Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File:                     2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier:          SH2kpNenF0oOzGKTpO7KB0sKafAzDqA5r7HNE2N/528=
Subject key identifier:   B8:BB:2D:33:46:ED:3B:C8:0A:0F:0D:76:46:00:56:4C:65:75:73:46
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       019EC06D49E682D4CFAFA0D51BF81F1069AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number:          16C7
Signing time:             Sat 13 Jun 2026 10:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:48 +0000
Files and hashes:         1: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
                          2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: JVbnUc4M9KikVzckfaIel4eyPJ2YPyyKgcNTVGlzPaw=)
                          3: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (hash: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=)
                          4: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
                          5: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
                          6: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
                          7: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
                          8: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:49:e6:82:d4:cf:af:a0:d5:1b:f8:1f:10:69:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Jun 13 10:00:48 2026 GMT
            Not After : Jun 14 10:00:48 2026 GMT
        Subject: CN=b8bb2d3346ed3bc80a0f0d764600564c65757346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:d9:86:79:83:b6:62:05:29:45:5f:a3:57:
                    60:6e:8a:c4:e4:36:8b:f3:47:c5:39:09:52:2c:e5:
                    44:97:f6:c5:54:c3:be:30:8f:00:f2:69:04:c8:83:
                    d7:be:ad:62:66:32:ba:e6:6c:b1:00:82:fd:ea:71:
                    64:8d:c9:6e:16:f9:a0:0f:16:a3:7d:38:26:6d:ce:
                    97:fa:a4:47:3b:a4:6b:3d:b2:6a:3e:f0:b4:e2:93:
                    5f:85:e2:a1:3e:93:28:cb:60:6f:42:d1:85:a7:e6:
                    28:50:c2:0e:dd:5c:d0:3d:b5:83:5b:87:ec:27:7f:
                    f9:0a:1a:76:72:ed:e5:54:f6:c8:c5:9f:d1:a3:91:
                    41:1b:17:58:84:c5:66:72:07:3a:e4:59:c3:e5:65:
                    ef:f1:d2:35:a4:a9:31:9b:5f:3f:6e:b4:8f:1d:b6:
                    59:05:a1:56:23:0d:cd:0c:30:d4:2d:d7:a7:ff:6f:
                    6b:2d:8e:af:f3:12:7e:06:39:7f:e5:92:b9:14:ec:
                    37:48:05:b9:21:25:2a:b2:da:41:b5:55:88:f0:43:
                    cf:41:c3:af:24:8e:e0:0c:30:e5:34:d1:e1:83:ff:
                    f8:9a:cf:b5:58:d9:1c:a8:51:77:f5:e0:7b:94:d4:
                    06:2d:00:53:50:ff:d9:a5:6f:cc:ac:9e:4b:5f:2c:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BB:2D:33:46:ED:3B:C8:0A:0F:0D:76:46:00:56:4C:65:75:73:46
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:e7:34:7c:e5:ee:ce:6a:84:74:68:ab:43:b1:4f:69:4c:
         24:18:79:98:a1:4f:53:e0:1b:99:17:e2:66:80:48:71:9d:a9:
         2c:85:ce:c0:be:2f:98:79:a0:b9:03:5b:1d:9a:8a:f8:f4:41:
         41:26:00:b2:d4:c5:50:62:fb:d3:3e:97:e8:5f:15:12:f9:7f:
         8d:d7:d4:06:69:b2:0d:ec:89:19:4d:d7:d0:5c:1c:81:9c:9e:
         69:91:72:94:16:44:38:20:16:9f:29:f4:5d:f0:ce:cf:09:fe:
         de:42:71:29:2b:3e:2f:a3:de:83:9f:f6:92:de:33:da:8e:ad:
         3a:ba:f2:4d:ce:78:bd:77:70:38:e5:46:7d:ee:12:af:94:cd:
         4d:e5:59:4b:6d:fe:06:fd:a2:83:47:1f:57:60:93:98:6c:fd:
         00:9b:35:f7:ba:04:f2:7e:dc:c7:49:0f:a7:6d:ca:18:d3:8c:
         39:f3:15:87:f9:f1:70:30:bd:f5:74:92:03:63:05:38:db:4b:
         ab:fa:2e:bb:ad:5e:0c:1c:bf:67:48:99:0b:e7:d1:b8:50:eb:
         04:d6:22:d6:98:89:09:d9:41:7d:d3:43:68:97:65:1d:cc:e6:
         40:97:08:ab:6b:ca:71:45:0c:23:ad:b7:8b:e4:fe:bf:c3:95:
         f1:43:ef:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbUnmgtTPr6DVG/gfEGmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjYwNjEzMTAwMDQ4WhcNMjYwNjE0MTAwMDQ4WjAzMTEwLwYDVQQD
EyhiOGJiMmQzMzQ2ZWQzYmM4MGEwZjBkNzY0NjAwNTY0YzY1NzU3MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoPZhnmDtmIFKUVfo1dgborE5DaL
80fFOQlSLOVEl/bFVMO+MI8A8mkEyIPXvq1iZjK65myxAIL96nFkjcluFvmgDxaj
fTgmbc6X+qRHO6RrPbJqPvC04pNfheKhPpMoy2BvQtGFp+YoUMIO3VzQPbWDW4fs
J3/5Chp2cu3lVPbIxZ/Ro5FBGxdYhMVmcgc65FnD5WXv8dI1pKkxm18/brSPHbZZ
BaFWIw3NDDDULden/29rLY6v8xJ+Bjl/5ZK5FOw3SAW5ISUqstpBtVWI8EPPQcOv
JI7gDDDlNNHhg//4ms+1WNkcqFF39eB7lNQGLQBTUP/ZpW/MrJ5LXyxTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi7LTNG7TvICg8NdkYAVkxldXNGMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMjnNHzl
7s5qhHRoq0OxT2lMJBh5mKFPU+AbmRfiZoBIcZ2pLIXOwL4vmHmguQNbHZqK+PRB
QSYAstTFUGL70z6X6F8VEvl/jdfUBmmyDeyJGU3X0FwcgZyeaZFylBZEOCAWnyn0
XfDOzwn+3kJxKSs+L6Peg5/2kt4z2o6tOrryTc54vXdwOOVGfe4Sr5TNTeVZS23+
Bv2ig0cfV2CTmGz9AJs197oE8n7cx0kPp23KGNOMOfMVh/nxcDC99XSSA2MFONtL
q/ouu61eDBy/Z0iZC+fRuFDrBNYi1piJCdlBfdNDaJdlHczmQJcIq2vKcUUMI623
i+T+v8OV8UPvEw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:13 2026 by rpki-client