Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
File:                     YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft (raw, json)
Hash identifier:          +yybQqdij+Lyu34EucqUZ8PDj8DcI7IkPkIkn6FleSI=
Subject key identifier:   C6:43:79:89:9C:DC:61:99:76:67:CF:EF:A4:B0:5E:8C:90:02:73:EE
Authority key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Certificate issuer:       /CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Certificate serial:       01A0035D2F05F284C3419ADCD6DC853F3719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:00:33 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:33 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:33 +0000
Files and hashes:         1: YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl (hash: CjlPnprSdwaVrCo9/zZW96CS9pXxeo889TmuWf3vFwk=)
                          2: yvqKASYvxT3MxhtOS5-emaUxBc8.roa (hash: tVq+tnubXS3rvDyuKQj8/nMobzt5kNaE/XUuamGgdBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:2f:05:f2:84:c3:41:9a:dc:d6:dc:85:3f:37:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
        Validity
            Not Before: Aug 15 03:00:33 2026 GMT
            Not After : Aug 16 03:00:33 2026 GMT
        Subject: CN=c64379899cdc61997667cfefa4b05e8c900273ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:ce:64:87:30:15:95:b1:e7:db:a7:74:dd:
                    1f:4f:d8:10:fa:2f:ce:1d:5c:64:5e:f0:35:63:7d:
                    c7:08:42:9b:50:59:96:35:39:e6:b6:7c:9d:f9:8f:
                    e5:a7:a8:67:c9:75:49:72:b6:97:5a:05:b7:3f:b2:
                    05:f4:70:21:da:07:f1:bb:1e:9b:ff:40:56:7c:83:
                    cf:1f:d7:86:ec:09:f8:34:9d:a1:80:fa:40:06:bf:
                    de:d3:c3:d2:dc:2c:8d:95:59:38:c0:94:4a:7a:c3:
                    81:df:ce:20:95:4e:47:94:82:27:51:ce:15:0b:ee:
                    33:08:58:a7:75:3f:ec:83:34:08:1f:03:1e:ec:01:
                    de:cd:8f:e1:96:d4:7f:1d:6b:4c:d3:0a:4a:41:0b:
                    d9:b2:fc:8f:14:9f:d3:54:96:03:ca:57:f2:9f:5f:
                    73:bf:81:d4:53:82:43:64:5b:49:6d:1f:52:b0:d8:
                    3a:4d:24:e1:ad:62:62:ca:c1:aa:f6:bf:6c:f8:65:
                    90:b5:b1:db:e9:bc:b1:e3:6c:b2:80:98:b1:be:ef:
                    db:92:0e:ca:91:9a:18:c4:36:0a:16:c5:4d:11:b6:
                    e6:69:54:5e:25:a5:0e:3a:14:c7:ac:49:4b:38:36:
                    b6:39:9a:40:e2:6f:ad:2c:fd:85:e9:33:6d:ba:d9:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:79:89:9C:DC:61:99:76:67:CF:EF:A4:B0:5E:8C:90:02:73:EE
            X509v3 Authority Key Identifier:
                keyid:60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:58:15:04:87:78:3d:5c:87:e6:66:b4:7e:fd:d3:dd:26:ef:
         57:f8:15:9e:13:02:0a:65:7f:0a:8d:0e:38:27:d9:a0:5c:c2:
         30:6a:fd:3d:32:85:1b:bd:84:c9:60:c4:0e:2e:95:84:aa:4f:
         14:ea:b2:c3:4d:96:35:7c:34:43:6c:ee:fc:88:fd:61:20:14:
         2c:3d:fe:de:99:95:d7:1b:7c:69:02:88:49:06:cb:c1:c0:1e:
         7f:e5:f0:c9:6f:5f:d6:bd:ed:60:9d:79:56:2f:2d:30:95:fb:
         15:c4:99:21:e7:33:2e:c7:3d:1f:71:1d:95:21:11:f1:45:8b:
         51:af:72:b5:98:13:f5:98:51:9a:2b:79:fe:95:45:94:b1:f3:
         2a:dc:1d:db:92:8c:45:9c:70:dd:c5:12:59:6c:43:65:62:58:
         aa:0f:28:3f:81:5e:77:9d:b4:90:26:37:eb:8e:8f:09:37:70:
         87:86:2a:05:9d:8c:3f:b0:6c:ac:ae:8a:61:70:46:4c:25:9f:
         9d:67:ae:fc:22:3f:91:3d:cb:69:97:93:b7:2e:c4:7f:fb:c1:
         74:1b:2f:1f:3d:df:d3:97:2d:d6:e1:a3:7c:d1:52:42:f0:7e:
         a9:fd:d2:90:ab:3e:62:9a:4a:c3:41:32:cf:23:aa:94:ec:71:
         4b:f6:8e:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXS8F8oTDQZrc1tyFPzcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmNjYzc0YjRmZDE0ZGExN2JkNmI2OWJhOWUxOWMyNDg5
N2YzM2QwHhcNMjYwODE1MDMwMDMzWhcNMjYwODE2MDMwMDMzWjAzMTEwLwYDVQQD
EyhjNjQzNzk4OTljZGM2MTk5NzY2N2NmZWZhNGIwNWU4YzkwMDI3M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqfOZIcwFZWx59undN0fT9gQ+i/O
HVxkXvA1Y33HCEKbUFmWNTnmtnyd+Y/lp6hnyXVJcraXWgW3P7IF9HAh2gfxux6b
/0BWfIPPH9eG7An4NJ2hgPpABr/e08PS3CyNlVk4wJRKesOB384glU5HlIInUc4V
C+4zCFindT/sgzQIHwMe7AHezY/hltR/HWtM0wpKQQvZsvyPFJ/TVJYDylfyn19z
v4HUU4JDZFtJbR9SsNg6TSThrWJiysGq9r9s+GWQtbHb6byx42yygJixvu/bkg7K
kZoYxDYKFsVNEbbmaVReJaUOOhTHrElLODa2OZpA4m+tLP2F6TNtutl9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZDeYmc3GGZdmfP76SwXoyQAnPuMB8GA1UdIwQY
MBaAFGAszHS0/RTaF71rabqeGcJIl/M9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN6TWRMVDlGTm9Ydld0cHVwNFp3a2lYOHowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQt
YTExNDkzOWNkYWE1LzEvWUN6TWRMVDlGTm9Ydld0cHVwNFp3a2lYOHowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQtYTExNDkzOWNkYWE1
LzEvWUN6TWRMVDlGTm9Ydld0cHVwNFp3a2lYOHowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVgVBId4
PVyH5ma0fv3T3SbvV/gVnhMCCmV/Co0OOCfZoFzCMGr9PTKFG72EyWDEDi6VhKpP
FOqyw02WNXw0Q2zu/Ij9YSAULD3+3pmV1xt8aQKISQbLwcAef+XwyW9f1r3tYJ15
Vi8tMJX7FcSZIeczLsc9H3EdlSER8UWLUa9ytZgT9ZhRmit5/pVFlLHzKtwd25KM
RZxw3cUSWWxDZWJYqg8oP4Fed520kCY3646PCTdwh4YqBZ2MP7BsrK6KYXBGTCWf
nWeu/CI/kT3LaZeTty7Ef/vBdBsvHz3f05ct1uGjfNFSQvB+qf3SkKs+YppKw0Ey
zyOqlOxxS/aOnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:10 2026 by rpki-client