Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File:                     YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier:          dWuQnAoD5/Y4ldSImVy9G5XS+0VpczELb3i5vfMXxVo=
Subject key identifier:   C2:51:0A:0C:80:D4:9E:D9:0A:18:0C:48:3A:EF:14:0A:D1:11:9D:83
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer:       /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial:       019EC1EE3094855214B4A3CF141E5F4CBBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 17:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:13 +0000
Files and hashes:         1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: NPcvGCG7Ze8mS+ogzfB9EqlHsizrDd9y1hznTkDbtwg=)
                          2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:30:94:85:52:14:b4:a3:cf:14:1e:5f:4c:bb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
        Validity
            Not Before: Jun 13 17:01:13 2026 GMT
            Not After : Jun 14 17:01:13 2026 GMT
        Subject: CN=c2510a0c80d49ed90a180c483aef140ad1119d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:f5:88:b1:05:a5:0d:92:6e:10:9c:c6:56:
                    82:95:15:27:87:cd:e6:b7:47:a7:9e:56:ca:4f:f3:
                    f2:c2:15:62:e7:6e:09:66:64:8b:19:d3:88:3a:96:
                    52:be:e9:70:af:19:1c:7c:b4:ef:44:85:7c:79:63:
                    d7:76:36:f6:0e:00:b8:2c:36:18:e4:ee:0e:77:cc:
                    40:41:ac:88:2e:57:c6:08:13:58:f7:40:5a:32:aa:
                    f7:ba:e4:39:ca:ef:f2:63:0f:bf:df:3b:88:e3:b3:
                    9c:58:45:8c:e8:84:d4:40:d7:e4:76:bc:28:5d:0e:
                    10:85:78:16:08:35:af:2f:78:80:c1:70:99:c0:9d:
                    4b:59:99:b2:e9:9a:7b:61:87:7a:63:06:63:94:57:
                    ee:5c:fa:f5:9f:ac:a4:80:2b:20:e8:ee:b9:9d:c0:
                    34:60:f1:04:ae:90:f1:85:f4:60:3a:5b:86:2e:be:
                    d0:51:01:b9:ae:5e:a2:22:81:dc:f0:fc:e4:0b:dd:
                    b2:32:4b:6c:c2:be:41:36:1f:4d:02:e9:19:33:97:
                    11:ef:04:1f:ce:60:7a:6b:8d:1d:98:2a:75:87:f4:
                    c5:2a:7c:f5:79:4d:61:70:f6:fc:c2:22:bb:3f:ea:
                    72:23:f2:28:a3:6c:94:bb:72:a4:7d:50:43:8b:4f:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:0A:0C:80:D4:9E:D9:0A:18:0C:48:3A:EF:14:0A:D1:11:9D:83
            X509v3 Authority Key Identifier:
                keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:46:c4:2b:9b:c2:d6:4c:21:6e:c5:86:f6:88:85:5d:31:
         a0:8c:43:b9:ee:b8:56:e9:c7:48:bd:d0:8b:bb:2a:af:3c:24:
         24:af:c6:2e:7e:67:c4:28:c1:88:b1:4a:42:e2:6d:39:51:c6:
         86:47:7c:a7:67:94:0d:1f:0d:49:b4:81:89:26:ce:0b:e5:31:
         38:73:20:21:35:ea:8e:9b:7b:6b:4c:94:0c:5e:42:20:da:72:
         29:43:b4:b6:d3:f1:a5:cd:df:e8:44:e7:89:6a:12:8c:4a:fb:
         7f:59:60:61:d2:a8:7b:78:a7:f1:77:1c:d5:51:2c:62:f4:61:
         45:fc:5d:ac:21:0d:76:a3:a5:3f:4e:40:4c:31:af:5f:40:86:
         63:c3:1a:c2:9c:07:2b:00:80:8e:ac:79:8c:0a:ad:fc:57:d5:
         ad:4b:ea:f0:3f:0c:e6:d4:53:92:3c:25:01:e8:2f:8a:b4:59:
         f9:e0:39:61:a0:55:b2:c0:ad:90:0b:c4:96:e6:90:db:c2:39:
         89:95:2b:49:d5:3f:87:4b:48:7e:fa:ba:7d:4c:c0:8d:f8:83:
         84:ee:44:04:cf:07:33:92:29:89:08:d7:e8:af:b1:d1:8c:ed:
         f7:15:f7:c8:75:f4:d2:4e:4b:98:a2:16:fa:d8:6f:92:7d:c2:
         ef:c3:7b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7jCUhVIUtKPPFB5fTLuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi
ZjYxY2YwHhcNMjYwNjEzMTcwMTEzWhcNMjYwNjE0MTcwMTEzWjAzMTEwLwYDVQQD
EyhjMjUxMGEwYzgwZDQ5ZWQ5MGExODBjNDgzYWVmMTQwYWQxMTE5ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuD1iLEFpQ2SbhCcxlaClRUnh83m
t0ennlbKT/PywhVi524JZmSLGdOIOpZSvulwrxkcfLTvRIV8eWPXdjb2DgC4LDYY
5O4Od8xAQayILlfGCBNY90BaMqr3uuQ5yu/yYw+/3zuI47OcWEWM6ITUQNfkdrwo
XQ4QhXgWCDWvL3iAwXCZwJ1LWZmy6Zp7YYd6YwZjlFfuXPr1n6ykgCsg6O65ncA0
YPEErpDxhfRgOluGLr7QUQG5rl6iIoHc8PzkC92yMktswr5BNh9NAukZM5cR7wQf
zmB6a40dmCp1h/TFKnz1eU1hcPb8wiK7P+pyI/Ioo2yUu3KkfVBDi0+lsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJRCgyA1J7ZChgMSDrvFArREZ2DMB8GA1UdIwQY
MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct
ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5
LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsxGxCub
wtZMIW7FhvaIhV0xoIxDue64VunHSL3Qi7sqrzwkJK/GLn5nxCjBiLFKQuJtOVHG
hkd8p2eUDR8NSbSBiSbOC+UxOHMgITXqjpt7a0yUDF5CINpyKUO0ttPxpc3f6ETn
iWoSjEr7f1lgYdKoe3in8Xcc1VEsYvRhRfxdrCENdqOlP05ATDGvX0CGY8MawpwH
KwCAjqx5jAqt/FfVrUvq8D8M5tRTkjwlAegvirRZ+eA5YaBVssCtkAvEluaQ28I5
iZUrSdU/h0tIfvq6fUzAjfiDhO5EBM8HM5IpiQjX6K+x0Yzt9xX3yHX00k5LmKIW
+thvkn3C78N7zw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:15 2026 by rpki-client