Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          Ys7t44YPMgdElpMkx5iNLsIxBubQhrvx4AbTqIOeHfA=
Subject key identifier:   17:79:87:97:97:F5:F4:23:92:99:B1:AB:6E:06:E4:62:72:78:0D:CC
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       019EB657044691493EF4120B41DAB2CB2BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          1965
Signing time:             Thu 11 Jun 2026 11:00:16 +0000
Manifest this update:     Thu 11 Jun 2026 11:00:16 +0000
Manifest next update:     Fri 12 Jun 2026 11:00:16 +0000
Files and hashes:         1: 1J8iJjDshk0K5lYg4l_c2ofYegs.roa (hash: qSMx+hDj/RyqV4hBcH75SbfZI3k3bmyUJ0HCop3PjC0=)
                          2: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=)
                          3: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=)
                          4: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=)
                          5: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=)
                          6: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=)
                          7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: 2VLsw31yXnlG5OfMIYz2xWdEcnfbsYhCH7zAqrr7V+8=)
                          8: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=)
                          9: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:57:04:46:91:49:3e:f4:12:0b:41:da:b2:cb:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: Jun 11 11:00:16 2026 GMT
            Not After : Jun 12 11:00:16 2026 GMT
        Subject: CN=1779879797f5f4239299b1ab6e06e46272780dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:83:c9:ec:d3:ae:33:d6:30:ea:c1:6c:c1:
                    de:36:44:47:0a:0a:97:5b:bd:9b:7a:d6:b8:7c:0a:
                    39:5a:30:2e:1a:c8:f6:c0:33:78:60:56:58:8d:d4:
                    78:56:57:39:c7:01:3f:7d:75:29:a4:61:b8:97:63:
                    7a:24:70:2e:0a:70:96:22:32:3e:08:10:3f:73:3b:
                    d1:b4:ba:e3:aa:a2:92:c5:32:10:3c:d8:5e:ae:e0:
                    97:25:2b:8e:ab:0b:b4:4c:05:0c:35:b1:26:c9:cc:
                    23:aa:28:30:ce:fd:e7:23:6f:a0:85:d0:72:ce:bf:
                    de:f8:d8:a1:f7:8e:1f:13:ef:de:e2:76:de:bd:b2:
                    89:52:49:1e:48:8b:9a:14:72:e6:68:ce:e6:e2:12:
                    ba:5c:f5:72:8f:6c:7a:1a:a5:56:5f:69:f0:0e:69:
                    09:14:ba:52:94:6f:78:6a:30:ec:c4:1f:48:24:76:
                    56:1c:ab:21:94:f1:56:22:77:5e:7d:67:b9:93:7b:
                    8b:f6:e4:d5:75:df:af:73:71:b8:22:07:de:11:85:
                    b4:ba:ca:46:65:50:d9:1a:f1:a0:5f:8d:af:9c:2e:
                    c1:86:11:a1:45:0c:d6:56:10:e0:30:36:c5:36:2b:
                    32:43:2b:a3:21:3e:0f:25:d5:65:31:93:3f:bf:9f:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:79:87:97:97:F5:F4:23:92:99:B1:AB:6E:06:E4:62:72:78:0D:CC
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:b0:a4:07:ee:76:10:2b:d3:8a:80:e9:b6:55:ff:8c:aa:
         ef:0a:a3:0c:c5:e9:b3:3f:96:12:45:5b:26:36:e0:86:65:d3:
         dc:78:37:17:68:4f:f8:fb:4a:fc:87:85:39:42:ca:c2:3c:92:
         f1:da:ad:11:a7:67:15:e5:4d:ef:06:bb:8b:23:71:c1:72:dc:
         2d:02:95:46:13:4f:ab:a2:f5:ca:ca:82:f1:b9:63:f3:a8:4a:
         40:5c:7f:22:60:b2:c7:a0:02:7f:a1:67:e5:e3:8e:59:6c:ac:
         56:bc:6b:7b:a6:2e:4e:ea:d1:9e:9f:a0:42:aa:61:14:52:90:
         ea:2a:0a:53:1a:b0:85:9f:7c:88:ee:83:c8:6c:e0:b3:28:42:
         ee:4f:cf:ad:41:28:38:21:05:68:35:2b:74:52:d5:db:0f:6f:
         3d:00:f7:be:a1:b4:65:ab:cd:fc:aa:66:64:c0:75:06:c6:8a:
         6e:a2:2d:19:f2:f1:15:ce:b9:dd:d6:97:48:4b:7d:c0:d2:db:
         6a:cd:25:7f:0a:f4:c9:9b:0a:11:8b:10:d4:11:0e:5e:45:b8:
         96:85:08:4d:80:24:62:5f:9f:aa:67:1d:92:26:fe:de:1c:af:
         1d:34:a7:32:17:3a:86:ea:20:f6:cf:b4:03:d3:ae:d8:36:26:
         ec:42:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:53 2026 by rpki-client