Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File:                     YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier:          EI79fMc05nEDWKDkkQsJs0jo5h84ZHpEo2H77CB9o1g=
Subject key identifier:   7A:5F:D9:0A:DF:D9:90:E1:10:E1:D8:38:00:37:A9:F7:04:36:DC:D1
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer:       /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial:       019EBEB612A4F643D3219D19586E37BE72BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number:          0D44
Signing time:             Sat 13 Jun 2026 02:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:03 +0000
Files and hashes:         1: MIQkIHdhTszjAc1iDyqPsWr05vI.asa (hash: q47vAO9a9jNCz72lMsICdLEfl+TVo350DLcpbspUzro=)
                          2: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: yRY+jIofkLzec25Vy/sG69/35wPpHPNs2LlYN4ibjdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:12:a4:f6:43:d3:21:9d:19:58:6e:37:be:72:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
        Validity
            Not Before: Jun 13 02:01:03 2026 GMT
            Not After : Jun 14 02:01:03 2026 GMT
        Subject: CN=7a5fd90adfd990e110e1d8380037a9f70436dcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:f7:cd:f0:f2:ad:0b:68:2b:0e:ee:10:2d:
                    c3:57:7a:37:e1:fd:b2:a4:a1:98:33:9f:93:9a:18:
                    1d:59:c3:d8:c1:9e:37:81:91:51:aa:56:5c:a3:5e:
                    dc:00:2b:16:b0:23:9c:ce:8e:a2:55:8d:ae:b9:dd:
                    13:43:eb:cd:da:8c:8c:66:de:b7:51:ae:79:75:f3:
                    ca:98:ec:5b:bd:18:bd:53:4d:4c:f0:19:a6:68:4f:
                    be:9d:2c:1e:a7:a5:55:c3:58:68:dc:61:1f:77:2e:
                    3a:1b:1a:2e:c5:54:50:78:67:fe:09:ab:d9:6a:fc:
                    95:d7:e5:00:28:75:e8:65:32:10:06:2b:39:8f:cd:
                    35:d3:59:71:7d:49:a5:30:c8:0a:1a:e5:d6:ed:a6:
                    32:1f:0b:ba:f8:ed:05:10:29:8a:86:21:08:d2:63:
                    d9:86:0f:c0:88:37:da:0e:11:73:4e:78:9d:a8:8c:
                    38:98:cf:14:57:20:a0:66:a1:91:96:dd:53:1a:bc:
                    c9:d2:4f:62:a7:b5:60:8b:35:12:4b:84:59:2c:b9:
                    7a:4d:26:27:de:48:f0:ff:4a:d2:9f:fa:2f:eb:c8:
                    2f:a7:60:35:7b:ac:96:c3:34:ba:d9:3c:31:6c:fe:
                    33:25:24:a3:54:39:82:46:25:b6:1a:8c:5a:9f:01:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:D9:0A:DF:D9:90:E1:10:E1:D8:38:00:37:A9:F7:04:36:DC:D1
            X509v3 Authority Key Identifier:
                keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c0:ff:dd:59:c2:47:d2:10:90:4e:80:35:d7:c9:54:7c:18:
         ca:5e:be:f4:0d:3c:61:48:52:32:95:bb:ba:04:60:75:77:ea:
         97:e3:e1:1f:ba:94:86:e6:d2:03:65:1a:08:4f:2e:aa:87:fa:
         f9:6e:de:d9:dc:66:9b:c7:74:b0:cb:01:42:55:14:30:57:20:
         15:36:41:f5:a9:86:61:e8:13:1d:e4:3a:a2:9c:00:e5:f0:92:
         7a:0c:e2:44:6a:c8:bf:5b:14:af:6e:ea:87:04:ca:6f:ba:29:
         b8:f4:6a:21:10:1d:d9:75:e7:20:bb:16:49:d3:79:c4:06:8a:
         e1:be:2b:4f:27:a8:0d:01:a6:13:1c:e6:24:1e:1e:3a:ee:67:
         41:15:b2:e8:23:7c:3c:06:d8:c7:87:f9:1f:95:b0:b3:2b:52:
         45:bf:c4:86:2a:28:2f:8c:d1:f2:65:d0:46:53:25:5b:41:5a:
         19:b1:9c:9c:f0:58:9e:98:46:33:cd:57:43:60:12:a7:87:7d:
         f5:06:14:7e:02:4c:b5:69:5c:f5:36:e8:0c:ac:5e:10:81:f6:
         f7:d1:31:2a:0e:23:6c:1e:05:22:d2:ac:2e:6d:08:5e:f4:b4:
         2f:4e:e5:52:c2:5a:9c:66:f3:f8:72:6a:b4:ae:83:6b:ed:fe:
         ad:ca:23:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+thKk9kPTIZ0ZWG43vnK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDYyMzAyYjQzODU5MjM3NmM0MjY0ZjQ5ZGM1ZTY3M2Vk
YjJjZmIwHhcNMjYwNjEzMDIwMTAzWhcNMjYwNjE0MDIwMTAzWjAzMTEwLwYDVQQD
Eyg3YTVmZDkwYWRmZDk5MGUxMTBlMWQ4MzgwMDM3YTlmNzA0MzZkY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdD3zfDyrQtoKw7uEC3DV3o34f2y
pKGYM5+TmhgdWcPYwZ43gZFRqlZco17cACsWsCOczo6iVY2uud0TQ+vN2oyMZt63
Ua55dfPKmOxbvRi9U01M8BmmaE++nSwep6VVw1ho3GEfdy46GxouxVRQeGf+CavZ
avyV1+UAKHXoZTIQBis5j80101lxfUmlMMgKGuXW7aYyHwu6+O0FECmKhiEI0mPZ
hg/AiDfaDhFzTnidqIw4mM8UVyCgZqGRlt1TGrzJ0k9ip7VgizUSS4RZLLl6TSYn
3kjw/0rSn/ov68gvp2A1e6yWwzS62TwxbP4zJSSjVDmCRiW2GoxanwEPvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpf2Qrf2ZDhEOHYOAA3qfcENtzRMB8GA1UdIwQY
MBaAFGMGIwK0OFkjdsQmT0ncXmc+2yz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMt
M2IyNDJkNTRlNzg4LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMtM2IyNDJkNTRlNzg4
LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMD/3VnC
R9IQkE6ANdfJVHwYyl6+9A08YUhSMpW7ugRgdXfql+PhH7qUhubSA2UaCE8uqof6
+W7e2dxmm8d0sMsBQlUUMFcgFTZB9amGYegTHeQ6opwA5fCSegziRGrIv1sUr27q
hwTKb7opuPRqIRAd2XXnILsWSdN5xAaK4b4rTyeoDQGmExzmJB4eOu5nQRWy6CN8
PAbYx4f5H5WwsytSRb/EhiooL4zR8mXQRlMlW0FaGbGcnPBYnphGM81XQ2ASp4d9
9QYUfgJMtWlc9TboDKxeEIH299ExKg4jbB4FItKsLm0IXvS0L07lUsJanGbz+HJq
tK6Da+3+rcoj2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:20 2026 by rpki-client