Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File:                     yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier:          RA/shCmcn8FplDPBXv4cI3G3eo+ong5/WXSZ53YALds=
Subject key identifier:   5A:DD:96:A6:F8:97:64:D5:05:18:48:1F:1F:33:0A:F0:20:1F:9B:58
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer:       /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial:       019EC0A3E42E23B621488F873456D47074EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number:          0735
Signing time:             Sat 13 Jun 2026 11:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:26 +0000
Files and hashes:         1: 05sJvKsPpEQygCgsV_MGQHN9_TM.roa (hash: nFTOD6KUcpEnrht3gN5bskiFEmc9rtUM9QNFKCOE0Vc=)
                          2: 1-xtDrU7wKNsIkkfW8E-ZbC6rELU.roa (hash: rgHDDCujsocFhMaTOl2AntkEyFdfyoyY4MLtmaNj0qw=)
                          3: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
                          4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: GdxJNXd9wa38OLw+LGLqmb+cXwp5P+QLc+vm0aYu898=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:e4:2e:23:b6:21:48:8f:87:34:56:d4:70:74:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
        Validity
            Not Before: Jun 13 11:00:26 2026 GMT
            Not After : Jun 14 11:00:26 2026 GMT
        Subject: CN=5add96a6f89764d50518481f1f330af0201f9b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:18:fd:8f:80:3c:fb:69:e7:5d:81:c6:2f:
                    bf:14:a1:80:04:ea:25:32:17:ec:4f:23:cc:7b:d3:
                    cb:fa:35:35:7a:44:f9:2d:be:95:e3:f4:ad:6c:66:
                    a8:33:22:0f:b8:47:08:11:3e:60:e1:2e:45:04:34:
                    aa:53:b4:43:37:2b:6f:9b:ac:48:12:3e:62:ec:44:
                    51:16:99:1d:c8:b6:b5:2a:9f:07:f2:ff:3e:75:3b:
                    4e:5e:e4:28:b9:01:26:aa:61:e5:bb:f8:61:e7:4b:
                    0c:22:66:3f:d9:36:0b:69:72:21:89:7e:53:af:f1:
                    9b:bf:cd:32:25:2a:de:2c:d9:05:a0:70:e5:1f:39:
                    ef:71:17:23:d4:36:9a:fe:30:43:15:49:2a:d8:25:
                    89:30:ae:cc:17:ed:d9:7e:9f:a8:66:32:d6:6c:07:
                    65:f6:e3:b9:d5:d2:71:78:bf:af:75:54:3b:9a:b7:
                    2c:5e:20:f8:67:e1:9a:2b:bc:9a:34:50:f6:a7:66:
                    ec:b1:6b:71:48:23:1b:c7:f0:b2:8b:a3:20:c2:03:
                    d4:20:50:07:df:05:ed:ac:d1:2d:b2:b6:c3:b9:fb:
                    d1:c4:41:00:c9:63:98:a6:92:21:1b:39:89:91:f8:
                    49:8c:87:80:54:9a:07:7f:b1:7b:8a:58:ba:47:7f:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:96:A6:F8:97:64:D5:05:18:48:1F:1F:33:0A:F0:20:1F:9B:58
            X509v3 Authority Key Identifier:
                keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:62:ce:a2:c6:d8:b5:4b:8a:83:b7:99:89:05:bf:34:7a:
         40:60:00:c9:52:ee:38:4a:78:bc:1c:76:21:66:67:24:ea:82:
         05:56:8e:62:0a:2c:6a:c7:79:f2:aa:b0:51:1c:2b:96:40:ef:
         fb:f5:ab:c9:d9:03:e2:6d:67:2a:51:2a:a6:dc:54:c2:17:b8:
         df:c1:de:b3:a2:7f:24:b2:7b:80:05:cb:09:12:27:0a:3d:d7:
         77:54:cd:9a:b9:d0:e9:a3:01:80:d3:53:22:30:df:ca:f1:e8:
         f4:42:bd:c1:1e:e5:0e:a8:72:fb:40:57:10:58:0e:68:36:00:
         47:1c:6e:29:3c:f7:ad:23:41:ac:9e:c7:a4:dc:6c:4d:be:46:
         68:6c:1f:e5:67:92:51:92:32:e9:70:25:87:73:63:e2:44:35:
         24:1d:97:53:82:6e:59:b4:85:ba:90:a2:b7:99:b7:db:ca:8d:
         c2:9e:70:01:77:66:af:90:3c:07:53:1a:0c:c0:08:f1:0c:85:
         4e:fa:6d:e6:d6:4c:3a:d6:5c:7e:46:4a:e3:90:bf:cf:dd:f5:
         25:44:24:5b:a9:7e:32:49:50:00:f4:f3:68:b1:a3:e2:ec:6d:
         01:6b:99:8c:6d:0e:d8:51:13:0b:cd:0e:5d:6b:3f:25:af:b1:
         2f:8d:dd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao+QuI7YhSI+HNFbUcHTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2
Y2JiYTMwHhcNMjYwNjEzMTEwMDI2WhcNMjYwNjE0MTEwMDI2WjAzMTEwLwYDVQQD
Eyg1YWRkOTZhNmY4OTc2NGQ1MDUxODQ4MWYxZjMzMGFmMDIwMWY5YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYY/Y+APPtp512Bxi+/FKGABOol
MhfsTyPMe9PL+jU1ekT5Lb6V4/StbGaoMyIPuEcIET5g4S5FBDSqU7RDNytvm6xI
Ej5i7ERRFpkdyLa1Kp8H8v8+dTtOXuQouQEmqmHlu/hh50sMImY/2TYLaXIhiX5T
r/Gbv80yJSreLNkFoHDlHznvcRcj1Daa/jBDFUkq2CWJMK7MF+3Zfp+oZjLWbAdl
9uO51dJxeL+vdVQ7mrcsXiD4Z+GaK7yaNFD2p2bssWtxSCMbx/Cyi6MgwgPUIFAH
3wXtrNEtsrbDufvRxEEAyWOYppIhGzmJkfhJjIeAVJoHf7F7ili6R3+D0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrdlqb4l2TVBRhIHx8zCvAgH5tYMB8GA1UdIwQY
MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt
MjBkMjQ5MDAxMzBhLzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYtMjBkMjQ5MDAxMzBh
LzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrxizqLG
2LVLioO3mYkFvzR6QGAAyVLuOEp4vBx2IWZnJOqCBVaOYgosasd58qqwURwrlkDv
+/WrydkD4m1nKlEqptxUwhe438Hes6J/JLJ7gAXLCRInCj3Xd1TNmrnQ6aMBgNNT
IjDfyvHo9EK9wR7lDqhy+0BXEFgOaDYARxxuKTz3rSNBrJ7HpNxsTb5GaGwf5WeS
UZIy6XAlh3Nj4kQ1JB2XU4JuWbSFupCit5m328qNwp5wAXdmr5A8B1MaDMAI8QyF
Tvpt5tZMOtZcfkZK45C/z931JUQkW6l+MklQAPTzaLGj4uxtAWuZjG0O2FETC80O
XWs/Ja+xL43dHA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:55 2026 by rpki-client