Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File:                     yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier:          eCuts/1T1kfNN+WdyI3FprbYoEsh7ohyE/Lrolc+8CA=
Subject key identifier:   7A:6F:A2:6E:45:90:74:8A:16:FF:06:D8:4F:1F:8E:30:A2:0B:E9:C0
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer:       /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial:       019EC25BC4CBF2EBCF97E923950476EAD5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 19:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:54 +0000
Files and hashes:         1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
                          2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
                          3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: w6DN8KHmPiEhaCsa2xmnpocp67CYm8V+6wiOHi8qNQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:c4:cb:f2:eb:cf:97:e9:23:95:04:76:ea:d5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
        Validity
            Not Before: Jun 13 19:00:54 2026 GMT
            Not After : Jun 14 19:00:54 2026 GMT
        Subject: CN=7a6fa26e4590748a16ff06d84f1f8e30a20be9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:19:e9:c4:b5:25:7c:15:e0:5c:65:cd:31:
                    8a:34:67:cf:bb:6a:ef:d4:56:61:92:d9:75:4d:79:
                    4f:f9:6f:a4:52:a1:f7:84:3a:22:c6:c8:e2:17:a1:
                    60:e8:30:15:25:ee:4f:4f:cf:15:6a:ae:77:9b:0a:
                    f5:96:a9:01:a5:7f:fe:84:bf:72:d6:43:1a:f4:b2:
                    e0:89:29:5d:af:78:bc:d8:3f:35:1e:d0:20:5c:5c:
                    0b:1b:c1:42:01:64:de:7a:c4:25:52:57:3f:19:97:
                    89:72:7d:f9:2b:f1:d4:84:c7:e1:ff:c4:e9:5c:01:
                    bc:e7:8b:a7:ad:ec:12:98:36:22:ea:7c:56:d8:34:
                    84:89:2b:c1:fe:88:e7:95:25:ef:1b:b9:07:d0:89:
                    76:2b:9e:7d:f7:15:97:23:05:c6:e3:81:18:18:0f:
                    b8:2c:2f:5b:cf:a0:20:9c:8e:5f:05:63:a3:ed:62:
                    5a:d9:e6:f4:ff:3c:59:16:61:cf:ad:1d:dd:ae:92:
                    ae:d9:37:4f:67:59:3a:de:91:9c:e8:bb:b8:99:d9:
                    b8:93:34:3d:80:b2:0f:ae:0d:56:49:e8:c5:18:12:
                    bc:f9:8b:f5:ab:a0:f0:92:38:05:81:22:81:3f:5c:
                    02:36:f9:e6:b4:4b:7d:74:7c:0e:d8:fd:6c:b3:fd:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6F:A2:6E:45:90:74:8A:16:FF:06:D8:4F:1F:8E:30:A2:0B:E9:C0
            X509v3 Authority Key Identifier:
                keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8d:f9:09:b0:1d:bc:4b:86:07:eb:cf:5a:0d:d9:0a:57:6d:
         f2:83:70:02:55:b5:b0:96:27:df:5b:e3:02:9c:a2:e0:96:3b:
         ac:49:a7:63:4a:26:5e:ce:56:42:09:55:f9:2c:d0:9f:d5:59:
         a7:25:42:ef:5f:4b:87:f1:33:7e:a6:ea:a0:86:fa:4b:ad:c0:
         b1:69:f1:f1:4c:8e:e1:fe:e6:7e:b5:2a:f6:db:90:77:cb:a1:
         6b:4d:77:1c:68:89:99:9e:15:c3:20:3a:29:b6:fa:9f:7f:47:
         5f:f8:40:3e:25:66:5b:e3:95:24:e2:07:2f:5a:74:49:fc:46:
         1a:11:91:10:7e:bb:7a:5e:42:45:ab:cf:08:82:9c:0c:98:4f:
         b1:27:66:4f:f4:3b:3a:12:33:ab:44:f2:fd:de:af:a1:3e:1c:
         63:fa:c8:51:04:1f:09:1a:df:db:31:66:de:78:0f:75:30:56:
         bf:e2:8e:14:b6:da:5a:5f:8a:ea:58:b4:ea:f0:b0:78:8b:2e:
         dc:9a:49:dd:b2:af:38:78:4e:d6:a9:27:d9:21:b1:45:dc:40:
         c9:cd:74:bb:8d:2b:21:c0:92:b2:b4:fd:ef:79:7f:3e:68:5b:
         bb:8d:1f:f3:92:21:8f:65:a9:7e:3f:60:47:79:ec:54:42:cc:
         cb:f3:84:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW8TL8uvPl+kjlQR26tWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZmFmNmZhMjViOGQyYWNiMWI0NGRjZGQ1NTQzN2FiYTIy
MjZlOWUwHhcNMjYwNjEzMTkwMDU0WhcNMjYwNjE0MTkwMDU0WjAzMTEwLwYDVQQD
Eyg3YTZmYTI2ZTQ1OTA3NDhhMTZmZjA2ZDg0ZjFmOGUzMGEyMGJlOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgIZ6cS1JXwV4FxlzTGKNGfPu2rv
1FZhktl1TXlP+W+kUqH3hDoixsjiF6Fg6DAVJe5PT88Vaq53mwr1lqkBpX/+hL9y
1kMa9LLgiSldr3i82D81HtAgXFwLG8FCAWTeesQlUlc/GZeJcn35K/HUhMfh/8Tp
XAG854unrewSmDYi6nxW2DSEiSvB/ojnlSXvG7kH0Il2K5599xWXIwXG44EYGA+4
LC9bz6AgnI5fBWOj7WJa2eb0/zxZFmHPrR3drpKu2TdPZ1k63pGc6Lu4mdm4kzQ9
gLIPrg1WSejFGBK8+Yv1q6DwkjgFgSKBP1wCNvnmtEt9dHwO2P1ss/2E9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpvom5FkHSKFv8G2E8fjjCiC+nAMB8GA1UdIwQY
MBaAFMr69voluNKssbRNzdVUN6uiIm6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YzY1MDctOWQ3Zi00MmM3LTlkMTIt
MGUzNTAwMTc3OGE1LzEveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YzY1MDctOWQ3Zi00MmM3LTlkMTItMGUzNTAwMTc3OGE1
LzEveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo35CbAd
vEuGB+vPWg3ZCldt8oNwAlW1sJYn31vjApyi4JY7rEmnY0omXs5WQglV+SzQn9VZ
pyVC719Lh/EzfqbqoIb6S63AsWnx8UyO4f7mfrUq9tuQd8uha013HGiJmZ4VwyA6
Kbb6n39HX/hAPiVmW+OVJOIHL1p0SfxGGhGREH67el5CRavPCIKcDJhPsSdmT/Q7
OhIzq0Ty/d6voT4cY/rIUQQfCRrf2zFm3ngPdTBWv+KOFLbaWl+K6li06vCweIsu
3JpJ3bKvOHhO1qkn2SGxRdxAyc10u40rIcCSsrT973l/Pmhbu40f85Ihj2Wpfj9g
R3nsVELMy/OEMQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:06 2026 by rpki-client