Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File:                     Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier:          SwMrW9Gx/Etzvkr1xfmkNSMDIsqwPWBICIqbq56q8Sg=
Subject key identifier:   DF:62:E4:89:4A:C3:D1:4C:47:7E:EC:28:B0:B9:CC:76:D6:12:F2:CB
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer:       /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial:       019EBE480504479CCD1D9DC579D0615A9988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number:          1850
Signing time:             Sat 13 Jun 2026 00:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:51 +0000
Files and hashes:         1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: CDImSOsJlzP5ocb3AHS77rFIRaSo4lcyaBi39fuxkzo=)
                          2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
                          3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:05:04:47:9c:cd:1d:9d:c5:79:d0:61:5a:99:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
        Validity
            Not Before: Jun 13 00:00:51 2026 GMT
            Not After : Jun 14 00:00:51 2026 GMT
        Subject: CN=df62e4894ac3d14c477eec28b0b9cc76d612f2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:1a:0d:f6:0e:41:c1:87:3d:0c:44:4d:52:
                    bb:57:64:22:ec:4e:d1:48:91:34:f3:66:bd:d7:bb:
                    14:50:45:e6:88:37:24:82:ae:ea:58:63:3f:a8:cb:
                    c9:b8:b8:34:be:e1:0c:a3:55:eb:b2:36:77:ed:8b:
                    f8:55:48:bf:70:21:c4:a6:5b:a5:d9:e5:d0:49:a0:
                    63:09:a2:4a:c8:cb:ff:9b:30:aa:23:35:80:17:98:
                    de:b0:04:e2:83:db:9d:98:a2:e9:1d:39:d9:7e:d8:
                    a2:cb:5e:c5:70:b5:e0:c3:d3:3a:0d:e8:f8:28:8f:
                    b6:52:7f:04:26:4a:ab:bc:2a:5e:8a:bd:23:f3:b3:
                    20:cb:1e:78:ba:e7:46:79:72:82:87:b2:c1:41:b2:
                    43:7e:6c:49:a7:6e:ba:56:7f:07:9f:04:76:f5:54:
                    1c:83:65:89:af:47:e0:ad:d7:ed:e8:4f:bc:76:f4:
                    55:ae:84:d0:73:af:7a:b0:f5:00:7b:1f:67:4b:64:
                    88:2f:1f:7c:20:d9:b8:9c:27:3b:fe:b2:3d:38:a2:
                    31:dd:68:6c:fe:ea:7b:1c:14:26:fd:bf:22:c1:7c:
                    7a:ea:94:34:47:c5:e5:a3:5b:74:81:2c:5d:14:64:
                    4e:ca:65:f0:44:1f:a2:77:52:d7:70:01:b9:27:14:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:E4:89:4A:C3:D1:4C:47:7E:EC:28:B0:B9:CC:76:D6:12:F2:CB
            X509v3 Authority Key Identifier:
                keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:0c:b2:88:e1:e6:80:6f:8a:61:5b:b6:0e:b8:ef:57:73:8e:
         c7:96:6d:be:89:df:cc:a9:d1:14:90:23:97:99:df:c0:cc:f7:
         9d:2f:3c:54:a9:8a:47:1e:9b:c6:55:b1:fd:fc:d4:13:f7:5e:
         9a:9e:3d:ec:ae:fd:ce:fb:a1:10:6a:88:c8:42:2c:70:f8:95:
         df:d8:6f:e4:95:a7:31:11:b7:ee:23:23:15:9e:28:29:bf:3d:
         49:c8:76:68:0d:16:7c:2c:ec:c4:ae:f4:33:29:ef:c3:04:68:
         75:ac:68:20:a8:8b:80:4a:0a:9b:5f:6a:35:91:67:7a:56:c1:
         09:2f:f2:9a:0f:60:53:19:9b:95:76:7f:e4:40:80:07:06:c7:
         3d:8d:aa:9c:dd:f1:ca:ee:8f:37:97:71:9e:99:b3:a0:59:38:
         92:6d:9c:74:f1:b7:d0:2e:ae:72:94:8d:d2:78:15:41:db:1b:
         34:85:d8:1b:11:44:2a:da:b0:74:14:2e:63:b2:9b:cc:bc:8b:
         fe:61:3b:7c:f5:92:bd:3e:28:14:e2:3e:5f:b8:48:99:2b:6b:
         37:72:58:29:48:8c:12:93:57:32:9e:71:92:c5:10:ed:2d:ce:
         da:54:3d:7f:f8:bc:4b:ce:af:28:ca:7c:0e:12:d6:a6:96:8f:
         5e:10:a2:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SAUER5zNHZ3FedBhWpmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3
ODlhZmMwHhcNMjYwNjEzMDAwMDUxWhcNMjYwNjE0MDAwMDUxWjAzMTEwLwYDVQQD
EyhkZjYyZTQ4OTRhYzNkMTRjNDc3ZWVjMjhiMGI5Y2M3NmQ2MTJmMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPMaDfYOQcGHPQxETVK7V2Qi7E7R
SJE082a917sUUEXmiDckgq7qWGM/qMvJuLg0vuEMo1XrsjZ37Yv4VUi/cCHEplul
2eXQSaBjCaJKyMv/mzCqIzWAF5jesATig9udmKLpHTnZftiiy17FcLXgw9M6Dej4
KI+2Un8EJkqrvCpeir0j87Mgyx54uudGeXKCh7LBQbJDfmxJp266Vn8HnwR29VQc
g2WJr0fgrdft6E+8dvRVroTQc696sPUAex9nS2SILx98INm4nCc7/rI9OKIx3Whs
/up7HBQm/b8iwXx66pQ0R8Xlo1t0gSxdFGROymXwRB+id1LXcAG5JxTn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9i5IlKw9FMR37sKLC5zHbWEvLLMB8GA1UdIwQY
MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt
MjkzNmFhMjI3NzY1LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1
LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0gyyiOHm
gG+KYVu2DrjvV3OOx5ZtvonfzKnRFJAjl5nfwMz3nS88VKmKRx6bxlWx/fzUE/de
mp497K79zvuhEGqIyEIscPiV39hv5JWnMRG37iMjFZ4oKb89Sch2aA0WfCzsxK70
MynvwwRodaxoIKiLgEoKm19qNZFnelbBCS/ymg9gUxmblXZ/5ECABwbHPY2qnN3x
yu6PN5dxnpmzoFk4km2cdPG30C6ucpSN0ngVQdsbNIXYGxFEKtqwdBQuY7KbzLyL
/mE7fPWSvT4oFOI+X7hImStrN3JYKUiMEpNXMp5xksUQ7S3O2lQ9f/i8S86vKMp8
DhLWppaPXhCibA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:46 2026 by rpki-client