Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          Xc8HSIemmYSQnIyc+0WLolU9AzyltgkYTmKDw+S/wPE=
Subject key identifier:   BF:C1:77:6E:87:81:16:56:AA:A7:6F:50:26:B3:29:73:F7:EB:D1:18
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       019EBFFF5206EC859A789178E382525526AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 08:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:41 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: R0x6Bmpbf8pp/GKIZ5AahdfpVbnO1TxHaxuDo3RCTi8=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:52:06:ec:85:9a:78:91:78:e3:82:52:55:26:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Jun 13 08:00:41 2026 GMT
            Not After : Jun 14 08:00:41 2026 GMT
        Subject: CN=bfc1776e87811656aaa76f5026b32973f7ebd118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:ee:f3:d4:dc:e6:a3:35:2a:89:69:6f:42:
                    44:f9:45:8b:64:05:4b:08:f9:fa:b3:cb:96:c3:35:
                    c4:f3:f1:93:a3:02:41:4a:98:1f:33:b0:a8:31:c2:
                    cd:bd:dd:2a:2d:95:08:f4:9e:48:31:39:d8:b8:83:
                    3a:f1:f6:02:94:68:69:9d:3d:8b:22:bc:58:94:c9:
                    43:d9:29:9f:24:2c:99:5e:38:50:ac:54:45:00:1d:
                    c9:eb:91:c2:16:c3:1a:56:28:cd:87:2d:38:3d:79:
                    0f:20:5c:fa:2b:43:ac:59:21:c5:8d:76:65:1b:f6:
                    e9:c4:5e:f6:c6:eb:95:61:69:b3:98:d5:21:6b:5d:
                    71:47:f2:84:bd:06:8f:b7:a6:c9:9e:f9:00:a4:1d:
                    c4:fc:0a:99:16:62:96:28:45:ed:62:06:56:42:58:
                    53:80:48:7b:2c:7a:3a:7c:14:1e:31:a9:f6:b2:37:
                    0b:c9:c0:12:73:26:de:a3:f2:b7:e9:6f:22:2a:09:
                    b2:38:0f:52:16:f5:3b:ad:37:96:5f:99:4a:a7:c5:
                    e7:b5:cc:c9:4f:3b:0c:f1:22:d3:b6:e1:cd:b8:75:
                    c0:3b:90:86:9a:79:3c:a0:65:b1:fe:26:52:b4:81:
                    26:0c:e7:aa:da:18:b1:09:6c:60:c6:bd:b6:87:f1:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C1:77:6E:87:81:16:56:AA:A7:6F:50:26:B3:29:73:F7:EB:D1:18
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:36:2c:f3:56:de:24:86:ee:62:c5:a7:4b:eb:42:05:3c:
         b1:e5:c5:d7:e1:a2:22:39:ec:5b:f2:f5:7c:d7:e2:69:32:2e:
         8c:e6:f8:30:ce:58:d2:0b:2d:b0:eb:96:3e:a5:40:0e:cd:06:
         41:ad:29:12:38:18:38:2d:b0:1b:3c:4d:4d:fc:fe:5b:86:04:
         da:22:3a:10:7a:9f:34:26:ce:3e:11:03:54:75:39:e9:1b:4c:
         36:2d:5e:eb:05:82:da:ca:f9:2c:34:94:dd:91:7f:a2:56:6b:
         9b:be:1c:ad:22:2e:cf:63:d8:31:01:2b:d9:ed:c1:1d:94:36:
         45:e5:9d:14:c4:9c:3f:7f:9d:32:1e:70:a3:5b:78:92:32:85:
         40:2b:aa:77:dc:f7:90:fe:f9:33:ef:a9:6b:1a:3e:e0:e9:01:
         09:c6:86:04:03:9a:c7:ae:cf:76:dd:b2:69:83:db:ca:57:e5:
         7e:bc:90:32:50:d4:c4:ab:51:cd:33:a3:3e:44:91:1a:81:a9:
         52:17:97:ae:8a:b7:f9:de:c2:a6:ac:d5:3f:33:7c:c8:11:5b:
         b5:b7:be:2f:5e:06:54:19:9e:14:4a:00:2e:c5:ba:49:39:4f:
         e0:3a:c7:17:7a:2c:56:7f:ae:f2:a6:67:b3:a5:6b:2e:44:ca:
         40:83:e5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//1IG7IWaeJF444JSVSatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi
MDYzNmMwHhcNMjYwNjEzMDgwMDQxWhcNMjYwNjE0MDgwMDQxWjAzMTEwLwYDVQQD
EyhiZmMxNzc2ZTg3ODExNjU2YWFhNzZmNTAyNmIzMjk3M2Y3ZWJkMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotDu89Tc5qM1Kolpb0JE+UWLZAVL
CPn6s8uWwzXE8/GTowJBSpgfM7CoMcLNvd0qLZUI9J5IMTnYuIM68fYClGhpnT2L
IrxYlMlD2SmfJCyZXjhQrFRFAB3J65HCFsMaVijNhy04PXkPIFz6K0OsWSHFjXZl
G/bpxF72xuuVYWmzmNUha11xR/KEvQaPt6bJnvkApB3E/AqZFmKWKEXtYgZWQlhT
gEh7LHo6fBQeMan2sjcLycAScybeo/K36W8iKgmyOA9SFvU7rTeWX5lKp8XntczJ
TzsM8SLTtuHNuHXAO5CGmnk8oGWx/iZStIEmDOeq2hixCWxgxr22h/GERQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/Bd26HgRZWqqdvUCazKXP369EYMB8GA1UdIwQY
MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt
OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl
LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9c2LPNW
3iSG7mLFp0vrQgU8seXF1+GiIjnsW/L1fNfiaTIujOb4MM5Y0gstsOuWPqVADs0G
Qa0pEjgYOC2wGzxNTfz+W4YE2iI6EHqfNCbOPhEDVHU56RtMNi1e6wWC2sr5LDSU
3ZF/olZrm74crSIuz2PYMQEr2e3BHZQ2ReWdFMScP3+dMh5wo1t4kjKFQCuqd9z3
kP75M++paxo+4OkBCcaGBAOax67Pdt2yaYPbylflfryQMlDUxKtRzTOjPkSRGoGp
UheXroq3+d7CpqzVPzN8yBFbtbe+L14GVBmeFEoALsW6STlP4DrHF3osVn+u8qZn
s6VrLkTKQIPlOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:10 2026 by rpki-client