Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          4izvf4fnGOh63dXLhwf1l4wm4iM1Sh88qpBAJEsqEx4=
Subject key identifier:   B9:BD:BA:D1:0D:D7:AF:35:7D:44:12:A0:57:AE:77:4A:77:07:A8:47
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       019ED3188FD01355A4E308EFB6A99C73CCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          1099
Signing time:             Wed 17 Jun 2026 01:01:02 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:02 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:02 +0000
Files and hashes:         1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: 4JgIGXevNOzjQJU58dSNJbQARZV412uZbkLzBI6daKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:8f:d0:13:55:a4:e3:08:ef:b6:a9:9c:73:cc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Jun 17 01:01:02 2026 GMT
            Not After : Jun 18 01:01:02 2026 GMT
        Subject: CN=b9bdbad10dd7af357d4412a057ae774a7707a847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:70:e7:a8:72:51:83:77:05:6e:76:dc:65:
                    24:a6:8d:51:91:33:33:eb:2f:57:57:52:41:96:4d:
                    66:e5:05:03:cf:f1:ac:ca:a7:6d:34:9c:9b:69:66:
                    e5:1b:62:cc:7c:75:b1:c4:5a:55:23:11:38:94:07:
                    56:5a:da:78:e5:9d:e5:8a:a0:d3:78:52:77:0a:c3:
                    90:21:66:18:4b:1f:a1:bb:a1:d1:37:9a:10:a8:58:
                    01:17:52:19:bf:64:9f:d6:ff:7b:f7:96:76:5d:cd:
                    9f:6c:4f:03:79:53:32:cc:12:1f:cb:ea:8d:8c:70:
                    87:a5:eb:21:ec:9f:02:40:fe:d0:01:49:9b:69:b5:
                    b5:e7:6c:58:07:af:68:3e:3c:ed:68:3e:90:a7:fb:
                    cc:32:59:60:27:55:fa:54:a5:e5:b9:dc:8e:1a:ae:
                    6e:3f:2f:a6:34:79:a9:bb:13:6e:28:43:ef:e1:1a:
                    85:30:78:37:87:c0:e4:05:c2:de:9e:a9:d3:28:fa:
                    ba:d1:60:7c:7d:8c:db:64:4a:1b:80:63:a8:b4:81:
                    12:26:06:d9:0c:1e:62:58:ec:5b:79:01:40:a2:08:
                    43:8c:c7:94:af:a8:08:9b:5b:14:a8:0a:60:1e:91:
                    66:ab:79:94:44:1a:6c:4b:1a:79:26:86:62:18:ea:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:BA:D1:0D:D7:AF:35:7D:44:12:A0:57:AE:77:4A:77:07:A8:47
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:c7:56:80:6f:b1:3c:64:e5:87:4a:db:38:30:8f:6c:ef:
         1d:fe:cc:97:6c:24:15:b9:7a:db:3d:9c:16:d9:fb:80:5d:27:
         6c:85:e4:b7:94:ec:b8:79:ac:2b:d7:3a:7e:0b:70:49:30:7b:
         34:f3:9b:fe:e4:ab:e4:d8:e4:79:82:90:49:ae:8e:69:09:f5:
         af:60:8e:8b:e2:ca:99:e1:27:1c:d3:b6:e5:78:97:a2:9b:c9:
         d8:59:96:e5:ca:fc:26:d4:d3:ef:b8:56:94:f3:2d:08:81:e9:
         ac:80:9e:fe:69:74:22:ee:7b:d3:02:35:aa:b9:4d:57:3c:63:
         61:9c:02:4f:5f:3f:c5:37:3e:f3:1d:a1:9f:a9:75:47:2b:7d:
         cc:68:dc:70:be:0c:d6:17:22:cf:bb:2f:53:22:59:4a:86:e2:
         29:35:fa:7b:f9:e4:bd:1f:08:08:87:7b:43:c1:52:a7:ec:a5:
         8f:4d:82:e2:ed:e2:4f:fa:2d:27:15:e3:76:a4:26:23:85:f8:
         82:32:66:81:0c:c5:4b:36:b7:fb:8c:b2:20:6c:94:ee:57:fa:
         12:2e:52:e9:60:46:4c:ea:78:e9:f4:00:bb:cf:e2:39:e9:c6:
         4f:2c:b5:a4:09:0f:8d:61:96:2f:65:47:5f:33:ca:23:2a:77:
         85:54:c6:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGI/QE1Wk4wjvtqmcc8yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjYwNjE3MDEwMTAyWhcNMjYwNjE4MDEwMTAyWjAzMTEwLwYDVQQD
EyhiOWJkYmFkMTBkZDdhZjM1N2Q0NDEyYTA1N2FlNzc0YTc3MDdhODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKpw56hyUYN3BW523GUkpo1RkTMz
6y9XV1JBlk1m5QUDz/GsyqdtNJybaWblG2LMfHWxxFpVIxE4lAdWWtp45Z3liqDT
eFJ3CsOQIWYYSx+hu6HRN5oQqFgBF1IZv2Sf1v9795Z2Xc2fbE8DeVMyzBIfy+qN
jHCHpesh7J8CQP7QAUmbabW152xYB69oPjztaD6Qp/vMMllgJ1X6VKXludyOGq5u
Py+mNHmpuxNuKEPv4RqFMHg3h8DkBcLenqnTKPq60WB8fYzbZEobgGOotIESJgbZ
DB5iWOxbeQFAoghDjMeUr6gIm1sUqApgHpFmq3mURBpsSxp5JoZiGOrzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm9utEN1681fUQSoFeud0p3B6hHMB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgrHVoBv
sTxk5YdK2zgwj2zvHf7Ml2wkFbl62z2cFtn7gF0nbIXkt5TsuHmsK9c6fgtwSTB7
NPOb/uSr5NjkeYKQSa6OaQn1r2COi+LKmeEnHNO25XiXopvJ2FmW5cr8JtTT77hW
lPMtCIHprICe/ml0Iu570wI1qrlNVzxjYZwCT18/xTc+8x2hn6l1Ryt9zGjccL4M
1hciz7svUyJZSobiKTX6e/nkvR8ICId7Q8FSp+ylj02C4u3iT/otJxXjdqQmI4X4
gjJmgQzFSza3+4yyIGyU7lf6Ei5S6WBGTOp46fQAu8/iOenGTyy1pAkPjWGWL2VH
XzPKIyp3hVTGpQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:10:41 2026 by rpki-client