Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File:                     2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier:          Yc/XeiZearfxID2YYSW1T1xRFIj1buMzwA+ZV1WTrho=
Subject key identifier:   59:B6:6F:8A:AB:94:B4:13:6E:DA:8B:4F:42:7C:60:EE:22:72:F6:B4
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer:       /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial:       019EC1490648D952BC62F966524E79377288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number:          167C
Signing time:             Sat 13 Jun 2026 14:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:48 +0000
Files and hashes:         1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: BDXaD0sNSfQF9IsuQvFLhZMkyu5QU5/Z4e9/1oKCRxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:06:48:d9:52:bc:62:f9:66:52:4e:79:37:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
        Validity
            Not Before: Jun 13 14:00:48 2026 GMT
            Not After : Jun 14 14:00:48 2026 GMT
        Subject: CN=59b66f8aab94b4136eda8b4f427c60ee2272f6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:52:6a:e2:f0:9d:97:d1:36:d0:ea:51:2b:
                    24:ba:f4:34:e8:e4:f0:dc:27:14:5e:0a:71:56:93:
                    9f:a3:a9:6a:3d:73:6c:a3:4c:6d:61:7e:4a:57:26:
                    0d:48:bf:32:f9:fe:55:97:d3:86:97:fa:a7:9b:d0:
                    f3:d7:46:a0:c9:62:92:99:8e:41:92:e6:92:3e:b3:
                    c8:cc:27:30:ba:21:b7:b5:f5:2a:e1:5b:68:60:3c:
                    34:41:3b:0a:9b:4b:e7:9c:47:04:58:22:61:07:dc:
                    f1:0b:db:ce:86:dd:83:de:1a:92:a1:33:e1:7e:33:
                    bd:15:91:68:97:b5:af:ac:04:81:7e:33:33:c1:55:
                    02:ab:74:ee:31:7c:95:1d:57:cd:f8:02:e7:dc:24:
                    f1:44:b5:f5:02:46:1e:25:df:bc:55:73:67:62:ba:
                    cc:16:3a:b8:8d:b5:00:b2:ab:2a:46:68:99:a1:f4:
                    4b:1e:27:37:d2:c4:41:7b:31:d1:0b:af:50:ab:28:
                    56:0c:01:ad:e5:31:c8:8b:33:40:80:01:2c:44:a4:
                    90:5f:91:9b:f5:e5:48:86:eb:9d:f5:e2:a0:5a:12:
                    53:96:2c:04:fc:0f:06:04:08:de:d5:37:97:38:f6:
                    4b:70:b2:a4:39:45:9c:c1:e4:d1:2d:78:67:2d:0d:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:6F:8A:AB:94:B4:13:6E:DA:8B:4F:42:7C:60:EE:22:72:F6:B4
            X509v3 Authority Key Identifier:
                keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:50:fb:61:33:b7:c2:a2:28:36:1d:c6:7a:92:8b:f1:99:34:
         92:63:4c:34:20:f7:4a:e4:29:3e:0e:b9:7c:63:5c:e4:b5:f1:
         e0:50:20:73:9b:54:ca:79:25:22:88:b5:37:81:e7:6c:a3:11:
         46:4e:12:a9:d5:a9:d0:3c:a1:d4:4d:09:1b:4b:1e:2d:67:af:
         95:cb:d0:21:bc:ae:96:ed:72:8d:d6:1b:e6:cb:b6:57:a8:12:
         d8:e4:c3:72:4d:90:17:37:9e:f0:65:11:74:b6:74:47:6e:6e:
         bb:ed:78:63:56:c7:d9:93:6a:9e:ca:59:07:ad:00:6f:89:3e:
         d0:ad:7a:a5:ec:9c:d0:85:d8:10:6b:79:07:d9:1a:0d:8e:e9:
         00:3a:91:a6:ad:e8:dd:4f:db:8f:c2:42:d1:23:f4:81:ed:70:
         cb:e0:1a:d1:95:b1:b6:d4:24:fa:a5:0d:33:4c:19:12:8d:e1:
         ec:c3:f1:18:3f:d5:e8:dd:13:a8:01:3d:06:30:e3:56:a2:b1:
         be:0d:f8:d4:52:ea:64:69:82:e3:40:f6:18:2f:b3:7d:8b:22:
         f9:93:aa:8e:2a:41:3e:83:f2:10:76:c4:36:76:30:cd:63:ab:
         e7:a5:9b:63:a2:72:92:ce:f9:98:5f:ae:5b:e4:b6:50:95:9d:
         6b:39:1d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSQZI2VK8YvlmUk55N3KIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjYwNjEzMTQwMDQ4WhcNMjYwNjE0MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg1OWI2NmY4YWFiOTRiNDEzNmVkYThiNGY0MjdjNjBlZTIyNzJmNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn9SauLwnZfRNtDqUSskuvQ06OTw
3CcUXgpxVpOfo6lqPXNso0xtYX5KVyYNSL8y+f5Vl9OGl/qnm9Dz10agyWKSmY5B
kuaSPrPIzCcwuiG3tfUq4VtoYDw0QTsKm0vnnEcEWCJhB9zxC9vOht2D3hqSoTPh
fjO9FZFol7WvrASBfjMzwVUCq3TuMXyVHVfN+ALn3CTxRLX1AkYeJd+8VXNnYrrM
Fjq4jbUAsqsqRmiZofRLHic30sRBezHRC69QqyhWDAGt5THIizNAgAEsRKSQX5Gb
9eVIhuud9eKgWhJTliwE/A8GBAje1TeXOPZLcLKkOUWcweTRLXhnLQ31JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm2b4qrlLQTbtqLT0J8YO4icva0MB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVD7YTO3
wqIoNh3GepKL8Zk0kmNMNCD3SuQpPg65fGNc5LXx4FAgc5tUynklIoi1N4HnbKMR
Rk4SqdWp0Dyh1E0JG0seLWevlcvQIbyulu1yjdYb5su2V6gS2OTDck2QFzee8GUR
dLZ0R25uu+14Y1bH2ZNqnspZB60Ab4k+0K16peyc0IXYEGt5B9kaDY7pADqRpq3o
3U/bj8JC0SP0ge1wy+Aa0ZWxttQk+qUNM0wZEo3h7MPxGD/V6N0TqAE9BjDjVqKx
vg341FLqZGmC40D2GC+zfYsi+ZOqjipBPoPyEHbENnYwzWOr56WbY6Jyks75mF+u
W+S2UJWdazkdRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:31 2026 by rpki-client