Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File:                     YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier:          Msp3pvQSm2a0vbvbJUV6Mns1w++eQu+NQttqzCa+vVY=
Subject key identifier:   6D:6C:55:21:00:0B:40:25:1C:04:2E:01:D4:CC:BC:11:65:9E:3D:6C
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer:       /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial:       019EB7D835E36902121A1194DB70B461B227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number:          1546
Signing time:             Thu 11 Jun 2026 18:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 18:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 18:01:00 +0000
Files and hashes:         1: 5eILOK-1-Suo2fVqfn_W0lL0-TQ.roa (hash: NzVDzsu+Kq+X+04Ws4gqYwLVPdBaLiyudai4ILZxsxg=)
                          2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: 2R/hkaY+abtPy7uLpXwtAHqbu2efEhFRiL0caxxYPMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:35:e3:69:02:12:1a:11:94:db:70:b4:61:b2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
        Validity
            Not Before: Jun 11 18:01:00 2026 GMT
            Not After : Jun 12 18:01:00 2026 GMT
        Subject: CN=6d6c5521000b40251c042e01d4ccbc11659e3d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:8e:06:17:bc:5b:4b:d1:57:97:1e:4c:14:
                    9c:aa:84:25:3f:dd:a7:2d:98:97:5f:3f:dc:55:4c:
                    5e:0c:b1:11:50:01:7a:48:81:60:f2:8d:ff:59:f3:
                    aa:65:b9:9e:3f:46:a1:49:3c:94:cf:05:3b:12:be:
                    c7:e0:0e:7f:34:e1:4a:d4:45:23:59:80:4d:30:ad:
                    8a:b9:ff:8b:ad:95:5d:01:f0:29:df:6c:ce:f9:ef:
                    23:9f:5b:d2:98:1e:0e:44:b1:5a:c2:8d:0b:df:9f:
                    12:a3:da:17:8e:b4:5d:39:f5:79:6c:e6:f8:09:44:
                    fa:92:f7:61:52:18:f1:1e:db:48:f3:08:da:ab:bc:
                    51:11:3e:ec:37:b2:54:18:5b:21:d2:d2:2b:33:a0:
                    72:e9:07:e5:a1:0d:27:cb:10:4f:ab:82:52:a2:5e:
                    9f:3c:c1:22:b5:37:8c:b5:16:44:f8:f4:3d:34:41:
                    57:d5:6d:8a:cb:e0:f1:a2:d9:6e:f6:4b:13:c5:37:
                    1a:06:b2:0d:f5:2d:8e:9f:13:81:57:2a:fb:f1:2e:
                    3f:84:35:7c:5a:a2:b1:d1:33:0a:ae:d2:4d:b6:dc:
                    6c:be:9d:eb:ef:ae:5a:94:d2:97:b3:83:9f:05:54:
                    fb:cc:fe:de:c3:de:8b:03:2b:4f:41:55:b9:c4:27:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:55:21:00:0B:40:25:1C:04:2E:01:D4:CC:BC:11:65:9E:3D:6C
            X509v3 Authority Key Identifier:
                keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:77:72:ba:f2:33:74:0e:18:e5:8e:e5:be:ae:7c:ee:91:29:
         e7:51:8a:57:28:66:de:97:dd:3b:3f:4c:44:34:27:c4:82:06:
         f3:d4:8c:29:53:5a:c3:22:24:58:04:b5:02:19:ef:43:47:a0:
         0d:8e:fb:66:d0:87:26:71:d8:c2:28:32:f4:71:e8:ff:46:1d:
         18:de:3b:6b:5e:6d:b2:d6:b3:06:95:83:7b:70:d6:af:56:66:
         78:e1:cd:26:8b:8c:0c:f8:5d:10:f8:38:a4:18:55:4a:d9:d3:
         f1:5f:5f:30:a5:36:85:f5:39:70:2e:7c:29:e4:01:3a:54:43:
         f1:a9:b0:cc:2c:6c:2d:61:db:2b:13:24:89:67:29:35:b7:88:
         49:c4:15:01:a6:77:a4:0c:c4:11:48:40:a0:d0:89:94:92:98:
         6a:39:a6:7f:cf:c1:89:8b:ff:b9:57:37:d2:fb:32:76:31:4e:
         92:4c:dd:29:f9:0e:dd:5a:a2:37:ff:55:e7:b1:f8:46:db:26:
         3a:81:36:e2:2c:f3:01:bf:86:3c:ad:36:0c:35:40:6b:7a:95:
         ef:24:45:78:0a:e1:fb:b5:1d:ad:13:77:8d:65:7f:40:93:0f:
         7a:7f:36:34:f5:68:5c:6d:7e:b4:59:ba:82:91:3b:78:a6:17:
         78:d7:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:58:20 2026 by rpki-client