ3uHo/WqZUX8fXmLMn6sEwHNynMB8GA1UdIwQY
MBaAFC+uQSz/qMtc+5O7MatemJA4eE1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2Mt
ODMwYjIyZGQyZGVhLzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2MtODMwYjIyZGQyZGVh
LzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF/i/iFd
rSlSK+o0xQ6hvVjMREj1G15kO2pjp8zo/L16rNp08YDYOi08kDW02ZqLc5lJgHPL
zdVfrzvdcKI71Wm6+8Ty7SFmjiHQvV83XOeitvHsUom7YKsF615z9BPASwOLCx5I
JMz88h+hdEMs0Kur7Ke81a0DzURtw7+uSRjBUzHTa38jJYFrl24cjHK94Ump/OZ6
vSfUQ3O/UdvAIqiWvWuY0jsDC2A1THnfrOj+pDfxgMKo0C+kH03laOZCCBfRL5In
2cVYTeyxF2o/PC5Im35LF+rd7lRrJw6WL4yjzL0F1cu6DwOTESluKhdW3HyxUpjm
5GwPbCPJGjRrHA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:11 2026 by rpki-client