Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File:                     yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier:          L7GzIPKn3f/aTYyKLKXsAHuG9FBEvrotNMz8PMzHUKE=
Subject key identifier:   93:CF:A4:47:B4:DA:C1:C8:A0:34:6A:7F:0F:37:28:BB:DD:9E:54:A2
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer:       /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial:       019ED574F1C9EB62245C36F3B1F670B37F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number:          18E5
Signing time:             Wed 17 Jun 2026 12:01:11 +0000
Manifest this update:     Wed 17 Jun 2026 12:01:11 +0000
Manifest next update:     Thu 18 Jun 2026 12:01:11 +0000
Files and hashes:         1: Q1i1i1A5Ui6K8xWYOMC8b2cLIys.roa (hash: K5UU540aeacTeWENSm+dTa5dIuRJreM1pon8ZgCMcE8=)
                          2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: npqtshpL5ywKMLTfm+UA9Op2/NVIyziNRYOxyN5BF1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:74:f1:c9:eb:62:24:5c:36:f3:b1:f6:70:b3:7f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
        Validity
            Not Before: Jun 17 12:01:11 2026 GMT
            Not After : Jun 18 12:01:11 2026 GMT
        Subject: CN=93cfa447b4dac1c8a0346a7f0f3728bbdd9e54a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:96:de:55:e0:5d:43:a7:a3:ae:0c:7a:be:
                    b3:bb:e9:5a:0a:48:f7:f2:19:e4:09:8f:20:3b:27:
                    ce:17:85:ce:7d:8c:5b:db:b8:3c:1d:4f:90:85:75:
                    d8:bf:f4:d4:3c:f0:10:9d:42:64:d3:ca:67:63:34:
                    64:49:0d:c2:bc:db:94:6f:e2:56:8c:1b:11:3a:fb:
                    ab:95:6c:9f:f4:9b:69:58:b6:c3:82:e7:1e:7b:1a:
                    5e:fe:ed:3f:d4:cf:1c:c4:23:c5:b8:43:c8:40:c6:
                    1b:a6:c0:26:98:65:b8:5e:2e:6b:79:c4:29:62:4e:
                    d4:9a:1a:d3:aa:ea:ce:2d:13:44:18:55:4c:c3:ce:
                    b9:37:c1:81:2a:d8:43:32:ef:64:b8:75:1e:85:fa:
                    04:48:aa:fd:08:06:2b:64:80:bd:26:c2:27:32:81:
                    82:89:74:c9:4b:4a:5b:fc:37:06:01:ec:60:1b:d7:
                    26:21:dc:52:a0:bc:27:c0:12:2d:58:c9:4d:c8:90:
                    8f:75:d7:8a:5a:80:c5:6a:f1:2f:7e:ea:2d:1e:36:
                    44:dd:a1:f8:98:7f:5c:7b:28:75:20:d6:fd:1f:56:
                    02:7d:2b:3f:fc:44:f6:d8:21:6c:c9:f6:81:07:2f:
                    ac:18:52:4a:54:b5:45:33:15:3a:76:39:a2:66:a9:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CF:A4:47:B4:DA:C1:C8:A0:34:6A:7F:0F:37:28:BB:DD:9E:54:A2
            X509v3 Authority Key Identifier:
                keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7f:c6:64:9d:9c:f7:b0:b3:83:c0:21:db:02:ad:47:75:31:
         a6:a2:4a:88:33:da:31:50:91:a8:41:c4:d8:fa:4d:69:23:e7:
         2f:37:f2:15:2f:ae:e0:92:23:9d:18:4c:6c:00:3e:ea:1a:49:
         63:4a:c4:e2:54:78:db:b8:0c:e0:47:76:8e:35:8e:9c:03:f8:
         a9:c3:c4:c5:9d:0b:ec:de:59:fe:f9:0e:26:c9:51:9b:34:58:
         5a:3c:47:a0:2a:8c:ca:ef:e4:69:fb:91:69:ed:a7:9c:b7:e7:
         ff:c8:fd:b0:e7:bc:2a:ff:dd:ac:dd:d6:25:41:5e:3a:7b:5a:
         07:3e:fb:e0:91:4c:e7:78:81:8e:4c:fc:63:14:b7:20:e1:69:
         6a:fa:be:2a:a2:b8:ae:29:ac:3e:73:d3:18:fd:e0:3b:cb:c0:
         a8:bd:42:c7:20:24:26:31:bd:c4:d0:f8:b1:9d:c8:ba:48:75:
         c5:3e:f3:ac:9c:0f:cd:63:a4:52:ba:59:0e:15:7d:10:1c:a2:
         e9:af:e1:0e:b2:63:5f:f1:79:99:04:e4:7f:73:03:f2:07:a9:
         e6:e1:79:e3:e1:9a:b5:19:c1:fd:e3:3a:a7:e1:f5:66:ec:e1:
         dc:e9:d1:30:27:a2:f7:2f:67:fc:f6:37:86:03:a8:d9:83:33:
         e8:c5:03:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VdPHJ62IkXDbzsfZws39bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjI0ZWEzODU3MmVhMGRhMDJmNDljZjRkNjdhM2NiYjdj
NmUxNDAwHhcNMjYwNjE3MTIwMTExWhcNMjYwNjE4MTIwMTExWjAzMTEwLwYDVQQD
Eyg5M2NmYTQ0N2I0ZGFjMWM4YTAzNDZhN2YwZjM3MjhiYmRkOWU1NGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosyW3lXgXUOno64Mer6zu+laCkj3
8hnkCY8gOyfOF4XOfYxb27g8HU+QhXXYv/TUPPAQnUJk08pnYzRkSQ3CvNuUb+JW
jBsROvurlWyf9JtpWLbDguceexpe/u0/1M8cxCPFuEPIQMYbpsAmmGW4Xi5recQp
Yk7UmhrTqurOLRNEGFVMw865N8GBKthDMu9kuHUehfoESKr9CAYrZIC9JsInMoGC
iXTJS0pb/DcGAexgG9cmIdxSoLwnwBItWMlNyJCPddeKWoDFavEvfuotHjZE3aH4
mH9ceyh1INb9H1YCfSs//ET22CFsyfaBBy+sGFJKVLVFMxU6djmiZqlLzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPPpEe02sHIoDRqfw83KLvdnlSiMB8GA1UdIwQY
MBaAFMsiTqOFcuoNoC9Jz01no8u3xuFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2Et
MWZkMjliMTA4YTIxLzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2EtMWZkMjliMTA4YTIx
LzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX/GZJ2c
97Czg8Ah2wKtR3UxpqJKiDPaMVCRqEHE2PpNaSPnLzfyFS+u4JIjnRhMbAA+6hpJ
Y0rE4lR427gM4Ed2jjWOnAP4qcPExZ0L7N5Z/vkOJslRmzRYWjxHoCqMyu/kafuR
ae2nnLfn/8j9sOe8Kv/drN3WJUFeOntaBz774JFM53iBjkz8YxS3IOFpavq+KqK4
rimsPnPTGP3gO8vAqL1CxyAkJjG9xND4sZ3Iukh1xT7zrJwPzWOkUrpZDhV9EByi
6a/hDrJjX/F5mQTkf3MD8gep5uF54+GatRnB/eM6p+H1Zuzh3OnRMCei9y9n/PY3
hgOo2YMz6MUDHg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:57:02 2026 by rpki-client