Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          SKOwiX9MWLHovwt3YWuYA2GZzTFkamf1JibuS7DrCtU=
Subject key identifier:   4A:3C:40:8C:5A:EB:1A:0C:95:9D:F7:F6:A0:CC:D1:02:F1:B2:E0:AD
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       019FA82B7F468A31CE41DCBF03828DC68C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0E2C
Signing time:             Tue 28 Jul 2026 10:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:50 +0000
Files and hashes:         1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
                          2: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
                          3: fYFb1Y-NrescEZS13kBhzxAZwCo.asa (hash: PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: AJORu7PBs3sm4O/IG2hzVp4oajTHwq2MLb92tI48eyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:7f:46:8a:31:ce:41:dc:bf:03:82:8d:c6:8c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Jul 28 10:00:50 2026 GMT
            Not After : Jul 29 10:00:50 2026 GMT
        Subject: CN=4a3c408c5aeb1a0c959df7f6a0ccd102f1b2e0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:b4:90:35:82:38:0e:a1:db:21:e3:b0:a3:
                    86:16:f3:96:45:6b:5c:61:76:66:bf:9b:92:b7:a0:
                    99:f0:84:f5:05:59:df:a7:a1:81:ab:7c:68:a6:b8:
                    bb:88:0c:6d:42:95:10:16:30:b8:9d:c8:d9:37:82:
                    73:20:0d:e1:7c:ac:aa:90:d9:10:20:09:93:c4:93:
                    97:f0:c7:c8:71:24:58:40:79:82:5a:ed:6f:eb:67:
                    18:a7:2d:17:5b:c9:43:2f:a1:06:ae:cb:82:90:c7:
                    f7:1c:b2:b1:7e:68:85:87:04:49:2c:9b:68:b0:65:
                    5c:ca:3a:dd:28:2f:15:be:52:cc:7f:f0:c4:5f:80:
                    21:ea:a9:e3:c8:c9:85:41:0a:11:fc:22:ef:1b:40:
                    de:f9:54:89:3e:7c:a0:0e:61:b4:db:ea:3f:94:ed:
                    77:db:8d:6d:95:70:f0:4f:77:90:17:5c:90:6a:c3:
                    73:b8:9a:ba:d3:3a:ed:13:30:4f:29:48:28:f5:c6:
                    b9:9b:d0:2f:cc:c9:81:6b:64:f4:eb:55:1f:af:20:
                    be:af:75:2a:c4:a4:f6:65:c7:0e:da:4b:b8:15:62:
                    e5:b1:02:04:da:69:bf:37:11:fc:2e:b9:d2:30:2b:
                    fe:e8:e2:0a:a2:94:37:8f:ef:90:f1:48:b5:63:fa:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:40:8C:5A:EB:1A:0C:95:9D:F7:F6:A0:CC:D1:02:F1:B2:E0:AD
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:47:6b:e4:a1:3e:e9:13:88:05:e6:b4:7a:e4:99:3f:fd:62:
         7d:db:56:a9:91:c8:86:27:df:c5:54:29:97:ff:da:af:8d:a0:
         23:d6:9f:c7:7b:95:0a:a4:1c:4d:29:e0:60:f2:5b:6f:07:c2:
         8e:b2:ba:74:bb:5b:29:41:65:41:f9:f4:62:23:6a:9e:38:a5:
         fd:82:48:3b:05:38:99:63:36:e9:5e:7c:3a:70:a4:95:11:ec:
         3c:fe:fe:35:bb:64:3b:4c:68:7a:f4:17:23:79:d2:cd:c2:e3:
         ae:ed:0e:52:2d:86:cd:d9:94:90:be:f2:4b:03:1f:53:d8:94:
         65:b5:94:98:3e:bd:d8:0a:ad:af:ac:1c:bd:aa:c6:77:71:6e:
         37:8d:d5:af:f3:fe:6e:b8:55:10:c5:44:a9:82:05:f8:55:30:
         a4:cc:89:b6:01:8a:13:07:5c:db:53:d8:78:de:21:35:dc:19:
         46:e2:06:1e:8c:7f:b5:c1:cc:5c:74:d6:90:d2:37:f0:6d:f3:
         c1:ee:2b:52:b5:de:e4:ca:74:fa:ca:84:36:1a:96:a6:b4:58:
         14:2c:ce:d7:5f:6d:ad:7e:4a:a7:bf:2c:8a:a9:81:b9:c8:16:
         99:ea:9e:c8:cb:94:01:25:4e:91:ee:2a:73:b3:7c:df:0d:cb:
         8d:6b:ac:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK39GijHOQdy/A4KNxoyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl
YzJkNjgwHhcNMjYwNzI4MTAwMDUwWhcNMjYwNzI5MTAwMDUwWjAzMTEwLwYDVQQD
Eyg0YTNjNDA4YzVhZWIxYTBjOTU5ZGY3ZjZhMGNjZDEwMmYxYjJlMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1m0kDWCOA6h2yHjsKOGFvOWRWtc
YXZmv5uSt6CZ8IT1BVnfp6GBq3xopri7iAxtQpUQFjC4ncjZN4JzIA3hfKyqkNkQ
IAmTxJOX8MfIcSRYQHmCWu1v62cYpy0XW8lDL6EGrsuCkMf3HLKxfmiFhwRJLJto
sGVcyjrdKC8VvlLMf/DEX4Ah6qnjyMmFQQoR/CLvG0De+VSJPnygDmG02+o/lO13
241tlXDwT3eQF1yQasNzuJq60zrtEzBPKUgo9ca5m9AvzMmBa2T061UfryC+r3Uq
xKT2ZccO2ku4FWLlsQIE2mm/NxH8LrnSMCv+6OIKopQ3j++Q8Ui1Y/q4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo8QIxa6xoMlZ339qDM0QLxsuCtMB8GA1UdIwQY
MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt
NmJiYjI3MDgxZGUyLzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy
LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkdr5KE+
6ROIBea0euSZP/1ifdtWqZHIhiffxVQpl//ar42gI9afx3uVCqQcTSngYPJbbwfC
jrK6dLtbKUFlQfn0YiNqnjil/YJIOwU4mWM26V58OnCklRHsPP7+NbtkO0xoevQX
I3nSzcLjru0OUi2GzdmUkL7ySwMfU9iUZbWUmD692Aqtr6wcvarGd3FuN43Vr/P+
brhVEMVEqYIF+FUwpMyJtgGKEwdc21PYeN4hNdwZRuIGHox/tcHMXHTWkNI38G3z
we4rUrXe5Mp0+sqENhqWprRYFCzO119trX5Kp78siqmBucgWmeqeyMuUASVOke4q
c7N83w3LjWusCg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:57 2026 by rpki-client