Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File:                     YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier:          mrr8uIcmhhCmsb7H35KtH1uTMfy+YThMd8uiuzobe8g=
Subject key identifier:   EB:04:72:8C:F8:88:50:3F:E7:38:42:41:0F:BC:81:47:7F:D4:6D:92
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer:       /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial:       019EC3A4FA6D676F0CDDD797281FD55B97D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 01:00:29 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:29 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:29 +0000
Files and hashes:         1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
                          2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: Neqb49HyfIE+AFWR4NSZrBw2gyk0sE4YfA9iu1E0EIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a4:fa:6d:67:6f:0c:dd:d7:97:28:1f:d5:5b:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
        Validity
            Not Before: Jun 14 01:00:29 2026 GMT
            Not After : Jun 15 01:00:29 2026 GMT
        Subject: CN=eb04728cf888503fe73842410fbc81477fd46d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:df:c0:f1:bb:03:66:9b:00:15:d3:6f:0f:
                    64:5c:50:5a:4d:85:79:63:4a:51:89:8a:a8:a3:76:
                    40:68:af:5f:71:b0:21:9d:70:f4:b6:47:1f:70:c4:
                    95:ff:3e:f1:17:7c:0b:d6:0c:73:8f:66:78:43:22:
                    ef:af:2f:7d:f3:4d:a2:bf:9f:87:0f:df:2d:e5:6a:
                    09:4c:e3:48:e3:dd:cb:40:27:df:d7:92:80:d3:6d:
                    4b:09:ac:16:20:da:8d:83:e5:4b:d6:1d:ca:78:88:
                    cd:cd:9a:da:c2:a7:01:dd:e9:a2:37:b9:97:80:a7:
                    62:23:a2:0e:7e:e1:84:95:cc:7d:46:6b:04:5d:26:
                    4a:d5:2c:7e:83:f8:8e:0b:ad:ad:02:1d:53:08:64:
                    eb:50:61:ae:2f:80:e1:02:85:bc:79:01:b3:b1:dc:
                    f3:03:a7:ae:3c:1a:79:e0:a4:23:05:cd:15:b8:88:
                    33:d8:bc:77:58:4f:91:95:f6:75:6b:3f:1e:d0:22:
                    ae:79:6a:a0:b4:e4:ef:9d:7c:5e:84:8b:8c:6a:35:
                    30:20:3f:5e:e4:a0:ff:c3:c9:d6:c5:b2:95:a9:17:
                    be:a1:c2:cf:c9:d8:0a:9e:5c:4a:15:e4:55:3b:f3:
                    46:34:32:63:82:ec:6e:36:a9:8e:6f:67:a8:70:4c:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:04:72:8C:F8:88:50:3F:E7:38:42:41:0F:BC:81:47:7F:D4:6D:92
            X509v3 Authority Key Identifier:
                keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:52:28:29:98:fb:97:57:18:af:85:1c:4e:6b:81:a6:68:
         30:1b:6d:db:3f:16:45:85:75:55:4b:95:c8:54:90:ae:3d:a4:
         4e:cb:ce:a1:d8:68:dd:dd:0e:1a:58:78:e3:ba:31:bd:b5:20:
         6a:3a:0f:c0:9e:19:f0:12:3b:36:17:b8:22:78:c2:6f:e3:3b:
         bf:4a:a1:6b:04:37:c2:41:a6:88:96:a1:89:e3:f0:12:da:d3:
         d6:c2:9e:5d:90:d2:05:b7:d3:59:29:f9:e8:e5:f9:19:9a:17:
         d1:56:d6:e8:60:26:e9:63:23:3b:2c:9c:0a:29:ba:88:f2:55:
         35:3f:7c:c4:2e:a5:16:eb:06:7e:76:34:61:18:bb:86:22:c3:
         ca:a5:09:8d:34:8a:74:77:38:66:6b:4f:51:ee:7b:03:c6:a9:
         18:91:8a:a5:a5:86:bb:b7:7a:ee:7c:96:c6:20:42:3f:19:af:
         40:41:17:b6:69:8d:c6:1f:78:d1:1b:71:b1:2d:c6:92:11:57:
         77:3c:1b:36:40:cc:f3:d5:9e:b8:5f:a9:f9:da:82:82:6c:33:
         40:a1:b6:a1:16:2c:78:43:eb:fd:4f:a9:6d:92:ce:78:81:27:
         8b:97:f7:46:f9:53:26:c1:fa:35:b3:dd:eb:e5:9d:ce:da:38:
         e1:35:45:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpPptZ28M3deXKB/VW5fQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmYzNzM2MjAxNDZlNmYyOThhZTgyZDJjOGE4MzcxY2Fj
YjdiMWIwHhcNMjYwNjE0MDEwMDI5WhcNMjYwNjE1MDEwMDI5WjAzMTEwLwYDVQQD
EyhlYjA0NzI4Y2Y4ODg1MDNmZTczODQyNDEwZmJjODE0NzdmZDQ2ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqzfwPG7A2abABXTbw9kXFBaTYV5
Y0pRiYqoo3ZAaK9fcbAhnXD0tkcfcMSV/z7xF3wL1gxzj2Z4QyLvry99802iv5+H
D98t5WoJTONI493LQCff15KA021LCawWINqNg+VL1h3KeIjNzZrawqcB3emiN7mX
gKdiI6IOfuGElcx9RmsEXSZK1Sx+g/iOC62tAh1TCGTrUGGuL4DhAoW8eQGzsdzz
A6euPBp54KQjBc0VuIgz2Lx3WE+RlfZ1az8e0CKueWqgtOTvnXxehIuMajUwID9e
5KD/w8nWxbKVqRe+ocLPydgKnlxKFeRVO/NGNDJjguxuNqmOb2eocEzOIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsEcoz4iFA/5zhCQQ+8gUd/1G2SMB8GA1UdIwQY
MBaAFGC/NzYgFG5vKYroLSyKg3HKy3sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTIt
ZjBhODEyM2U3MGY5LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTItZjBhODEyM2U3MGY5
LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeJSKCmY
+5dXGK+FHE5rgaZoMBtt2z8WRYV1VUuVyFSQrj2kTsvOodho3d0OGlh447oxvbUg
ajoPwJ4Z8BI7Nhe4InjCb+M7v0qhawQ3wkGmiJahiePwEtrT1sKeXZDSBbfTWSn5
6OX5GZoX0VbW6GAm6WMjOyycCim6iPJVNT98xC6lFusGfnY0YRi7hiLDyqUJjTSK
dHc4ZmtPUe57A8apGJGKpaWGu7d67nyWxiBCPxmvQEEXtmmNxh940RtxsS3GkhFX
dzwbNkDM89WeuF+p+dqCgmwzQKG2oRYseEPr/U+pbZLOeIEni5f3RvlTJsH6NbPd
6+Wdzto44TVFcg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:53:09 2026 by rpki-client