Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
File:                     Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json)
Hash identifier:          W+QymZoJ06lAXIpir+09Ls6Lus1lEjt6XuoeGFaHQBQ=
Subject key identifier:   AC:2F:95:54:73:4E:11:72:9B:44:20:36:E1:4D:AD:B9:C5:5B:79:DA
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Certificate issuer:       /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial:       019F1AC4222325E16FBFEDF0AE1B0F04D2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
Manifest number:          0CCC
Signing time:             Tue 30 Jun 2026 23:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 23:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 23:01:29 +0000
Files and hashes:         1: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: MhBj2WorC9OxWifwCpJPcNlI08lcktN1xHQ9skJzPIc=)
                          2: rt1jmEWcts8v82w_w-CIFAF6XNA.roa (hash: 2a8J88cRjXc2S0NbaaMIdvXvo0cjbAPhTxZH/dueltY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:c4:22:23:25:e1:6f:bf:ed:f0:ae:1b:0f:04:d2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
        Validity
            Not Before: Jun 30 23:01:29 2026 GMT
            Not After : Jul  1 23:01:29 2026 GMT
        Subject: CN=ac2f9554734e11729b442036e14dadb9c55b79da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:0d:17:a8:c2:cd:52:61:18:c8:4a:40:cb:
                    77:33:ac:9d:fd:a9:67:e0:31:17:fb:0c:f6:59:3e:
                    d1:ec:16:96:e2:40:02:bf:8c:c0:6e:29:34:0a:fd:
                    69:2e:5c:c6:b1:79:80:e5:ea:bd:73:61:ee:33:cd:
                    4f:dd:3e:7a:5d:4e:a3:07:c7:88:c1:23:1c:f5:a0:
                    dc:d1:51:a0:98:04:49:20:58:66:7a:dd:66:47:55:
                    18:9a:55:ac:bf:73:28:0b:1d:40:f7:a8:9e:4e:ee:
                    8b:3b:28:e7:14:b3:1d:08:32:bd:ca:7b:f3:ee:bf:
                    84:dd:7a:98:b7:3c:91:49:48:79:29:3e:77:91:d3:
                    d6:61:ec:39:38:59:7a:c0:28:f1:8c:4b:05:86:8c:
                    96:42:cc:35:f8:f4:70:cb:65:a9:a1:da:1d:b6:1a:
                    70:52:21:c4:e7:11:5a:32:d0:45:79:61:dd:c8:38:
                    ab:3f:87:0c:8e:61:15:01:96:85:30:0b:30:24:36:
                    41:c9:79:04:d9:0f:0e:00:ac:fa:96:52:c6:50:c0:
                    c9:ca:e8:97:0b:e5:ab:6f:22:66:65:5d:83:7f:7a:
                    08:a8:a3:06:ce:92:46:4b:f6:01:c7:aa:93:88:2a:
                    16:ba:94:ab:b7:70:53:8e:ef:16:00:91:13:87:cf:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:95:54:73:4E:11:72:9B:44:20:36:E1:4D:AD:B9:C5:5B:79:DA
            X509v3 Authority Key Identifier:
                keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:36:68:f8:d6:1e:44:ea:f4:24:df:09:55:97:3a:a4:de:98:
         22:a4:40:a2:fc:43:b3:06:7c:e4:01:ca:77:55:d8:0b:7e:6a:
         ca:f9:45:d6:8f:14:62:b1:30:62:74:0b:77:37:2c:93:f7:4a:
         5c:5a:ea:a7:7b:13:b8:15:8b:a6:b5:ad:73:71:eb:2c:e5:15:
         07:19:f8:2d:50:28:f2:85:4d:57:3a:b1:26:a5:1c:b5:31:a1:
         e9:0e:c9:3f:23:56:25:51:04:d1:06:6e:1e:33:9f:3f:90:1b:
         00:91:66:ef:49:62:b5:93:d4:c8:71:1e:ab:3f:7d:9a:a5:f5:
         17:d5:36:a9:12:f1:20:3d:b3:02:db:0b:9d:c5:df:ae:1f:93:
         ea:71:cb:1b:f2:4f:ce:f3:2a:08:84:44:52:bc:b0:46:57:5f:
         ea:a6:c1:9a:bc:32:6e:ff:ab:72:2d:78:02:bf:8d:09:bb:ae:
         31:3d:69:74:27:e3:25:35:62:4c:16:89:ed:e9:49:21:1f:a5:
         a8:d5:52:2f:18:db:38:24:c5:6c:51:e8:2d:52:87:55:ae:67:
         07:ac:2f:02:5f:3e:64:55:0f:47:67:6c:33:96:90:43:03:40:
         ad:18:1b:7a:9f:11:9a:80:7a:1a:39:ba:58:4e:3c:b1:c2:a6:
         49:85:c4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8axCIjJeFvv+3wrhsPBNL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZWY5Nzc1NTBmYTdjODEzZGVlNWMxYjkwZTk1MTFiOWM2
OGRkMGEwHhcNMjYwNjMwMjMwMTI5WhcNMjYwNzAxMjMwMTI5WjAzMTEwLwYDVQQD
EyhhYzJmOTU1NDczNGUxMTcyOWI0NDIwMzZlMTRkYWRiOWM1NWI3OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VkNF6jCzVJhGMhKQMt3M6yd/aln
4DEX+wz2WT7R7BaW4kACv4zAbik0Cv1pLlzGsXmA5eq9c2HuM81P3T56XU6jB8eI
wSMc9aDc0VGgmARJIFhmet1mR1UYmlWsv3MoCx1A96ieTu6LOyjnFLMdCDK9ynvz
7r+E3XqYtzyRSUh5KT53kdPWYew5OFl6wCjxjEsFhoyWQsw1+PRwy2Wpododthpw
UiHE5xFaMtBFeWHdyDirP4cMjmEVAZaFMAswJDZByXkE2Q8OAKz6llLGUMDJyuiX
C+WrbyJmZV2Df3oIqKMGzpJGS/YBx6qTiCoWupSrt3BTju8WAJETh8+0HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwvlVRzThFym0QgNuFNrbnFW3naMB8GA1UdIwQY
MBaAFGLvl3VQ+nyBPe5cG5DpURucaN0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAt
NTg0YTE0MGI4YjcxLzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAtNTg0YTE0MGI4Yjcx
LzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjZo+NYe
ROr0JN8JVZc6pN6YIqRAovxDswZ85AHKd1XYC35qyvlF1o8UYrEwYnQLdzcsk/dK
XFrqp3sTuBWLprWtc3HrLOUVBxn4LVAo8oVNVzqxJqUctTGh6Q7JPyNWJVEE0QZu
HjOfP5AbAJFm70litZPUyHEeqz99mqX1F9U2qRLxID2zAtsLncXfrh+T6nHLG/JP
zvMqCIREUrywRldf6qbBmrwybv+rci14Ar+NCbuuMT1pdCfjJTViTBaJ7elJIR+l
qNVSLxjbOCTFbFHoLVKHVa5nB6wvAl8+ZFUPR2dsM5aQQwNArRgbep8RmoB6Gjm6
WE48scKmSYXEkQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:17:44 2026 by rpki-client