Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File:                     ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier:          hHGlBBjq7i6Rwh+W17n67Q9u+Yivabif+Osk90Pl8F8=
Subject key identifier:   A9:7E:5E:4D:79:74:1A:54:17:2F:44:DC:A0:55:80:08:3A:97:55:FE
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer:       /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial:       019EC1B73312A6A5E6004534DB0C8E508C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 16:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:09 +0000
Files and hashes:         1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
                          2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: CuLK0qfyjOxAqBrqH+JZzgYaS1Wg0+6sFFsTlHsrNOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:33:12:a6:a5:e6:00:45:34:db:0c:8e:50:8c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
        Validity
            Not Before: Jun 13 16:01:09 2026 GMT
            Not After : Jun 14 16:01:09 2026 GMT
        Subject: CN=a97e5e4d79741a54172f44dca05580083a9755fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:ed:30:28:d0:7b:43:de:73:bb:2b:83:1a:
                    3a:34:4a:03:f6:1c:ef:cd:a2:73:60:0c:f8:f1:ae:
                    a6:8d:f7:9c:14:0b:b3:a2:97:72:ee:88:37:b2:01:
                    a2:bf:1d:ea:7b:11:45:23:ed:ac:80:a5:e0:23:41:
                    a8:fa:c6:dc:9d:c1:15:90:1b:0f:3f:94:66:43:82:
                    12:85:f6:bf:26:91:38:f0:e4:27:a1:94:5d:6d:91:
                    f3:48:fa:04:b4:60:e9:33:cf:bf:cd:47:23:2d:03:
                    6c:1f:d4:0b:17:62:db:76:9b:63:47:4c:3f:2e:ce:
                    ac:f2:42:00:33:8d:dc:7c:24:5e:94:74:04:86:5e:
                    0c:98:48:b8:c5:36:62:aa:dd:88:65:35:8a:37:37:
                    1c:b2:d1:32:de:75:8c:54:8a:b5:9b:d3:34:70:93:
                    f4:b7:14:ec:77:08:e9:5a:b2:ad:af:57:62:45:df:
                    f5:b0:d3:49:ac:ff:28:f6:28:53:ae:09:4e:25:2d:
                    5e:e6:ea:b2:08:97:d1:e8:b2:ef:3e:b9:2e:34:94:
                    c0:b8:e0:64:69:b5:9f:72:32:0a:6b:53:2f:87:0a:
                    8c:9a:49:1b:74:ff:33:f8:b2:57:96:d9:a3:48:30:
                    1d:53:1e:6b:47:e2:3e:56:f6:89:24:b0:3f:af:aa:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:5E:4D:79:74:1A:54:17:2F:44:DC:A0:55:80:08:3A:97:55:FE
            X509v3 Authority Key Identifier:
                keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:75:39:a4:04:7e:09:b4:a7:11:d3:0d:30:8c:ff:dd:4a:a8:
         7a:57:2e:d8:35:32:a8:65:4e:5b:c3:d4:7a:fd:9c:a3:29:73:
         05:a9:21:09:ff:db:1b:ff:fe:af:de:50:10:2d:30:d8:18:98:
         31:89:34:07:9d:46:a6:13:cc:8a:a6:60:e1:38:bd:cd:ba:c3:
         1c:22:d2:58:aa:06:00:f7:ce:77:9d:f9:ef:87:4f:c7:94:e8:
         ae:c3:71:d4:a1:70:89:8b:4e:1f:81:5b:52:de:59:bc:6d:32:
         cc:21:e5:b6:81:7a:7a:90:de:8d:07:79:58:06:4f:a4:59:53:
         9d:f5:de:b2:9b:b3:bc:52:66:36:9d:de:3d:6b:34:72:79:d6:
         98:b0:70:67:b7:df:ba:0c:e5:3a:9e:d0:dc:a6:84:67:cc:e5:
         4b:2b:eb:89:9f:dd:bc:62:79:2e:af:cf:b9:6a:19:e7:a7:36:
         a0:79:62:b5:d0:ef:49:45:ae:38:7c:00:99:7c:cf:ff:df:86:
         ae:f7:f8:ca:71:52:02:a7:a8:e9:38:e3:49:07:60:64:19:1c:
         b6:f7:b7:77:47:e5:b6:f8:c9:45:d8:ef:20:40:92:93:86:94:
         f2:ce:dc:0e:b6:4d:f4:e2:97:3c:ab:70:45:b8:91:a2:3f:c0:
         81:cf:79:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtzMSpqXmAEU02wyOUIwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy
ZWQ3N2MwHhcNMjYwNjEzMTYwMTA5WhcNMjYwNjE0MTYwMTA5WjAzMTEwLwYDVQQD
EyhhOTdlNWU0ZDc5NzQxYTU0MTcyZjQ0ZGNhMDU1ODAwODNhOTc1NWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogTtMCjQe0Pec7srgxo6NEoD9hzv
zaJzYAz48a6mjfecFAuzopdy7og3sgGivx3qexFFI+2sgKXgI0Go+sbcncEVkBsP
P5RmQ4IShfa/JpE48OQnoZRdbZHzSPoEtGDpM8+/zUcjLQNsH9QLF2LbdptjR0w/
Ls6s8kIAM43cfCRelHQEhl4MmEi4xTZiqt2IZTWKNzccstEy3nWMVIq1m9M0cJP0
txTsdwjpWrKtr1diRd/1sNNJrP8o9ihTrglOJS1e5uqyCJfR6LLvPrkuNJTAuOBk
abWfcjIKa1MvhwqMmkkbdP8z+LJXltmjSDAdUx5rR+I+VvaJJLA/r6qTwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl+Xk15dBpUFy9E3KBVgAg6l1X+MB8GA1UdIwQY
MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt
YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw
LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXU5pAR+
CbSnEdMNMIz/3Uqoelcu2DUyqGVOW8PUev2coylzBakhCf/bG//+r95QEC0w2BiY
MYk0B51GphPMiqZg4Ti9zbrDHCLSWKoGAPfOd53574dPx5TorsNx1KFwiYtOH4Fb
Ut5ZvG0yzCHltoF6epDejQd5WAZPpFlTnfXespuzvFJmNp3ePWs0cnnWmLBwZ7ff
ugzlOp7Q3KaEZ8zlSyvriZ/dvGJ5Lq/PuWoZ56c2oHlitdDvSUWuOHwAmXzP/9+G
rvf4ynFSAqeo6TjjSQdgZBkctve3d0fltvjJRdjvIECSk4aU8s7cDrZN9OKXPKtw
RbiRoj/Agc95Eg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:14 2026 by rpki-client