Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File:                     YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier:          5B9ZOiNhrN5VDvfBgRthMa7bsMzb2LVzfg0ESAJ/vYQ=
Subject key identifier:   CE:EE:EB:15:67:E7:E2:30:FD:18:15:28:CD:75:42:64:CA:6C:51:C3
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer:       /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial:       019E30A9778B189F2F1819CF9BEF1DB98145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number:          11FA
Signing time:             Sat 16 May 2026 12:01:12 +0000
Manifest this update:     Sat 16 May 2026 12:01:12 +0000
Manifest next update:     Sun 17 May 2026 12:01:12 +0000
Files and hashes:         1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=)
                          2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
                          3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: ZLf/HThmMCScDQREK2W2TqyXPW0bRR7twVNQmQdl3H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:77:8b:18:9f:2f:18:19:cf:9b:ef:1d:b9:81:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
        Validity
            Not Before: May 16 12:01:12 2026 GMT
            Not After : May 17 12:01:12 2026 GMT
        Subject: CN=ceeeeb1567e7e230fd181528cd754264ca6c51c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:2a:d4:0d:43:90:f4:22:8d:b8:41:f8:24:
                    94:00:fe:be:f8:d6:e5:ff:95:e5:a8:a9:b8:f2:05:
                    e5:a4:4d:77:61:e7:df:00:a3:ea:ab:38:e0:9d:55:
                    1d:ef:55:b2:4b:f1:1e:f5:dd:3b:2f:ff:ff:48:cc:
                    7a:09:ce:d2:ce:f3:4e:5e:10:90:21:ab:4d:20:44:
                    a4:58:a3:02:20:6a:77:54:39:e5:96:7b:11:8b:cb:
                    4c:23:af:6f:d7:32:48:04:b8:ed:5d:b2:44:c5:26:
                    47:aa:ce:d3:f5:d8:34:8e:d7:08:80:67:f3:8f:b7:
                    5f:63:eb:18:38:19:5a:4d:12:8f:a9:46:8b:93:9a:
                    6e:63:c3:7d:ef:8c:fa:3f:d1:ae:a2:e9:18:de:43:
                    c0:6f:7f:e5:d8:ec:f2:3a:f0:7e:40:cc:83:ce:7f:
                    3e:44:83:4f:ab:3a:11:3c:36:81:0b:7c:b9:41:a8:
                    d3:bf:0b:3c:49:b8:df:c5:39:8a:3d:0a:d9:54:51:
                    ef:28:0e:ca:7a:43:2c:3d:b9:b0:a9:55:45:d4:c5:
                    90:19:b4:62:1e:01:19:1e:98:87:98:f7:35:96:d9:
                    99:3e:1f:85:07:66:05:5d:2e:63:90:4c:26:25:c8:
                    cf:0b:eb:d6:34:bb:4a:a4:8e:15:1e:e8:4e:3e:d3:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EE:EB:15:67:E7:E2:30:FD:18:15:28:CD:75:42:64:CA:6C:51:C3
            X509v3 Authority Key Identifier:
                keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:55:22:e6:1e:0a:87:f7:d0:09:96:86:7c:22:62:de:86:
         84:9e:4d:12:81:59:0f:e4:df:5a:45:ff:e7:b7:39:60:f8:71:
         8e:7b:23:9e:3c:fd:fb:44:3a:e3:e8:4a:31:c7:e4:07:1e:5f:
         c0:3d:65:9e:cf:03:a8:b6:2e:df:bc:59:53:75:b9:f9:56:9f:
         71:4e:8d:27:3d:ca:17:14:18:83:7b:2f:5d:07:41:34:89:47:
         7e:1b:c1:8e:f4:1d:a7:de:72:ea:9a:85:3d:78:34:31:58:f6:
         9c:b2:22:e6:3a:93:65:0c:fe:dc:c2:d4:10:28:dc:e1:d6:83:
         96:7f:08:6f:76:1d:96:2b:25:78:55:2f:04:d6:4a:ce:78:59:
         d1:3f:27:3f:35:f2:10:f4:a1:a5:41:6b:39:a7:fa:13:02:0d:
         b2:a2:c7:65:bd:43:36:24:48:97:e9:49:72:71:3e:ec:6f:11:
         c7:a3:e0:00:28:8d:73:7e:97:08:38:c3:1c:d9:3b:79:36:85:
         b1:4e:23:f7:0d:80:21:e1:f8:08:f4:8e:3f:14:40:c6:a7:2c:
         33:1c:73:a3:50:cd:07:d6:db:87:ab:9b:d5:25:31:f7:48:3d:
         01:65:57:ce:2e:10:ba:18:ae:e4:23:fe:ac:fd:bd:12:08:74:
         a3:41:f7:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqXeLGJ8vGBnPm+8duYFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjYwNTE2MTIwMTEyWhcNMjYwNTE3MTIwMTEyWjAzMTEwLwYDVQQD
EyhjZWVlZWIxNTY3ZTdlMjMwZmQxODE1MjhjZDc1NDI2NGNhNmM1MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgEq1A1DkPQijbhB+CSUAP6++Nbl
/5XlqKm48gXlpE13YeffAKPqqzjgnVUd71WyS/Ee9d07L///SMx6Cc7SzvNOXhCQ
IatNIESkWKMCIGp3VDnllnsRi8tMI69v1zJIBLjtXbJExSZHqs7T9dg0jtcIgGfz
j7dfY+sYOBlaTRKPqUaLk5puY8N974z6P9GuoukY3kPAb3/l2OzyOvB+QMyDzn8+
RINPqzoRPDaBC3y5QajTvws8SbjfxTmKPQrZVFHvKA7KekMsPbmwqVVF1MWQGbRi
HgEZHpiHmPc1ltmZPh+FB2YFXS5jkEwmJcjPC+vWNLtKpI4VHuhOPtNpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7u6xVn5+Iw/RgVKM11QmTKbFHDMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXtVIuYe
Cof30AmWhnwiYt6GhJ5NEoFZD+TfWkX/57c5YPhxjnsjnjz9+0Q64+hKMcfkBx5f
wD1lns8DqLYu37xZU3W5+VafcU6NJz3KFxQYg3svXQdBNIlHfhvBjvQdp95y6pqF
PXg0MVj2nLIi5jqTZQz+3MLUECjc4daDln8Ib3YdlisleFUvBNZKznhZ0T8nPzXy
EPShpUFrOaf6EwINsqLHZb1DNiRIl+lJcnE+7G8Rx6PgACiNc36XCDjDHNk7eTaF
sU4j9w2AIeH4CPSOPxRAxqcsMxxzo1DNB9bbh6ub1SUx90g9AWVXzi4Quhiu5CP+
rP29Egh0o0H3mg==
-----END CERTIFICATE-----
Generated at Sat May 16 20:23:10 2026 by rpki-client