Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          RRtLBdUhg0INV+5PDZDDjwdSMJKEFrWjtOBMVAQ+US4=
Subject key identifier:   89:79:25:21:7F:D3:78:44:FC:E8:DC:44:03:43:44:90:EB:01:3E:4B
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       019E8EA57E1E3DB25A4AF4163B82D9EB3E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          04B3
Signing time:             Wed 03 Jun 2026 18:01:10 +0000
Manifest this update:     Wed 03 Jun 2026 18:01:10 +0000
Manifest next update:     Thu 04 Jun 2026 18:01:10 +0000
Files and hashes:         1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
                          2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
                          3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: KXHw5OgVllvtx/tqdOZE/J5dagz+357K3RU/Jbbv7eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:a5:7e:1e:3d:b2:5a:4a:f4:16:3b:82:d9:eb:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Jun  3 18:01:10 2026 GMT
            Not After : Jun  4 18:01:10 2026 GMT
        Subject: CN=897925217fd37844fce8dc4403434490eb013e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:03:35:b4:0a:92:3e:69:14:0e:06:47:cf:
                    10:ff:f3:6b:59:00:3a:0b:b9:93:c8:0b:28:db:b7:
                    59:40:c3:3d:bb:0f:fe:67:fb:71:29:63:78:44:4c:
                    5a:fc:96:a5:25:65:e9:49:c6:14:ba:a9:dc:56:01:
                    08:ce:a3:01:1e:d0:ee:fa:bc:c5:d6:7b:75:00:0d:
                    9e:1c:9b:06:23:3c:a4:c9:ed:53:65:1d:3e:87:74:
                    f2:4b:1a:40:ee:09:c3:06:04:34:38:84:21:56:a3:
                    ae:f4:86:5b:7c:12:66:89:6a:bc:03:84:57:85:fc:
                    2d:53:24:3d:09:c9:e2:43:0e:2a:56:c1:37:a5:3f:
                    5d:6f:b9:db:a4:37:66:4f:52:c1:3c:0e:01:a2:1e:
                    a0:e4:6c:f6:ea:68:7b:bb:57:87:38:de:a4:78:e0:
                    c5:fe:79:83:55:0c:d0:81:c4:0f:60:b0:c5:28:fe:
                    a3:28:b6:66:a5:e4:34:50:bd:bd:49:a0:c3:5d:c7:
                    3b:9a:3b:1e:41:63:42:6f:ae:85:00:3d:27:70:54:
                    3c:9a:4d:46:b8:07:05:27:76:70:35:3a:78:85:32:
                    aa:ca:67:12:a3:5b:58:a3:e7:79:8b:42:eb:cb:2c:
                    2f:e1:a1:43:0c:76:87:a6:2d:26:e7:d8:46:1d:a1:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:25:21:7F:D3:78:44:FC:E8:DC:44:03:43:44:90:EB:01:3E:4B
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:ee:9b:a7:85:c6:4a:c2:b3:a1:34:7e:fb:1d:fb:70:e8:
         40:66:9a:56:f1:c5:a2:22:67:cf:b7:b1:9a:f9:7b:7a:4e:95:
         d2:12:c1:cd:9c:cf:38:09:4e:bf:40:bd:e3:72:f2:8f:16:3b:
         da:87:d6:e8:cf:d4:7d:93:cf:7b:da:de:ad:12:5a:b2:7c:cc:
         be:6d:47:b1:2d:8f:ec:51:87:56:ed:a1:61:1f:41:87:3b:e7:
         c7:46:3b:25:f5:17:58:69:26:72:7e:54:43:8e:d2:ef:be:bf:
         26:1c:ae:e6:30:02:f7:7b:3b:2d:5c:f4:1a:f6:53:0f:09:2e:
         55:18:57:23:ef:be:91:28:c0:36:39:df:a4:b7:eb:84:e7:46:
         ee:01:e0:f0:9a:60:2d:70:e4:9d:72:9c:d3:34:88:da:f5:6e:
         7a:f9:e1:6a:9a:47:da:30:0c:81:32:cb:6c:5d:c6:35:64:21:
         c8:1e:06:e2:b5:d4:76:5c:62:2e:c3:26:c3:c0:b3:78:cf:18:
         36:4e:0b:fc:42:4e:5e:46:92:f0:2f:21:30:e7:f0:b1:96:0e:
         a7:3e:a2:69:7b:c2:48:e2:de:63:cd:62:81:0d:b9:7b:6b:05:
         8e:be:60:23:9b:1a:26:8d:b3:e2:26:c7:e5:80:6c:72:0c:f5:
         6d:60:55:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6OpX4ePbJaSvQWO4LZ6z4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTNmYjc5ODhhNDJmMzk4MzhiMWM3ZjlmMDQwMDY5MmU5
Mjk1ZDcwHhcNMjYwNjAzMTgwMTEwWhcNMjYwNjA0MTgwMTEwWjAzMTEwLwYDVQQD
Eyg4OTc5MjUyMTdmZDM3ODQ0ZmNlOGRjNDQwMzQzNDQ5MGViMDEzZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4msDNbQKkj5pFA4GR88Q//NrWQA6
C7mTyAso27dZQMM9uw/+Z/txKWN4RExa/JalJWXpScYUuqncVgEIzqMBHtDu+rzF
1nt1AA2eHJsGIzykye1TZR0+h3TySxpA7gnDBgQ0OIQhVqOu9IZbfBJmiWq8A4RX
hfwtUyQ9CcniQw4qVsE3pT9db7nbpDdmT1LBPA4Boh6g5Gz26mh7u1eHON6keODF
/nmDVQzQgcQPYLDFKP6jKLZmpeQ0UL29SaDDXcc7mjseQWNCb66FAD0ncFQ8mk1G
uAcFJ3ZwNTp4hTKqymcSo1tYo+d5i0Lryywv4aFDDHaHpi0m59hGHaGIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl5JSF/03hE/OjcRANDRJDrAT5LMB8GA1UdIwQY
MBaAFMhT+3mIpC85g4scf58EAGkukpXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODIt
MWU3YmRiN2YzMGY2LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODItMWU3YmRiN2YzMGY2
LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr//um6eF
xkrCs6E0fvsd+3DoQGaaVvHFoiJnz7exmvl7ek6V0hLBzZzPOAlOv0C943LyjxY7
2ofW6M/UfZPPe9rerRJasnzMvm1HsS2P7FGHVu2hYR9Bhzvnx0Y7JfUXWGkmcn5U
Q47S776/Jhyu5jAC93s7LVz0GvZTDwkuVRhXI+++kSjANjnfpLfrhOdG7gHg8Jpg
LXDknXKc0zSI2vVuevnhappH2jAMgTLLbF3GNWQhyB4G4rXUdlxiLsMmw8CzeM8Y
Nk4L/EJOXkaS8C8hMOfwsZYOpz6iaXvCSOLeY81igQ25e2sFjr5gI5saJo2z4ibH
5YBscgz1bWBVhw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:41 2026 by rpki-client