Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          YoW3oitdI68d0U0yv8GFG9/qnDgnzxquioj89/JLeVA=
Subject key identifier:   DC:9D:FA:F1:48:88:E2:33:17:67:C0:A8:B5:E6:72:06:3C:D6:2F:7B
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       01A08B9EDAFC53670427BE54D336A66151EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          1844
Signing time:             Thu 10 Sep 2026 14:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:38 +0000
Files and hashes:         1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=)
                          2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=)
                          3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=)
                          4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=)
                          5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=)
                          6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=)
                          7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=)
                          8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=)
                          9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=)
                          10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=)
                          11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=)
                          12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=)
                          13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=)
                          14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=)
                          15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: nSgLsWWhl8MAQLIBNVZLOdXDtHfqjYACuWtUmtavCRU=)
                          16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=)
                          17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=)
                          18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:da:fc:53:67:04:27:be:54:d3:36:a6:61:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Sep 10 14:00:38 2026 GMT
            Not After : Sep 11 14:00:38 2026 GMT
        Subject: CN=dc9dfaf14888e2331767c0a8b5e672063cd62f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:34:2a:b3:66:97:22:5d:bb:49:42:6d:46:
                    90:e1:d6:eb:b2:74:d3:ce:20:e3:b6:7a:e8:57:f2:
                    ef:fb:e4:f3:12:c2:90:56:84:d9:21:fc:20:24:8c:
                    0a:07:f9:d3:ce:35:9e:13:2b:6d:ca:da:9e:f5:77:
                    da:08:a1:89:18:45:ec:55:1d:c4:e9:64:36:73:4d:
                    33:e1:ec:83:97:3a:07:66:7a:cd:4f:fc:a2:ad:26:
                    83:fd:b0:da:25:a4:ba:84:1d:c7:da:15:19:ad:e7:
                    c1:df:09:98:6c:06:f6:99:f5:53:9e:a5:1c:a8:80:
                    be:60:0a:a5:ac:2e:93:af:c2:8b:49:f3:cd:73:85:
                    80:e9:af:91:b4:54:f1:03:22:8f:0c:ea:1e:8d:2a:
                    e4:7a:8e:87:2a:ea:90:21:9d:a3:2a:7d:11:61:05:
                    cc:5d:75:0f:16:68:48:c6:ba:f8:f5:fd:a2:8d:e6:
                    7c:72:21:3a:ad:b5:be:73:ab:82:e4:fe:29:4f:7f:
                    bc:60:33:50:62:3c:97:54:24:50:77:32:df:b0:76:
                    fe:8a:dd:cc:8c:8f:bb:0c:40:60:30:84:ac:1c:1d:
                    8d:a7:e9:1e:88:af:47:0c:1c:42:bc:18:99:ef:b1:
                    bf:5b:9f:0e:00:42:f2:11:a5:7f:4f:fb:b6:0c:61:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:FA:F1:48:88:E2:33:17:67:C0:A8:B5:E6:72:06:3C:D6:2F:7B
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:e0:a6:57:1b:c3:48:69:c8:22:6b:4c:35:fe:59:df:1c:
         60:09:05:33:9f:80:3c:a8:f8:4d:7b:b4:76:72:8d:5c:87:3f:
         9d:2f:5f:45:9b:e7:40:d4:c5:3d:77:7f:0d:f9:f3:4f:8c:89:
         cb:b7:44:f9:d2:dc:7a:f8:0e:e2:02:05:22:26:7e:ff:18:c4:
         85:9b:61:99:2c:9b:b1:7b:bf:c2:ab:06:05:c1:66:c0:b0:0a:
         2b:96:cf:c4:10:05:cb:b3:4d:53:33:46:3c:be:91:73:24:60:
         a1:82:ff:20:fb:29:f5:d2:98:68:39:3d:46:a5:8c:fd:0b:ed:
         ab:f5:ef:33:5a:14:ac:1a:22:12:d0:d3:b0:b6:9b:b6:62:7d:
         3b:cf:a9:c6:00:c8:ac:3a:5c:5b:22:d5:e4:63:7c:7e:81:11:
         ad:a6:7b:58:24:ae:d1:01:a4:26:a9:e5:31:3d:5a:9f:3a:14:
         cb:ab:e6:32:91:f9:c9:37:f9:58:de:34:2a:30:4a:d3:c0:6d:
         c7:13:23:9f:69:13:a3:ba:d1:43:0a:be:cc:f3:a9:24:88:be:
         ef:7e:0e:67:06:20:18:15:c6:bd:b9:ff:b5:11:8e:e9:e4:c5:
         89:91:dd:4c:49:f6:3b:b4:a1:a1:68:9d:ba:ef:7d:68:12:c8:
         55:f5:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:34:48 2026 by rpki-client