Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          xuEDxCM6OyEnW8CUPaHnCjMJAaiP1PghMJRTf5JrsO8=
Subject key identifier:   02:56:48:EA:8B:6A:3D:E9:3C:F8:C1:F1:12:B3:FD:D8:96:2E:3F:5D
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       019EB80F70E82CE59D39C61822468C0F516B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          11B2
Signing time:             Thu 11 Jun 2026 19:01:20 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:20 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:20 +0000
Files and hashes:         1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
                          2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: +otlH5/E3bqz4ADKXtVCKfzpyYE+iToko2M2vo3+x1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:70:e8:2c:e5:9d:39:c6:18:22:46:8c:0f:51:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Jun 11 19:01:20 2026 GMT
            Not After : Jun 12 19:01:20 2026 GMT
        Subject: CN=025648ea8b6a3de93cf8c1f112b3fdd8962e3f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:af:d9:68:f5:0e:6b:19:19:f0:64:bd:1b:
                    07:64:86:59:84:9b:18:87:67:33:60:61:d1:f3:74:
                    77:3b:83:2b:9b:a9:cb:ee:9c:4c:d7:5c:40:99:c9:
                    b6:44:48:b5:ce:27:c2:0c:c0:cd:c7:b5:1a:4f:90:
                    93:e2:f4:5d:f9:a9:56:78:6a:6e:9f:0a:3b:c9:51:
                    59:b2:b5:33:99:a1:51:e2:0d:9a:e1:d2:0c:61:cf:
                    23:42:0a:be:0c:76:8e:aa:97:2a:bc:27:fe:1b:0b:
                    a0:80:45:d9:df:2e:77:eb:4e:ed:9f:a7:11:c0:d9:
                    14:4a:4f:c1:30:fc:97:f6:f3:bd:a8:cd:2e:d0:30:
                    04:95:9c:c0:79:2d:37:37:63:9e:89:32:a9:7b:04:
                    f0:af:b6:58:2d:99:e0:50:b3:dc:4a:a7:b8:18:ca:
                    27:26:64:dd:5a:28:42:11:df:19:c3:02:51:8a:2c:
                    1a:c0:fc:12:38:ac:25:86:b7:41:fd:c4:02:fe:38:
                    38:97:a0:da:1b:4f:13:39:62:37:90:ac:29:79:cf:
                    20:a8:b6:e7:4c:b9:64:2a:ab:b9:17:2a:a3:e6:22:
                    6c:13:3d:11:96:d2:8f:37:72:d1:aa:6e:3c:26:94:
                    e4:57:c4:e9:59:4b:c3:8c:ed:5d:e3:9c:67:0d:15:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:48:EA:8B:6A:3D:E9:3C:F8:C1:F1:12:B3:FD:D8:96:2E:3F:5D
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2e:44:52:d7:74:93:20:1e:5c:9e:5c:27:15:77:41:25:cf:
         ba:e7:11:91:6c:79:eb:e3:0f:61:cc:6d:43:e4:cf:0b:df:a3:
         8e:c6:b6:b9:fd:23:15:2a:93:fd:2f:f8:6b:38:82:2d:63:2d:
         a3:c8:23:4c:11:e0:14:82:1e:4d:53:fd:49:02:b1:71:e7:79:
         ee:f1:83:d2:80:9c:bd:ab:8e:5b:ff:e8:ff:35:68:41:cc:05:
         29:0b:34:02:e2:5c:67:61:c8:8f:87:6a:94:4d:e6:13:26:94:
         1d:b9:0a:88:11:04:14:c1:69:2b:8e:2c:bd:2d:95:cf:94:99:
         da:68:4f:b4:25:74:ea:03:40:e4:ff:47:12:3e:94:57:d0:ae:
         f8:ad:21:5e:04:7e:b6:f0:15:1c:e7:d1:36:69:28:a6:5f:08:
         73:70:6e:ca:5c:9a:b8:8a:3d:53:01:c1:fa:8c:44:a3:39:19:
         ac:f9:16:00:66:13:28:57:15:af:5d:4f:e8:f3:cc:a3:fe:df:
         e5:04:6a:17:57:53:42:ba:59:b5:7a:f3:b3:12:19:22:f4:2e:
         c6:23:dc:9d:03:fb:d1:f5:1f:83:6a:61:57:4d:0f:90:bb:84:
         ef:51:c4:96:f9:96:d0:82:47:7f:35:70:2e:14:a1:78:d4:ce:
         54:80:c9:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64D3DoLOWdOcYYIkaMD1FrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjYwNjExMTkwMTIwWhcNMjYwNjEyMTkwMTIwWjAzMTEwLwYDVQQD
EygwMjU2NDhlYThiNmEzZGU5M2NmOGMxZjExMmIzZmRkODk2MmUzZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Sv2Wj1DmsZGfBkvRsHZIZZhJsY
h2czYGHR83R3O4Mrm6nL7pxM11xAmcm2REi1zifCDMDNx7UaT5CT4vRd+alWeGpu
nwo7yVFZsrUzmaFR4g2a4dIMYc8jQgq+DHaOqpcqvCf+GwuggEXZ3y53607tn6cR
wNkUSk/BMPyX9vO9qM0u0DAElZzAeS03N2OeiTKpewTwr7ZYLZngULPcSqe4GMon
JmTdWihCEd8ZwwJRiiwawPwSOKwlhrdB/cQC/jg4l6DaG08TOWI3kKwpec8gqLbn
TLlkKqu5Fyqj5iJsEz0RltKPN3LRqm48JpTkV8TpWUvDjO1d45xnDRV+cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJWSOqLaj3pPPjB8RKz/diWLj9dMB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS5EUtd0
kyAeXJ5cJxV3QSXPuucRkWx56+MPYcxtQ+TPC9+jjsa2uf0jFSqT/S/4aziCLWMt
o8gjTBHgFIIeTVP9SQKxced57vGD0oCcvauOW//o/zVoQcwFKQs0AuJcZ2HIj4dq
lE3mEyaUHbkKiBEEFMFpK44svS2Vz5SZ2mhPtCV06gNA5P9HEj6UV9Cu+K0hXgR+
tvAVHOfRNmkopl8Ic3BuylyauIo9UwHB+oxEozkZrPkWAGYTKFcVr11P6PPMo/7f
5QRqF1dTQrpZtXrzsxIZIvQuxiPcnQP70fUfg2phV00PkLuE71HElvmW0IJHfzVw
LhSheNTOVIDJsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:25 2026 by rpki-client