Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File:                     YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier:          B53i1qGSS7ZPFnGRibrR3pAcbxeKqw4Rno4Rhoq1pcI=
Subject key identifier:   C3:61:B3:0A:B6:86:07:7C:6D:32:E0:70:03:5E:EE:4A:C4:BA:60:36
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer:       /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial:       019EB7A1AAE436D059BA12A6442A12462ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number:          18E9
Signing time:             Thu 11 Jun 2026 17:01:26 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:26 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:26 +0000
Files and hashes:         1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
                          2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: /vg/ujoPi/ocpUthuPtgyz6Fu2UT0AAkqW6ZETvPHc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:aa:e4:36:d0:59:ba:12:a6:44:2a:12:46:2e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
        Validity
            Not Before: Jun 11 17:01:26 2026 GMT
            Not After : Jun 12 17:01:26 2026 GMT
        Subject: CN=c361b30ab686077c6d32e070035eee4ac4ba6036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bb:08:64:40:c9:27:13:df:6a:7b:78:56:1c:
                    dd:68:7c:c8:15:25:de:80:51:88:99:84:05:3a:ec:
                    6e:66:a8:66:77:6f:d9:b5:a2:10:1b:82:23:1a:c5:
                    0d:37:03:54:24:f2:ea:1f:f5:92:9b:f3:44:4e:be:
                    d2:3d:b2:94:5c:ca:d1:18:d6:ae:05:48:73:22:57:
                    13:96:33:42:33:56:e4:f1:ea:5a:f9:9b:88:c3:45:
                    c1:33:87:84:5c:84:57:76:7b:6b:d4:ff:da:32:35:
                    51:69:3b:57:7f:7d:0c:36:b8:ec:10:b7:86:80:05:
                    ca:80:ea:00:18:23:6e:b6:32:a3:0e:70:4f:75:36:
                    d8:b9:a8:b9:ab:91:4f:72:03:5e:3d:6f:c2:0b:ef:
                    d5:9e:50:02:b3:f5:1b:36:7d:09:a9:28:14:2c:80:
                    fd:3b:3b:ad:8b:02:e1:10:d5:7c:2c:15:a0:cd:61:
                    7c:f3:77:2b:7a:f0:ef:24:b8:38:a7:51:e0:ab:25:
                    a3:75:c9:7e:17:02:26:cf:1b:fd:98:f6:c2:04:ad:
                    47:21:28:61:66:86:aa:60:e2:b2:bf:8c:78:dc:97:
                    80:a7:12:b9:56:0e:59:42:d5:08:0a:20:31:d6:ae:
                    38:d3:98:d8:50:9a:2a:59:59:00:84:28:8d:ad:50:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:61:B3:0A:B6:86:07:7C:6D:32:E0:70:03:5E:EE:4A:C4:BA:60:36
            X509v3 Authority Key Identifier:
                keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:45:c2:19:69:20:e4:00:c4:20:0c:5f:f4:83:52:b5:fb:9b:
         3d:cc:88:e5:79:b5:30:68:5c:4b:3f:f5:ac:02:5f:24:5c:67:
         d6:c5:bd:cb:02:02:03:81:f5:1e:27:08:07:9b:2a:1d:a9:ea:
         2c:ce:d2:4c:fc:47:60:5a:9a:f9:16:66:08:af:ad:ef:b5:e2:
         b7:a4:b0:33:e0:33:a5:11:4a:4d:fc:23:d1:77:04:57:ed:a2:
         9c:f1:56:8b:b4:8b:06:10:b2:9c:fe:1a:8a:5e:d0:25:23:68:
         49:e8:99:48:49:6c:f0:ea:57:e5:bb:24:bb:4d:d1:99:e3:b8:
         af:ce:f3:80:d4:0c:b5:63:e0:58:f5:b7:4e:cc:51:d0:5a:51:
         93:2d:94:72:6d:43:6c:04:c0:9b:ea:35:42:38:65:0c:09:7f:
         53:de:6d:69:c9:bc:f0:bb:f6:2d:9e:d5:2b:bf:65:10:d1:65:
         07:7e:3d:00:5c:60:38:91:b2:75:f8:79:2e:7d:cc:c1:25:d9:
         fb:01:57:97:5d:c9:09:15:2a:21:73:b6:14:b0:cf:bb:dc:c9:
         2a:3e:bc:6b:91:c0:66:c6:b5:aa:80:06:1c:c0:65:25:53:83:
         fc:d0:c6:ba:f3:b5:27:3e:9d:10:8d:d1:a6:51:0a:1c:3c:37:
         e5:2c:ef:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oarkNtBZuhKmRCoSRi7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjAxNDEwMWZmYmNlNjc1MTM5Y2Q0YzAyYmEwMDYzNGFk
ODZlMDIwHhcNMjYwNjExMTcwMTI2WhcNMjYwNjEyMTcwMTI2WjAzMTEwLwYDVQQD
EyhjMzYxYjMwYWI2ODYwNzdjNmQzMmUwNzAwMzVlZWU0YWM0YmE2MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrsIZEDJJxPfant4VhzdaHzIFSXe
gFGImYQFOuxuZqhmd2/ZtaIQG4IjGsUNNwNUJPLqH/WSm/NETr7SPbKUXMrRGNau
BUhzIlcTljNCM1bk8epa+ZuIw0XBM4eEXIRXdntr1P/aMjVRaTtXf30MNrjsELeG
gAXKgOoAGCNutjKjDnBPdTbYuai5q5FPcgNePW/CC+/VnlACs/UbNn0JqSgULID9
OzutiwLhENV8LBWgzWF883crevDvJLg4p1HgqyWjdcl+FwImzxv9mPbCBK1HIShh
ZoaqYOKyv4x43JeApxK5Vg5ZQtUICiAx1q4405jYUJoqWVkAhCiNrVBb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNhswq2hgd8bTLgcANe7krEumA2MB8GA1UdIwQY
MBaAFGFgFBAf+85nUTnNTAK6AGNK2G4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAt
NTljZGRiYTE3NmVmLzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAtNTljZGRiYTE3NmVm
LzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUXCGWkg
5ADEIAxf9INStfubPcyI5Xm1MGhcSz/1rAJfJFxn1sW9ywICA4H1HicIB5sqHanq
LM7STPxHYFqa+RZmCK+t77Xit6SwM+AzpRFKTfwj0XcEV+2inPFWi7SLBhCynP4a
il7QJSNoSeiZSEls8OpX5bsku03RmeO4r87zgNQMtWPgWPW3TsxR0FpRky2Ucm1D
bATAm+o1QjhlDAl/U95tacm88Lv2LZ7VK79lENFlB349AFxgOJGydfh5Ln3MwSXZ
+wFXl13JCRUqIXO2FLDPu9zJKj68a5HAZsa1qoAGHMBlJVOD/NDGuvO1Jz6dEI3R
plEKHDw35SzvCg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:06 2026 by rpki-client