Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File:                     cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier:          c3ShPi9HxMmIYiLg/UGHECwdEz2gnuvgGf+pVw7zrmA=
Subject key identifier:   3E:50:51:C7:A6:FE:C0:FA:B8:44:6A:79:52:55:58:11:CC:6C:02:CD
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer:       /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial:       019F1C44A4E8BF8A852265B8D4854CFA4761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number:          0292
Signing time:             Wed 01 Jul 2026 06:01:28 +0000
Manifest this update:     Wed 01 Jul 2026 06:01:28 +0000
Manifest next update:     Thu 02 Jul 2026 06:01:28 +0000
Files and hashes:         1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
                          2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: j11FDDYiEQm74lUniFrZ+IoQmae4/6krXMjt1JCQG70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1c:44:a4:e8:bf:8a:85:22:65:b8:d4:85:4c:fa:47:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
        Validity
            Not Before: Jul  1 06:01:28 2026 GMT
            Not After : Jul  2 06:01:28 2026 GMT
        Subject: CN=3e5051c7a6fec0fab8446a7952555811cc6c02cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:c5:7b:68:68:e2:10:8e:b4:3f:87:68:1b:
                    1e:d2:6e:41:9e:13:28:c5:51:c2:96:6d:ee:bb:86:
                    4b:98:ac:28:44:d7:21:7e:e8:d7:79:68:14:fe:85:
                    4e:c7:d9:be:87:c9:1d:64:46:f9:27:f0:a7:62:d6:
                    60:50:95:e7:95:db:1a:e7:42:ad:1c:d4:63:35:a9:
                    1e:d1:29:80:bf:3e:8a:8d:3f:51:bf:99:e5:02:3b:
                    a9:32:d7:e8:b5:32:6f:54:6e:3c:68:88:6d:ed:e0:
                    64:15:87:95:f7:0f:cf:80:51:e3:be:b7:41:d5:0b:
                    56:a9:db:2a:c3:78:77:c2:ec:1c:72:14:9b:d8:5b:
                    68:8f:d8:83:ff:0b:36:b2:c9:86:49:3f:4a:c7:9f:
                    85:46:59:18:cd:96:00:5d:a0:2d:c0:24:b4:55:d1:
                    80:68:ff:4b:b8:70:01:60:22:a7:38:78:a5:da:84:
                    e9:c8:88:91:96:eb:c2:1b:db:dc:c8:d8:43:53:2a:
                    59:a2:91:bd:bb:f5:ed:b7:bb:82:d4:57:55:85:05:
                    cc:13:6d:b3:1f:f6:eb:1b:c7:4f:18:a4:15:17:42:
                    89:d0:d4:e3:ca:1f:2f:80:80:59:fa:71:be:63:78:
                    9d:f9:a6:c5:a0:fe:07:6c:73:52:68:90:a2:6c:b2:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:51:C7:A6:FE:C0:FA:B8:44:6A:79:52:55:58:11:CC:6C:02:CD
            X509v3 Authority Key Identifier:
                keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:23:3a:50:99:4c:f8:d0:27:0a:aa:79:4e:f4:8b:50:6e:
         f1:8a:08:6e:ea:74:36:2f:9c:c1:a8:45:d2:5c:27:43:e9:37:
         47:93:79:c3:36:34:9d:55:b5:ee:b7:d1:82:cc:6c:ca:29:4d:
         39:c7:72:59:2a:85:66:6d:17:ef:03:e5:b3:e3:6f:6f:09:48:
         aa:f5:5b:7c:20:89:3a:3e:17:26:54:a4:9f:73:52:58:bb:10:
         e4:59:9a:84:02:73:ac:94:1c:34:c7:f0:28:2d:a4:c0:94:19:
         ec:23:be:15:56:e6:44:e6:60:e7:6b:ab:c2:94:df:c5:83:60:
         a4:81:dc:b6:bd:f6:73:da:63:87:58:53:34:b3:f1:be:09:b0:
         df:ac:14:2f:26:5e:a4:ba:ca:ed:98:49:ad:f1:71:d7:83:e0:
         07:5b:0d:4f:64:7f:fc:4d:59:72:6e:b5:cd:40:cd:9e:33:f4:
         7d:4f:02:e3:7a:f1:81:14:05:51:9f:43:9c:cb:b4:59:b2:ad:
         4a:e2:06:b3:96:70:5c:6a:a9:fc:42:32:06:2e:bd:83:51:98:
         65:77:0e:3b:29:ec:7c:30:eb:b3:eb:93:6c:94:00:b0:28:67:
         0d:ae:a2:b2:f8:61:30:13:27:ef:f0:bc:c2:4e:92:67:56:59:
         82:e7:ca:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8cRKTov4qFImW41IVM+kdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0
YjRmZTUwHhcNMjYwNzAxMDYwMTI4WhcNMjYwNzAyMDYwMTI4WjAzMTEwLwYDVQQD
EygzZTUwNTFjN2E2ZmVjMGZhYjg0NDZhNzk1MjU1NTgxMWNjNmMwMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb/Fe2ho4hCOtD+HaBse0m5BnhMo
xVHClm3uu4ZLmKwoRNchfujXeWgU/oVOx9m+h8kdZEb5J/CnYtZgUJXnldsa50Kt
HNRjNake0SmAvz6KjT9Rv5nlAjupMtfotTJvVG48aIht7eBkFYeV9w/PgFHjvrdB
1QtWqdsqw3h3wuwcchSb2Ftoj9iD/ws2ssmGST9Kx5+FRlkYzZYAXaAtwCS0VdGA
aP9LuHABYCKnOHil2oTpyIiRluvCG9vcyNhDUypZopG9u/Xtt7uC1FdVhQXME22z
H/brG8dPGKQVF0KJ0NTjyh8vgIBZ+nG+Y3id+abFoP4HbHNSaJCibLIJFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5QUcem/sD6uERqeVJVWBHMbALNMB8GA1UdIwQY
MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt
YTI4YmNlNWQ1ZGE1LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1
LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7UjOlCZ
TPjQJwqqeU70i1Bu8YoIbup0Ni+cwahF0lwnQ+k3R5N5wzY0nVW17rfRgsxsyilN
OcdyWSqFZm0X7wPls+NvbwlIqvVbfCCJOj4XJlSkn3NSWLsQ5FmahAJzrJQcNMfw
KC2kwJQZ7CO+FVbmROZg52urwpTfxYNgpIHctr32c9pjh1hTNLPxvgmw36wULyZe
pLrK7ZhJrfFx14PgB1sNT2R//E1Zcm61zUDNnjP0fU8C43rxgRQFUZ9DnMu0WbKt
SuIGs5ZwXGqp/EIyBi69g1GYZXcOOynsfDDrs+uTbJQAsChnDa6isvhhMBMn7/C8
wk6SZ1ZZgufKhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 12:42:38 2026 by rpki-client