Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File:                     L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier:          Wft2+nukDd3oWtslGLM54tLj/wkdsskCNJK1qIQriOM=
Subject key identifier:   8B:D8:E7:80:03:1D:10:64:B4:2F:BF:21:91:E6:66:39:72:C0:94:6F
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer:       /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial:       019E1E6C7602DB758818BE427CCAF1FA962A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number:          0302
Signing time:             Tue 12 May 2026 23:01:24 +0000
Manifest this update:     Tue 12 May 2026 23:01:24 +0000
Manifest next update:     Wed 13 May 2026 23:01:24 +0000
Files and hashes:         1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
                          2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: hfV9TQrWY2gmZBJ2k58hugnJ3Xild2dkpmo+N2iSInM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:76:02:db:75:88:18:be:42:7c:ca:f1:fa:96:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
        Validity
            Not Before: May 12 23:01:24 2026 GMT
            Not After : May 13 23:01:24 2026 GMT
        Subject: CN=8bd8e780031d1064b42fbf2191e6663972c0946f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:7f:92:3e:9f:4f:59:1d:81:ac:42:61:28:
                    ee:0a:d9:c8:23:6f:21:ce:13:ff:67:8a:e8:3c:12:
                    5d:de:ff:37:d0:16:ba:b4:d1:be:40:96:8c:d7:b4:
                    2f:2c:ce:37:1c:60:2a:72:5a:b2:c2:46:bd:9a:a6:
                    06:b9:32:92:7f:57:55:75:61:ff:59:e7:a6:da:b9:
                    49:a5:db:e1:7e:d9:a6:cf:9d:ca:70:b4:5b:6d:5b:
                    58:58:89:d1:28:34:73:18:38:84:e4:68:8b:f0:13:
                    6e:7f:91:8e:e8:0b:91:ea:d8:12:c8:9a:85:b2:e9:
                    5d:d7:51:a8:58:37:9c:e8:1f:72:87:98:60:eb:f4:
                    bc:d2:d2:55:5a:82:0d:6c:06:4e:3d:2d:4d:66:a4:
                    56:82:46:cb:36:58:1b:22:65:6c:18:25:e8:ff:d6:
                    18:d6:02:3e:3e:5f:4b:01:fa:b3:2c:13:61:ab:bf:
                    63:dc:0a:d3:bc:7a:65:eb:24:ed:d6:92:49:0e:26:
                    67:43:bf:b2:2c:03:5c:b5:b4:2d:91:bd:ca:c1:45:
                    36:50:ee:e2:14:86:56:8d:c8:71:72:fa:1f:55:4e:
                    c8:5f:2b:44:24:fb:75:d1:a3:6f:3a:8c:d9:6e:65:
                    72:ed:5d:c3:e5:33:b5:a0:6b:4d:d8:66:23:df:29:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:E7:80:03:1D:10:64:B4:2F:BF:21:91:E6:66:39:72:C0:94:6F
            X509v3 Authority Key Identifier:
                keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:42:c3:96:24:31:60:c2:7f:e0:9b:4b:bb:f8:c1:54:de:d7:
         23:9d:a8:0d:18:5b:c8:6c:d1:9d:22:14:25:56:bc:2e:7d:7c:
         1b:3c:a0:8b:92:c3:e6:a6:ad:1e:e3:97:4c:f1:cc:1e:22:63:
         fc:58:e3:2a:82:f4:b7:11:d6:fd:13:42:29:76:d0:f0:1b:ce:
         20:ae:00:86:7f:eb:e0:d3:50:52:64:ce:bd:f6:75:c9:76:a2:
         56:70:6d:ef:d3:e6:d9:a8:08:df:69:68:bc:5f:55:9f:93:ba:
         e9:ee:c2:68:28:a0:d5:be:a6:0e:ed:ae:f1:eb:bb:6c:7a:2c:
         86:d1:25:1f:fa:d9:36:13:51:6f:1b:64:16:a0:30:31:7d:16:
         27:85:00:0b:ae:b7:c4:b2:de:e9:73:66:fc:0e:5c:31:05:3a:
         4d:e4:1a:36:17:6f:54:4e:46:46:b6:88:d0:a5:40:84:99:4d:
         f2:37:4b:b5:1b:2b:b0:cd:6f:cf:01:08:bd:62:38:19:c9:f6:
         74:0d:62:a5:19:35:20:38:44:34:82:9d:79:f7:a9:ac:4a:03:
         a6:45:9e:32:4f:b1:3c:98:0d:8f:0c:05:ef:0f:b2:37:a1:35:
         a3:f4:2f:fe:85:43:33:9c:4f:e8:8c:40:d1:92:82:44:e4:ed:
         bb:93:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:11 2026 by rpki-client