Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          KAlHz+v5FxbsrNsQErvMQRPP5Weh6M9sOt0YPDoA5ew=
Subject key identifier:   15:0B:EC:D8:79:DB:C7:6C:62:01:36:0F:98:7C:6C:9C:40:CE:67:37
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019EB7A14E740826A56DB6DD5E85D115A53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          1751
Signing time:             Thu 11 Jun 2026 17:01:02 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:02 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:02 +0000
Files and hashes:         1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=)
                          2: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=)
                          3: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=)
                          4: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=)
                          5: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=)
                          6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=)
                          7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=)
                          8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=)
                          9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=)
                          10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=)
                          11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=)
                          12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=)
                          13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=)
                          14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: ZP8YOMznV7qcIpqDAHA2lLKm+jdk1ZPvo9p7xujqXAA=)
                          15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=)
                          16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=)
                          17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=)
                          18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:4e:74:08:26:a5:6d:b6:dd:5e:85:d1:15:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Jun 11 17:01:02 2026 GMT
            Not After : Jun 12 17:01:02 2026 GMT
        Subject: CN=150becd879dbc76c6201360f987c6c9c40ce6737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:07:3a:a9:c7:d3:de:7e:f6:31:66:11:fb:
                    8e:3c:f2:36:3e:54:08:c1:f9:45:90:a8:b6:92:59:
                    4b:e7:8d:6f:96:1b:d7:9e:d1:67:5d:30:c2:91:b3:
                    ba:94:d0:de:52:b2:69:20:33:eb:40:ac:77:5e:5a:
                    7e:99:22:d2:1b:e9:4f:e0:48:7f:14:33:13:bc:1a:
                    6e:66:6a:23:64:fb:37:52:f0:a0:fe:34:86:3c:95:
                    77:9f:90:30:27:be:10:ea:2a:45:c8:0c:08:f7:95:
                    07:0d:95:08:09:cf:a1:d2:ce:7b:ea:a6:fe:51:f7:
                    ec:7d:8d:94:28:ee:c3:d1:ae:c9:b2:b4:e3:15:20:
                    f6:85:e5:3b:c6:f8:f1:8b:00:dc:7f:1e:e1:21:4e:
                    d1:47:3e:54:e1:ef:e1:ec:f9:11:8a:f9:6a:bc:da:
                    b9:45:04:fa:f7:9c:49:d2:b4:ab:ca:87:61:f4:90:
                    59:b1:2c:bb:be:34:fe:24:f9:47:23:c4:9e:87:34:
                    8c:f8:1c:b5:34:b9:c6:b9:96:57:2a:31:61:30:00:
                    3f:ff:7e:aa:7c:e5:13:21:5a:ff:cf:29:4a:51:c0:
                    3f:5e:b1:86:ec:98:c4:8f:e4:bd:5d:8e:0f:0d:9f:
                    9d:ca:c1:1b:97:49:94:6a:85:6b:55:c4:5e:a0:3a:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:EC:D8:79:DB:C7:6C:62:01:36:0F:98:7C:6C:9C:40:CE:67:37
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e3:c5:b9:71:11:5c:51:d8:8e:92:95:f0:e7:94:67:f2:41:
         b3:76:c7:30:25:e4:90:2a:a6:6c:d6:1e:4d:d7:32:5b:cf:a4:
         d1:5d:2a:a2:f2:4f:f3:81:ea:65:a4:23:e9:07:83:88:94:d8:
         39:03:3e:dd:a4:0c:8e:56:cd:c4:b2:c4:00:ca:9d:64:41:70:
         8c:8f:75:c1:86:12:65:0b:b8:a1:c0:8f:95:9b:91:76:f1:68:
         43:a2:0a:5e:4b:65:44:0a:98:e8:f7:4d:cf:a8:4f:bb:be:f4:
         bd:ca:1f:c1:1c:d2:36:3e:96:13:9b:87:98:e8:e9:33:5f:fa:
         b1:ae:96:f8:f0:4a:e9:95:1c:54:a1:ae:ac:81:96:de:45:01:
         a3:f2:52:b2:5b:01:74:75:53:d1:d4:6f:21:2b:36:92:83:85:
         04:fd:c8:9e:84:4f:05:bd:54:7e:17:6d:b7:c6:de:93:97:a7:
         75:51:e5:69:81:f8:11:7e:b4:f3:7b:7b:ea:d3:d8:de:c6:c9:
         d9:77:4e:da:af:2e:87:ca:3d:99:28:8d:a5:77:df:e2:0a:ac:
         b9:67:33:e6:ee:d2:19:f6:3e:b7:fb:db:32:2f:9f:6a:8e:a1:
         2d:8e:d9:40:85:52:30:2c:7c:ff:0f:8c:49:6a:ce:21:80:6d:
         80:69:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:46:04 2026 by rpki-client