Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File:                     YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier:          AykMDq8V+DEYiENAOI0sHly6Ls2OaqDl7BLrAaupf60=
Subject key identifier:   13:2A:74:BC:92:BB:35:58:E2:25:9D:6F:DB:19:94:92:90:52:CC:5E
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer:       /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial:       019EC36E92C278CC039881A7EF302231E951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number:          154C
Signing time:             Sun 14 Jun 2026 00:01:03 +0000
Manifest this update:     Sun 14 Jun 2026 00:01:03 +0000
Manifest next update:     Mon 15 Jun 2026 00:01:03 +0000
Files and hashes:         1: 5eILOK-1-Suo2fVqfn_W0lL0-TQ.roa (hash: NzVDzsu+Kq+X+04Ws4gqYwLVPdBaLiyudai4ILZxsxg=)
                          2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: 3kOU4BMiYeunUSZgFtjY3rBOg47Vf4Z05ZDNRleomuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:92:c2:78:cc:03:98:81:a7:ef:30:22:31:e9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
        Validity
            Not Before: Jun 14 00:01:03 2026 GMT
            Not After : Jun 15 00:01:03 2026 GMT
        Subject: CN=132a74bc92bb3558e2259d6fdb1994929052cc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:a4:c4:6c:1f:62:bd:54:f5:0a:7d:b6:35:
                    26:30:15:7a:16:5d:69:cb:85:ea:6c:59:7a:ad:d8:
                    3d:55:62:a4:a3:c8:3c:c0:92:5a:f3:56:7e:f4:3c:
                    2a:8a:a5:cd:72:a5:05:57:d4:05:33:16:0c:16:66:
                    2f:fc:9a:a4:88:69:08:f6:94:ef:a7:05:f5:1f:6f:
                    4e:3d:42:6e:06:63:41:53:66:7d:34:d9:7f:08:ae:
                    31:a0:43:55:30:f2:6c:2c:97:6c:fd:cc:8a:24:35:
                    40:6d:b7:c8:e5:ee:5f:df:47:e4:a0:48:6b:b6:c2:
                    98:33:a0:5c:83:6c:25:32:a5:7f:4e:2f:d5:7d:45:
                    11:68:7e:db:25:98:a6:f4:51:14:2a:4b:0e:d6:b5:
                    a2:83:9e:c0:ba:90:cf:4a:09:f0:62:6d:27:4a:10:
                    f3:3a:b4:96:c6:a5:90:ef:45:48:e9:fa:89:44:f2:
                    00:36:1e:f3:df:90:38:fa:39:6b:90:a9:5a:2e:1f:
                    90:7f:05:87:13:2f:07:06:b4:e9:1f:9a:fb:f9:62:
                    45:61:00:5d:17:46:a8:1b:a0:a1:a1:48:db:4f:71:
                    45:43:83:87:5e:f4:60:f2:d0:ab:2a:77:14:26:b0:
                    22:99:90:0c:34:cf:ec:d8:c0:4e:aa:a3:97:22:62:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:74:BC:92:BB:35:58:E2:25:9D:6F:DB:19:94:92:90:52:CC:5E
            X509v3 Authority Key Identifier:
                keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:0b:35:78:ff:50:23:57:2f:50:fc:b3:27:a7:45:99:79:
         c3:9b:79:9b:ac:a2:64:30:6e:a6:76:0a:e0:05:9d:ab:e9:0e:
         40:07:bd:b5:f1:d5:57:c7:13:fc:8c:f0:4b:a7:07:96:47:ff:
         6d:d0:5d:0b:6e:fe:ff:45:a2:e6:f4:f4:b4:d6:49:d3:34:7e:
         2a:04:44:ac:aa:5d:e3:0c:cc:52:64:eb:62:ae:90:2d:0d:3e:
         3b:60:0d:dd:71:33:1d:63:7e:6a:c0:83:0b:ff:04:7a:4f:d7:
         37:e3:82:0f:ee:0d:91:83:3b:c0:dd:77:9f:f8:0d:23:b7:c5:
         12:90:eb:b1:81:aa:90:1f:ea:f2:1c:39:9c:d1:5b:27:66:b5:
         d2:c1:08:22:e2:dd:bd:20:8b:4f:4f:11:9a:42:59:18:a3:66:
         2a:8e:7d:2d:dc:ed:04:ac:20:f5:19:58:6f:d4:61:72:7a:7d:
         53:c6:de:bc:70:d4:a3:44:e7:8d:a6:e2:f2:53:9d:d9:56:f0:
         f5:e8:3f:49:84:44:fb:78:11:77:46:69:58:ae:de:48:c1:c5:
         28:d3:8e:38:ec:fd:92:9c:4a:f7:aa:8d:82:86:11:df:46:20:
         4b:de:94:cb:9e:56:3f:c1:76:98:d5:31:b0:93:82:aa:75:d3:
         f6:14:b2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DbpLCeMwDmIGn7zAiMelRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzY0YjA0ZmE4ZjVmZWU2ODY2ZjVjNzlmOGY3ZGNlYTUw
MTI1MTUwHhcNMjYwNjE0MDAwMTAzWhcNMjYwNjE1MDAwMTAzWjAzMTEwLwYDVQQD
EygxMzJhNzRiYzkyYmIzNTU4ZTIyNTlkNmZkYjE5OTQ5MjkwNTJjYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+KkxGwfYr1U9Qp9tjUmMBV6Fl1p
y4XqbFl6rdg9VWKko8g8wJJa81Z+9DwqiqXNcqUFV9QFMxYMFmYv/JqkiGkI9pTv
pwX1H29OPUJuBmNBU2Z9NNl/CK4xoENVMPJsLJds/cyKJDVAbbfI5e5f30fkoEhr
tsKYM6Bcg2wlMqV/Ti/VfUURaH7bJZim9FEUKksO1rWig57AupDPSgnwYm0nShDz
OrSWxqWQ70VI6fqJRPIANh7z35A4+jlrkKlaLh+QfwWHEy8HBrTpH5r7+WJFYQBd
F0aoG6ChoUjbT3FFQ4OHXvRg8tCrKncUJrAimZAMNM/s2MBOqqOXImJ+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMqdLySuzVY4iWdb9sZlJKQUsxeMB8GA1UdIwQY
MBaAFGDGSwT6j1/uaGb1x5+Pfc6lASUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84MjQ5MWItOGNhZi00ODFiLWIxNDYt
NjAxYTU4ZjYzMzkzLzEvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84MjQ5MWItOGNhZi00ODFiLWIxNDYtNjAxYTU4ZjYzMzkz
LzEvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKMLNXj/
UCNXL1D8syenRZl5w5t5m6yiZDBupnYK4AWdq+kOQAe9tfHVV8cT/IzwS6cHlkf/
bdBdC27+/0Wi5vT0tNZJ0zR+KgRErKpd4wzMUmTrYq6QLQ0+O2AN3XEzHWN+asCD
C/8Eek/XN+OCD+4NkYM7wN13n/gNI7fFEpDrsYGqkB/q8hw5nNFbJ2a10sEIIuLd
vSCLT08RmkJZGKNmKo59LdztBKwg9RlYb9Rhcnp9U8bevHDUo0Tnjabi8lOd2Vbw
9eg/SYRE+3gRd0ZpWK7eSMHFKNOOOOz9kpxK96qNgoYR30YgS96Uy55WP8F2mNUx
sJOCqnXT9hSyqg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:58 2026 by rpki-client