Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          Q9QIH6RCFrh9tFnyH/Riuo1La2jNIm1p4qieiU/1gP8=
Subject key identifier:   D0:63:5B:A3:46:2B:DD:69:C6:AE:0C:DB:71:DF:90:78:F7:3B:FE:BF
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       019CABA22D32C9360DBF13C8E25178EB7C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          05EE
Signing time:             Sun 01 Mar 2026 23:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:58 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: e4hPeF6q4KlOUnKtc04lvx5IBBEoIstm6bCu+6Y+jsM=)
                          2: ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa (hash: kikQlykcn+WarGEP2RIaDoLYfnMDSfgY1GHVB0fe+tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:2d:32:c9:36:0d:bf:13:c8:e2:51:78:eb:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Mar  1 23:00:58 2026 GMT
            Not After : Mar  2 23:00:58 2026 GMT
        Subject: CN=d0635ba3462bdd69c6ae0cdb71df9078f73bfebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:7b:02:b1:af:da:6b:45:9c:ab:4b:37:fb:
                    f9:71:d7:0d:d7:ae:04:6a:b8:a4:fb:73:4b:86:aa:
                    b2:08:0d:6c:0a:6f:df:93:30:3e:15:73:b6:03:b7:
                    e6:4d:b3:34:51:29:5f:ca:ce:69:1b:17:9e:5e:ee:
                    be:96:21:35:82:c5:92:2a:c3:87:b2:14:cc:c6:a7:
                    61:13:c6:54:1c:ec:88:56:cc:af:fe:6a:37:72:ef:
                    60:2b:de:3a:69:d4:4f:55:ea:57:82:15:3c:fa:39:
                    b7:e4:42:03:e8:6c:88:af:00:76:d3:75:3c:3e:05:
                    80:c8:9d:14:d5:26:8e:21:af:cb:50:52:a6:ba:62:
                    da:16:f3:5f:0d:f0:d5:37:16:11:59:f8:8b:ad:94:
                    e1:c6:6f:57:6c:ee:c9:ce:18:d7:91:bd:13:dd:10:
                    d1:32:fb:7f:12:4f:91:61:1d:ba:1c:76:3c:3b:ea:
                    2f:39:e4:21:02:b7:5b:df:19:ae:dc:35:c0:82:26:
                    47:8f:13:33:e8:78:10:89:b4:ec:6d:d9:97:2d:12:
                    a0:13:93:3f:3d:cb:6e:26:0e:5a:cc:e8:35:32:53:
                    38:17:e7:40:ca:67:ef:59:56:b7:57:1b:47:60:6c:
                    38:bb:e1:38:27:08:a6:b1:53:f9:55:e6:99:1a:74:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:5B:A3:46:2B:DD:69:C6:AE:0C:DB:71:DF:90:78:F7:3B:FE:BF
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:49:90:2c:54:80:0e:9e:e7:a3:f4:89:21:2f:37:6c:5f:
         d4:99:1b:fb:f8:77:b0:8f:4a:56:1e:a0:8b:ec:f9:d2:f5:09:
         4a:5f:97:55:8f:07:4b:98:59:7c:aa:26:e2:80:8f:62:11:78:
         93:a0:ec:3d:29:b4:ea:b5:b0:e7:7d:c2:8b:31:70:56:e4:58:
         a9:fe:0e:7b:b2:18:52:29:6c:6e:ce:b5:c9:57:8a:4b:43:61:
         a4:bb:25:8c:ee:1c:fb:c6:d7:68:6c:c2:a2:98:91:04:0d:1f:
         67:ec:ca:e2:e0:90:4b:2e:13:18:82:e5:cf:43:8f:09:c2:6f:
         b9:41:13:16:b1:1c:b6:ec:45:0b:ee:66:97:8f:49:6b:de:5f:
         36:eb:ec:35:0e:42:52:91:10:12:b6:d0:73:77:bd:17:86:08:
         8e:f7:3f:c5:67:42:d8:00:81:67:89:0c:df:0c:d0:c5:9e:b2:
         ec:12:c0:4f:b1:10:e0:b3:14:64:ce:70:12:cd:1d:68:d9:99:
         1d:38:8c:d1:e7:dd:24:6b:f9:85:6c:77:d9:48:e5:f8:de:da:
         a3:e9:69:60:f8:cd:e0:1e:13:0d:14:03:1c:b2:42:d9:06:15:
         ae:cb:d1:5a:a2:a1:35:9c:26:f6:9b:df:ef:47:a3:44:67:94:
         ff:cd:78:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroi0yyTYNvxPI4lF463x8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw
MDkwYWYwHhcNMjYwMzAxMjMwMDU4WhcNMjYwMzAyMjMwMDU4WjAzMTEwLwYDVQQD
EyhkMDYzNWJhMzQ2MmJkZDY5YzZhZTBjZGI3MWRmOTA3OGY3M2JmZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWN7ArGv2mtFnKtLN/v5cdcN164E
arik+3NLhqqyCA1sCm/fkzA+FXO2A7fmTbM0USlfys5pGxeeXu6+liE1gsWSKsOH
shTMxqdhE8ZUHOyIVsyv/mo3cu9gK946adRPVepXghU8+jm35EID6GyIrwB203U8
PgWAyJ0U1SaOIa/LUFKmumLaFvNfDfDVNxYRWfiLrZThxm9XbO7JzhjXkb0T3RDR
Mvt/Ek+RYR26HHY8O+ovOeQhArdb3xmu3DXAgiZHjxMz6HgQibTsbdmXLRKgE5M/
PctuJg5azOg1MlM4F+dAymfvWVa3VxtHYGw4u+E4JwimsVP5VeaZGnThJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBjW6NGK91pxq4M23HfkHj3O/6/MB8GA1UdIwQY
MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt
NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj
LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehBJkCxU
gA6e56P0iSEvN2xf1Jkb+/h3sI9KVh6gi+z50vUJSl+XVY8HS5hZfKom4oCPYhF4
k6DsPSm06rWw533CizFwVuRYqf4Oe7IYUilsbs61yVeKS0NhpLsljO4c+8bXaGzC
opiRBA0fZ+zK4uCQSy4TGILlz0OPCcJvuUETFrEctuxFC+5ml49Ja95fNuvsNQ5C
UpEQErbQc3e9F4YIjvc/xWdC2ACBZ4kM3wzQxZ6y7BLAT7EQ4LMUZM5wEs0daNmZ
HTiM0efdJGv5hWx32Ujl+N7ao+lpYPjN4B4TDRQDHLJC2QYVrsvRWqKhNZwm9pvf
70ejRGeU/814cA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:55:36 2026 by rpki-client