Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          +Bk3JU27/q+w7P1HoJPk7RbudfdRFSpC7ojaK4wJnVw=
Subject key identifier:   17:D2:41:55:54:88:86:E4:3E:00:76:38:6A:5A:93:3E:2D:F9:5C:4D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       019EBEB6008DBF0CF3C9DBD3A3DF205DEE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          1911
Signing time:             Sat 13 Jun 2026 02:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:59 +0000
Files and hashes:         1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
                          2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
                          3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
                          4: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=)
                          5: 8HRtjmmv1nDcg-zPBJplz_vOwqc.roa (hash: 3HY51n2t0RpNiZG82ENQMjuu8R/pZJLXWUmCoGSFs3k=)
                          6: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=)
                          7: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
                          8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: 2m2F/+a3CdsIMyHMbSGChm6Gesei28YMzdUNGu/3B60=)
                          9: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
                          10: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
                          11: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
                          12: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
                          13: XwkSmjcy3MRiLVWcicf-USLCrwg.roa (hash: MaT1kxQpBKjFLSuc65ISq1jK4eo9xPUmjyYX6dR+q0E=)
                          14: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
                          15: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
                          16: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=)
                          17: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
                          18: oiFnJz8OW03WCWtsMHubcwWCEnU.roa (hash: NGNeywVT/9a30EqHXW3cwLcQm7wpXQ63rm74pTj5fag=)
                          19: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
                          20: uwQyjvjxI-r1rh-v9UxtJU1WLMY.roa (hash: eAP3wsnG37lrMEGtMd91lAMUBneagoCuBENjELRk9X8=)
                          21: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
                          22: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
                          23: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:00:8d:bf:0c:f3:c9:db:d3:a3:df:20:5d:ee:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Jun 13 02:00:59 2026 GMT
            Not After : Jun 14 02:00:59 2026 GMT
        Subject: CN=17d24155548886e43e0076386a5a933e2df95c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:08:c6:7b:d8:a8:7f:09:3e:7f:d2:a4:5f:
                    c5:1e:2d:42:9f:9b:9e:76:2e:93:21:be:ef:df:a0:
                    70:dd:6d:46:94:a7:17:28:1e:34:63:91:8e:14:31:
                    45:01:33:4c:7b:24:81:07:ba:21:26:3e:70:90:4a:
                    d2:97:77:86:bb:ca:5b:39:6e:15:f3:7f:fd:4d:3f:
                    e8:99:a0:2a:ec:a1:f9:c5:9e:2d:f0:ca:42:b5:5a:
                    31:ff:f4:b7:bc:af:9f:80:85:76:ba:d3:fc:08:8f:
                    8a:9b:e8:5e:72:f5:21:90:59:b9:9a:e2:86:e9:44:
                    79:80:f3:28:0b:57:35:15:43:3b:ee:cf:57:00:42:
                    61:1f:04:85:f7:30:c6:a6:38:8a:c3:ed:ff:e8:d0:
                    58:5d:c2:fd:2e:b3:de:58:42:63:9a:e8:e3:a3:bf:
                    8f:5a:b8:c5:87:9c:4a:41:60:a9:4c:f8:37:3e:5b:
                    cc:2f:05:8b:b5:d3:51:70:ed:80:5d:db:b6:60:18:
                    af:9d:17:5e:1c:7a:f2:8d:5f:89:15:55:d9:47:09:
                    c9:59:08:f3:30:db:be:a4:10:7f:e1:41:2e:0b:c4:
                    37:91:29:a3:ab:f8:8c:a5:fb:21:64:d1:62:dc:2d:
                    53:ad:d4:87:b2:7a:5b:2c:cd:21:0f:10:ff:d2:8b:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D2:41:55:54:88:86:E4:3E:00:76:38:6A:5A:93:3E:2D:F9:5C:4D
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:bc:07:31:9c:5e:9c:7f:3a:99:9a:43:dc:61:52:09:54:
         f3:ad:c6:13:4f:6a:ca:64:df:91:b3:7f:98:ab:10:fe:ef:a9:
         94:52:65:5c:f1:d0:b5:84:d9:cc:76:0b:98:6f:df:9f:51:a3:
         78:43:7c:12:64:e0:ff:90:22:59:23:94:0e:50:0e:c5:b9:82:
         cc:bf:38:4f:16:6a:be:a5:88:d5:01:15:e4:45:d9:ac:37:96:
         5a:4f:06:fb:31:31:1c:fe:21:56:8f:1a:1c:27:9b:70:d1:88:
         95:2a:90:c3:49:26:59:d2:e0:bf:11:69:23:b6:86:83:f5:2e:
         2b:56:4f:87:38:55:e9:21:e3:14:86:8f:46:f1:ef:38:ca:11:
         7e:8b:ca:00:a7:96:18:05:1d:c8:03:a1:36:8f:af:f8:60:3a:
         f1:eb:0f:a1:47:fb:3d:42:d1:b1:e4:dd:9f:54:09:f4:b6:bf:
         66:28:06:52:36:d4:7a:f1:be:1e:f1:47:40:2a:77:03:8b:2c:
         0a:08:2a:a5:97:0e:c4:f5:54:5d:dd:fd:86:e5:c5:be:39:b2:
         c9:05:fc:05:13:2c:1b:6a:4b:3f:fe:79:fc:a9:49:1e:49:06:
         47:d3:46:0f:7f:eb:8f:c7:13:49:b2:3a:e0:77:55:b9:06:9c:
         ae:f6:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:16 2026 by rpki-client