Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File:                     YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier:          v4A5KnCOnQmanJvBN+YQ2GT0spcO4df+kA/UDcaTG3s=
Subject key identifier:   63:B9:65:E8:CC:20:EB:D0:98:7F:14:0A:58:CA:4E:BD:84:2D:A0:0C
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer:       /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial:       019EC338063290F30BD3D00315939572437A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 23:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:29 +0000
Files and hashes:         1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
                          2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
                          3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: EuotIFdF/OolhgnfeskeSgYvSpQjbBCua4+SM/nJjes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:38:06:32:90:f3:0b:d3:d0:03:15:93:95:72:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
        Validity
            Not Before: Jun 13 23:01:29 2026 GMT
            Not After : Jun 14 23:01:29 2026 GMT
        Subject: CN=63b965e8cc20ebd0987f140a58ca4ebd842da00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:ba:a0:71:16:68:66:d8:ca:ef:c6:46:a4:
                    c6:64:f0:8d:09:6e:b1:a2:bd:0b:ac:92:51:bc:4c:
                    a8:55:fc:cf:b3:2a:1f:e5:62:3d:1f:c3:fd:fb:7e:
                    75:c8:3e:31:ee:d2:5f:02:18:8d:e8:e7:74:6f:34:
                    24:11:b0:e6:65:b2:17:ec:9c:9d:9b:ea:e2:fd:8b:
                    d4:df:a6:9e:a6:37:aa:cb:35:25:42:a7:89:27:10:
                    51:4f:4b:d9:b0:33:8f:f5:26:42:d1:2b:95:1a:08:
                    bb:38:4b:ce:7e:77:79:6b:af:8a:17:41:51:62:1c:
                    a3:2e:4a:da:1f:85:03:e9:90:38:55:01:7a:cc:ae:
                    3e:34:48:05:f9:6d:39:cc:78:13:fb:ce:ee:a8:4d:
                    27:0c:1a:1d:d3:63:93:59:3e:0a:f4:39:79:aa:35:
                    c1:d4:92:3d:27:82:af:50:15:65:04:29:e4:55:40:
                    fe:c6:62:eb:31:13:c1:ca:12:05:9c:0e:93:6f:a3:
                    2f:11:11:5a:74:0e:25:3a:cd:e3:c9:31:2b:34:4a:
                    f5:31:3e:23:01:57:df:c1:0d:26:47:eb:42:7a:18:
                    1f:c5:82:36:a3:6e:e1:be:ae:a2:ba:c9:75:3e:12:
                    12:35:8e:94:cd:c5:56:47:6b:13:7e:d9:08:e0:ae:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:65:E8:CC:20:EB:D0:98:7F:14:0A:58:CA:4E:BD:84:2D:A0:0C
            X509v3 Authority Key Identifier:
                keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:86:6f:d2:f5:5b:c9:72:0d:b1:7a:1d:55:b7:c7:3d:c7:b4:
         a7:87:35:95:f5:54:ad:ea:15:56:b7:c0:23:79:5f:94:6d:a0:
         41:c5:a9:fc:e7:e9:0b:0c:09:5a:c3:eb:cd:40:2c:a4:69:d7:
         63:f3:a4:a1:41:16:52:5f:d5:43:f8:fa:5b:5d:00:da:4d:6a:
         55:0a:6b:98:fb:38:99:c0:35:54:4a:73:1c:60:65:9e:b1:6f:
         d6:89:d1:6d:ac:34:be:bc:ee:4a:cb:1e:82:80:63:95:e7:fa:
         b7:20:be:c1:fb:f3:0d:d3:c5:ac:e0:1f:2f:93:af:6e:71:bf:
         06:e7:19:b6:8a:ef:dc:d2:2a:f4:7f:b7:5f:ec:b5:bb:1d:bf:
         08:be:b9:13:44:df:03:6c:0f:81:14:9f:e4:4e:8f:d1:ab:c6:
         40:4b:0c:0e:6f:26:dd:d8:93:a1:5e:e8:e5:9b:62:68:15:41:
         b9:89:e6:49:48:db:c1:d2:38:eb:eb:2e:90:74:ef:11:16:a4:
         cd:18:28:df:46:46:12:1c:9e:cf:c2:e9:96:f4:20:a6:36:d8:
         f0:c9:d1:14:a3:10:da:8b:a7:d6:f1:06:87:dc:69:b2:22:12:
         bd:8f:cc:84:93:9e:ff:0b:02:66:7c:0f:60:7f:dd:b2:4d:15:
         1f:c0:a0:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DOAYykPML09ADFZOVckN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODRjZmE3ODQ0MzQwMjM3ZmU1OWEzODI1YjU0ZjNmNzdl
ZDg1MzIwHhcNMjYwNjEzMjMwMTI5WhcNMjYwNjE0MjMwMTI5WjAzMTEwLwYDVQQD
Eyg2M2I5NjVlOGNjMjBlYmQwOTg3ZjE0MGE1OGNhNGViZDg0MmRhMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnza6oHEWaGbYyu/GRqTGZPCNCW6x
or0LrJJRvEyoVfzPsyof5WI9H8P9+351yD4x7tJfAhiN6Od0bzQkEbDmZbIX7Jyd
m+ri/YvU36aepjeqyzUlQqeJJxBRT0vZsDOP9SZC0SuVGgi7OEvOfnd5a6+KF0FR
YhyjLkraH4UD6ZA4VQF6zK4+NEgF+W05zHgT+87uqE0nDBod02OTWT4K9Dl5qjXB
1JI9J4KvUBVlBCnkVUD+xmLrMRPByhIFnA6Tb6MvERFadA4lOs3jyTErNEr1MT4j
AVffwQ0mR+tCehgfxYI2o27hvq6iusl1PhISNY6UzcVWR2sTftkI4K76ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO5ZejMIOvQmH8UCljKTr2ELaAMMB8GA1UdIwQY
MBaAFGKEz6eEQ0Ajf+WaOCW1Tz937YUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEt
ZjM4ZjhmZTc5NGQ0LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEtZjM4ZjhmZTc5NGQ0
LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYZv0vVb
yXINsXodVbfHPce0p4c1lfVUreoVVrfAI3lflG2gQcWp/OfpCwwJWsPrzUAspGnX
Y/OkoUEWUl/VQ/j6W10A2k1qVQprmPs4mcA1VEpzHGBlnrFv1onRbaw0vrzuSsse
goBjlef6tyC+wfvzDdPFrOAfL5OvbnG/BucZtorv3NIq9H+3X+y1ux2/CL65E0Tf
A2wPgRSf5E6P0avGQEsMDm8m3diToV7o5ZtiaBVBuYnmSUjbwdI46+sukHTvERak
zRgo30ZGEhyez8LplvQgpjbY8MnRFKMQ2oun1vEGh9xpsiISvY/MhJOe/wsCZnwP
YH/dsk0VH8CgOA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:02 2026 by rpki-client