Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          T88peX2uXGHcJT86a9bT/yk3KAYHlCeyarkPu8u1kH4=
Subject key identifier:   6B:59:CC:65:FF:BA:A3:72:FB:72:92:B8:A6:E5:58:E8:1F:C7:CD:67
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019EB6C57C976BA377CDC808DE8FABFF5657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          06A9
Signing time:             Thu 11 Jun 2026 13:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:56 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: 9NnqqrlKiy+UH7qVZZtyf8zrvyshBLQ6Vffr3WJF+4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:7c:97:6b:a3:77:cd:c8:08:de:8f:ab:ff:56:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Jun 11 13:00:56 2026 GMT
            Not After : Jun 12 13:00:56 2026 GMT
        Subject: CN=6b59cc65ffbaa372fb7292b8a6e558e81fc7cd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:a5:e3:4c:64:5f:ed:56:60:c6:18:dc:2e:
                    e3:cd:85:08:ba:b3:d2:b2:08:3f:e3:54:2e:4b:c5:
                    32:fd:d0:dd:75:37:fe:15:f6:38:c8:6d:d7:1a:dc:
                    51:06:ab:13:62:ca:01:cf:74:0d:ae:15:0d:71:a7:
                    5e:ea:f2:95:f8:3c:19:ac:7b:70:bb:8a:6f:22:55:
                    27:58:e4:ab:2b:30:47:59:ee:dd:c4:55:5d:2a:99:
                    e6:64:30:9a:74:94:51:e2:f0:fb:07:c1:c2:e2:44:
                    0c:7d:3f:c5:2a:87:7b:bf:f6:b8:f4:57:06:49:c4:
                    cc:61:58:89:4c:19:a1:bb:15:86:60:1b:66:7a:f7:
                    69:ca:e2:08:cd:06:41:e6:1e:69:c6:c1:66:55:c8:
                    e3:b3:11:0e:d2:d3:12:f4:3d:9e:89:d0:9b:6e:4b:
                    71:22:fc:7a:de:a4:ab:db:d3:0d:7c:35:fa:03:8d:
                    ec:8f:0f:bc:68:fc:e2:ec:c7:a3:56:30:14:16:f6:
                    26:12:3a:c0:7b:19:3a:d3:cd:98:ca:79:c8:24:a1:
                    fd:7d:b9:d2:59:96:75:9f:81:da:6c:02:1d:60:01:
                    1c:7c:02:54:92:61:13:3e:43:54:aa:98:83:37:55:
                    28:64:89:b9:0b:3a:ff:4b:c3:a6:c8:ba:9c:be:32:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:CC:65:FF:BA:A3:72:FB:72:92:B8:A6:E5:58:E8:1F:C7:CD:67
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:9e:58:23:ae:5d:ea:10:36:13:99:37:c6:7a:47:67:08:
         b9:8b:ce:eb:a0:46:ef:13:36:cb:66:b9:ab:fe:97:81:bf:a8:
         2e:9b:07:92:28:d5:54:e0:ae:0d:d4:45:43:5c:ca:c3:26:07:
         99:09:61:2a:da:2c:a6:ce:ab:66:ac:f2:91:4f:6c:aa:eb:11:
         d5:b3:48:ca:8f:be:d4:4d:0e:3c:95:4a:3f:6f:6c:01:cc:46:
         cd:e8:f1:c4:c7:ff:f7:57:2b:9d:b8:bf:2f:0c:d8:f6:5f:01:
         ed:72:60:98:99:e9:74:03:f4:1e:50:4f:c6:de:0e:b4:b6:b0:
         5e:99:ba:ba:cf:c2:1f:f2:94:fd:61:44:1f:93:72:ab:52:e7:
         02:89:aa:63:02:e2:3f:5c:9c:a7:5a:c2:fe:ac:74:3b:43:14:
         94:99:be:76:e8:56:1c:81:ed:19:18:d1:2e:08:66:00:f1:fd:
         4b:44:f8:bc:1d:2e:ba:cf:0d:78:f1:60:1b:6e:d6:86:74:8a:
         17:39:6a:e8:e9:93:39:02:fb:38:01:2c:2a:39:7a:57:86:99:
         f9:e6:d1:05:ac:4a:66:98:70:05:d9:1a:61:7c:9f:4b:3f:f3:
         0d:c1:e6:6a:57:95:d1:c7:9e:e0:89:67:82:dd:b8:7d:9a:00:
         9a:cb:f0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xXyXa6N3zcgI3o+r/1ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0
NWQyNzMwHhcNMjYwNjExMTMwMDU2WhcNMjYwNjEyMTMwMDU2WjAzMTEwLwYDVQQD
Eyg2YjU5Y2M2NWZmYmFhMzcyZmI3MjkyYjhhNmU1NThlODFmYzdjZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfCl40xkX+1WYMYY3C7jzYUIurPS
sgg/41QuS8Uy/dDddTf+FfY4yG3XGtxRBqsTYsoBz3QNrhUNcade6vKV+DwZrHtw
u4pvIlUnWOSrKzBHWe7dxFVdKpnmZDCadJRR4vD7B8HC4kQMfT/FKod7v/a49FcG
ScTMYViJTBmhuxWGYBtmevdpyuIIzQZB5h5pxsFmVcjjsxEO0tMS9D2eidCbbktx
Ivx63qSr29MNfDX6A43sjw+8aPzi7MejVjAUFvYmEjrAexk6082YynnIJKH9fbnS
WZZ1n4HabAIdYAEcfAJUkmETPkNUqpiDN1UoZIm5Czr/S8OmyLqcvjK1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtZzGX/uqNy+3KSuKblWOgfx81nMB8GA1UdIwQY
MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt
MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz
LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsSeWCOu
XeoQNhOZN8Z6R2cIuYvO66BG7xM2y2a5q/6Xgb+oLpsHkijVVOCuDdRFQ1zKwyYH
mQlhKtosps6rZqzykU9squsR1bNIyo++1E0OPJVKP29sAcxGzejxxMf/91crnbi/
LwzY9l8B7XJgmJnpdAP0HlBPxt4OtLawXpm6us/CH/KU/WFEH5Nyq1LnAomqYwLi
P1ycp1rC/qx0O0MUlJm+duhWHIHtGRjRLghmAPH9S0T4vB0uus8NePFgG27WhnSK
Fzlq6OmTOQL7OAEsKjl6V4aZ+ebRBaxKZphwBdkaYXyfSz/zDcHmaleV0cee4Iln
gt24fZoAmsvwWw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:57 2026 by rpki-client