Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File:                     l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier:          jUN+0MdlJTJLA+YUgo0zljdRFMVUSxWdtv08lGwR440=
Subject key identifier:   D2:0C:C3:A5:37:9B:78:9B:92:C7:66:F3:65:38:4A:8D:21:A2:1C:C1
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer:       /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial:       019EC44A5A2DEAEB23384BAAB8527ABC1150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number:          1969
Signing time:             Sun 14 Jun 2026 04:01:07 +0000
Manifest this update:     Sun 14 Jun 2026 04:01:07 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:07 +0000
Files and hashes:         1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
                          2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
                          3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
                          4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: MTuM3SME5vn/QfNJD+bZqbWHojoYoKBKWTyiZylya14=)
                          5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:5a:2d:ea:eb:23:38:4b:aa:b8:52:7a:bc:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
        Validity
            Not Before: Jun 14 04:01:07 2026 GMT
            Not After : Jun 15 04:01:07 2026 GMT
        Subject: CN=d20cc3a5379b789b92c766f365384a8d21a21cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:b1:08:af:5f:db:32:55:18:dc:e0:48:df:
                    eb:10:5e:62:0c:12:58:30:58:68:9a:c6:75:b4:83:
                    03:49:07:ed:ee:03:b9:f8:cd:d1:97:66:a8:c3:bb:
                    90:4c:d0:c3:fd:a0:49:74:91:6b:69:c8:67:a8:90:
                    20:af:dc:42:c2:ba:db:43:b5:4f:87:14:44:e1:f3:
                    35:53:68:b2:45:94:0f:3d:69:fd:09:1c:dc:e8:16:
                    a2:06:d3:59:84:1b:83:8c:df:c1:69:80:55:72:bb:
                    21:39:73:b8:a3:15:ec:5b:6f:27:59:43:ff:17:c0:
                    59:d7:dd:3e:d9:dc:fd:f0:ec:48:f2:74:d7:a0:6a:
                    3a:05:50:a1:82:0e:25:2c:7a:f5:60:18:fc:25:b2:
                    c8:d9:ad:a4:b3:67:99:85:00:68:77:f1:0f:bc:2f:
                    04:99:2f:af:74:b1:a3:b7:7b:e4:f0:0e:9c:4f:6e:
                    66:be:4e:ce:43:54:26:b4:74:f0:58:87:37:89:c2:
                    1a:7f:8d:d0:7a:56:86:74:e3:12:4c:0a:58:d9:3b:
                    47:44:da:7d:3c:c0:84:36:f7:55:e9:c4:c3:72:95:
                    c1:03:53:4e:48:b0:56:ce:55:31:f6:1b:7c:36:b7:
                    e0:21:e5:89:aa:b4:14:af:90:79:f2:db:5e:16:0b:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0C:C3:A5:37:9B:78:9B:92:C7:66:F3:65:38:4A:8D:21:A2:1C:C1
            X509v3 Authority Key Identifier:
                keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:d3:8a:68:d8:37:e8:23:e5:29:d1:6a:df:1d:e6:ae:e6:
         10:60:91:0e:d5:57:3b:71:a0:81:6b:50:87:6d:58:50:ef:9d:
         57:bf:b5:c6:db:02:93:76:8b:86:5f:16:88:58:da:a3:4d:93:
         d0:6d:53:15:d2:37:86:2a:77:a6:f3:4d:a5:86:13:78:ff:9b:
         3f:e7:17:b2:f7:e5:2c:75:47:b5:c3:6f:b7:5c:0f:34:e1:a2:
         79:ee:51:b2:05:13:fc:5e:44:8c:4c:74:b8:c5:b9:d5:ee:15:
         f9:c9:30:44:7e:cc:5c:70:cd:e2:2a:ad:6b:5a:ab:32:c9:ce:
         8f:2b:66:64:fb:2a:69:0c:8d:95:68:1e:25:0a:63:24:9a:e1:
         9d:6d:e5:8d:5c:af:3c:6d:63:15:f2:db:56:c3:6e:bf:e4:a4:
         a1:f1:c5:69:2a:ed:53:f0:97:73:61:16:d1:69:ca:f6:43:dd:
         97:ab:51:28:2b:4b:90:67:da:1d:c9:d4:f6:29:a4:a6:ab:ad:
         51:60:36:ae:fa:c3:81:b2:c5:66:a9:07:8b:99:f9:e3:75:d5:
         4d:a8:fb:6c:aa:a6:36:e2:67:7e:04:93:cf:52:58:31:d5:9f:
         d3:8e:5e:88:37:16:cb:57:31:8e:20:c8:9a:a2:45:97:88:df:
         70:e9:d7:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ESlot6usjOEuquFJ6vBFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Y2NhMDk1MmRiOGFhOWZlNWU1NzAzYzZmMTg5YTA2YTU3
ZjRiYjEwHhcNMjYwNjE0MDQwMTA3WhcNMjYwNjE1MDQwMTA3WjAzMTEwLwYDVQQD
EyhkMjBjYzNhNTM3OWI3ODliOTJjNzY2ZjM2NTM4NGE4ZDIxYTIxY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTmxCK9f2zJVGNzgSN/rEF5iDBJY
MFhomsZ1tIMDSQft7gO5+M3Rl2aow7uQTNDD/aBJdJFrachnqJAgr9xCwrrbQ7VP
hxRE4fM1U2iyRZQPPWn9CRzc6BaiBtNZhBuDjN/BaYBVcrshOXO4oxXsW28nWUP/
F8BZ190+2dz98OxI8nTXoGo6BVChgg4lLHr1YBj8JbLI2a2ks2eZhQBod/EPvC8E
mS+vdLGjt3vk8A6cT25mvk7OQ1QmtHTwWIc3icIaf43QelaGdOMSTApY2TtHRNp9
PMCENvdV6cTDcpXBA1NOSLBWzlUx9ht8NrfgIeWJqrQUr5B58tteFgtUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIMw6U3m3ibksdm82U4So0hohzBMB8GA1UdIwQY
MBaAFJfMoJUtuKqf5eVwPG8Ymgalf0uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYt
NWQ2ZGQwYmE1MmNmLzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYtNWQ2ZGQwYmE1MmNm
LzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcnTimjY
N+gj5SnRat8d5q7mEGCRDtVXO3GggWtQh21YUO+dV7+1xtsCk3aLhl8WiFjao02T
0G1TFdI3hip3pvNNpYYTeP+bP+cXsvflLHVHtcNvt1wPNOGiee5RsgUT/F5EjEx0
uMW51e4V+ckwRH7MXHDN4iqta1qrMsnOjytmZPsqaQyNlWgeJQpjJJrhnW3ljVyv
PG1jFfLbVsNuv+SkofHFaSrtU/CXc2EW0WnK9kPdl6tRKCtLkGfaHcnU9imkpqut
UWA2rvrDgbLFZqkHi5n543XVTaj7bKqmNuJnfgSTz1JYMdWf045eiDcWy1cxjiDI
mqJFl4jfcOnX+A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:52 2026 by rpki-client