Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File:                     YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier:          yM5hw6lGIPqDToRFDHQ7lz2TOVUTmWa4zJASW290NsQ=
Subject key identifier:   45:88:5C:7C:4D:01:3D:05:8C:02:00:2D:05:35:58:AB:48:C3:02:7A
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer:       /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial:       019EC06D73764CD25A96A109D6AEABA6D83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 10:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:58 +0000
Files and hashes:         1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
                          2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: v3fTxadfZjQHw5DY+M3OzsrZoRaSTqGmMmnptt3fx0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:73:76:4c:d2:5a:96:a1:09:d6:ae:ab:a6:d8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
        Validity
            Not Before: Jun 13 10:00:58 2026 GMT
            Not After : Jun 14 10:00:58 2026 GMT
        Subject: CN=45885c7c4d013d058c02002d053558ab48c3027a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:87:7d:46:70:97:3a:64:7f:4d:c5:92:c9:
                    d1:60:70:47:71:8c:19:da:dd:ab:33:7a:b5:64:4c:
                    b2:44:4d:cc:db:f0:59:41:a8:21:a3:1e:2b:de:a4:
                    bd:a2:1f:d5:fd:19:04:c2:2a:0d:3b:b8:30:90:6b:
                    9c:6d:d2:26:87:bc:dd:1e:b4:a4:b8:25:b3:21:c1:
                    9c:e7:ab:5f:e8:b9:5b:21:12:41:02:f9:db:95:74:
                    02:c0:85:3e:7a:35:b6:50:ef:28:de:8a:02:f9:6c:
                    87:06:e3:d2:ca:ef:ca:60:81:9e:6d:b4:c8:19:6c:
                    3b:db:01:b5:1a:ff:a9:72:9f:44:6f:54:20:3d:91:
                    1b:84:c5:25:c5:34:a1:5a:0c:db:e3:2b:94:e0:40:
                    70:87:06:97:8e:80:c6:3b:cb:6e:9d:2c:cb:8f:c9:
                    85:f3:34:20:ef:40:e1:ba:ea:ef:55:91:2d:2a:65:
                    d4:72:38:ca:4c:dd:a8:7c:13:0b:c7:80:c2:22:6d:
                    23:78:47:c0:c1:09:24:40:3b:cf:23:cf:95:00:67:
                    04:c8:1d:8c:d4:4b:28:13:49:70:ec:8a:10:a3:50:
                    ac:f1:8f:6e:1c:88:de:ff:e0:c4:da:15:78:ab:5c:
                    00:e6:a6:c0:ae:0c:0a:85:59:fd:6a:7a:6a:bc:0b:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:88:5C:7C:4D:01:3D:05:8C:02:00:2D:05:35:58:AB:48:C3:02:7A
            X509v3 Authority Key Identifier:
                keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c6:fe:2a:fe:1a:44:72:00:cd:48:85:89:a0:f6:06:be:6d:
         58:cf:ee:2b:c2:bf:e8:5e:e5:21:13:e7:83:c4:13:95:65:cf:
         42:7b:3a:59:e0:74:89:35:55:c7:65:f5:c8:4f:f3:5f:2e:8a:
         18:15:31:be:0e:02:78:3e:18:9e:ce:8f:81:53:c4:7c:15:21:
         77:5b:67:c4:a9:08:6c:0c:df:3d:3f:6e:d5:18:55:10:54:4f:
         5e:21:ff:e3:44:d4:d8:d8:11:40:f8:e0:c1:72:0b:ed:39:4a:
         5f:7a:7e:46:0c:cc:63:a9:19:51:d3:f8:53:48:7c:7b:bc:32:
         1f:18:39:d3:7e:a5:c9:bc:9b:82:62:a6:f2:ae:25:c5:19:38:
         9b:68:8f:5c:3e:68:ec:6a:68:99:8e:69:7e:10:15:8f:e7:f7:
         56:a8:f3:ad:90:c6:46:9a:de:16:b6:d7:6a:d0:db:39:31:bf:
         24:40:c0:e7:24:ac:d1:3a:d0:b9:91:f3:6a:1d:62:dd:ad:28:
         c3:aa:ea:0a:a2:5d:2b:96:29:f8:08:73:1d:62:13:0a:f2:05:
         e9:1b:4e:43:60:cf:ed:02:00:4f:5a:7f:9e:97:5b:39:db:e0:
         f2:ea:e7:bb:8c:b9:43:b0:86:fe:15:e2:7e:89:7e:79:be:36:
         64:dc:99:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbXN2TNJalqEJ1q6rptg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi
ODg4MWEwHhcNMjYwNjEzMTAwMDU4WhcNMjYwNjE0MTAwMDU4WjAzMTEwLwYDVQQD
Eyg0NTg4NWM3YzRkMDEzZDA1OGMwMjAwMmQwNTM1NThhYjQ4YzMwMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DGHfUZwlzpkf03FksnRYHBHcYwZ
2t2rM3q1ZEyyRE3M2/BZQaghox4r3qS9oh/V/RkEwioNO7gwkGucbdImh7zdHrSk
uCWzIcGc56tf6LlbIRJBAvnblXQCwIU+ejW2UO8o3ooC+WyHBuPSyu/KYIGebbTI
GWw72wG1Gv+pcp9Eb1QgPZEbhMUlxTShWgzb4yuU4EBwhwaXjoDGO8tunSzLj8mF
8zQg70DhuurvVZEtKmXUcjjKTN2ofBMLx4DCIm0jeEfAwQkkQDvPI8+VAGcEyB2M
1EsoE0lw7IoQo1Cs8Y9uHIje/+DE2hV4q1wA5qbArgwKhVn9anpqvAtnrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWIXHxNAT0FjAIALQU1WKtIwwJ6MB8GA1UdIwQY
MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt
ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj
LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscb+Kv4a
RHIAzUiFiaD2Br5tWM/uK8K/6F7lIRPng8QTlWXPQns6WeB0iTVVx2X1yE/zXy6K
GBUxvg4CeD4Yns6PgVPEfBUhd1tnxKkIbAzfPT9u1RhVEFRPXiH/40TU2NgRQPjg
wXIL7TlKX3p+RgzMY6kZUdP4U0h8e7wyHxg5036lybybgmKm8q4lxRk4m2iPXD5o
7GpomY5pfhAVj+f3VqjzrZDGRpreFrbXatDbOTG/JEDA5ySs0TrQuZHzah1i3a0o
w6rqCqJdK5Yp+AhzHWITCvIF6RtOQ2DP7QIAT1p/npdbOdvg8urnu4y5Q7CG/hXi
fol+eb42ZNyZVA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:03 2026 by rpki-client