Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File:                     y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier:          cwXYMBD86/iTYIuqgsRDEAk6YtkVKN6pxd//jngDA7U=
Subject key identifier:   1E:78:D0:E1:99:F4:48:E2:3E:76:B1:0A:BF:28:4A:BF:FD:F0:7A:4F
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer:       /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial:       019EFD60473DC8B38B8016441ED107580FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number:          4F
Signing time:             Thu 25 Jun 2026 06:03:25 +0000
Manifest this update:     Thu 25 Jun 2026 06:03:25 +0000
Manifest next update:     Fri 26 Jun 2026 06:03:25 +0000
Files and hashes:         1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
                          2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
                          3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: VAdZpSgIK48GkBNKY5in0xFUinh1S3dc1pCD1sO2hvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:60:47:3d:c8:b3:8b:80:16:44:1e:d1:07:58:0f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
        Validity
            Not Before: Jun 25 06:03:25 2026 GMT
            Not After : Jun 26 06:03:25 2026 GMT
        Subject: CN=1e78d0e199f448e23e76b10abf284abffdf07a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:42:8e:70:43:f7:60:2c:8b:51:40:b2:d1:
                    b4:e8:87:fa:8f:d5:7e:4c:85:6a:28:8b:78:1d:13:
                    c3:fa:f5:d8:1d:51:d9:87:9c:d5:55:f9:aa:27:0a:
                    64:67:de:f9:ef:e6:90:ea:28:60:c3:97:3c:b4:e2:
                    a9:4a:8b:f0:35:1b:54:8b:5f:9f:c2:84:03:66:c6:
                    28:1b:25:a5:e0:4f:ef:5f:f8:f6:66:62:43:d9:cd:
                    54:97:a8:d6:63:87:f7:ae:be:e5:e8:df:39:2a:38:
                    a2:9c:0e:f9:36:14:f6:c5:25:54:c2:67:d8:fa:c0:
                    f0:07:4e:c8:fd:21:8c:7a:ad:e2:a4:e2:b6:ae:13:
                    81:91:ff:3b:83:b4:b0:8d:3c:f5:62:98:ec:48:f5:
                    56:1e:4d:62:83:17:0d:55:8b:64:2e:e6:92:e6:38:
                    28:ea:a3:ea:a0:e3:de:d9:c9:35:14:27:d3:65:02:
                    29:8e:cc:b6:06:5a:38:b3:89:ee:30:96:e0:48:23:
                    5d:61:16:76:cd:05:c0:71:18:6f:0e:d0:e6:43:7e:
                    3e:e8:b7:50:9d:88:39:f9:f1:5d:6b:95:2c:86:be:
                    28:55:d9:f5:e6:be:15:e9:ac:87:06:04:5b:7f:dc:
                    73:74:dc:12:e2:37:65:35:b8:c4:85:63:da:fc:a8:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:D0:E1:99:F4:48:E2:3E:76:B1:0A:BF:28:4A:BF:FD:F0:7A:4F
            X509v3 Authority Key Identifier:
                keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:8b:8a:f7:c5:08:6e:3a:59:22:9b:f7:36:76:02:6e:03:
         84:e9:1f:37:bb:96:4e:5f:d6:26:39:3d:df:5b:d2:f2:15:0c:
         14:ff:49:8b:45:32:c5:48:5f:cb:f9:69:81:29:24:e8:ac:65:
         58:68:4b:19:c3:0a:c0:8f:4d:9e:e9:9c:f3:3b:de:4b:d1:37:
         44:6a:30:19:30:f3:e7:95:77:a0:c2:f9:28:7a:36:e1:3d:18:
         7e:f4:f3:6d:3a:54:69:48:31:c6:a8:22:0f:9b:4a:1d:85:e8:
         d7:89:68:4e:3d:25:a6:5d:5d:64:03:4b:50:ba:41:ac:00:90:
         af:bf:a0:73:5b:89:8c:cc:8c:e7:bf:01:45:e2:1a:1a:fe:f2:
         ad:e9:70:a5:e8:7e:2c:77:1c:a0:4e:04:18:e9:6e:cf:41:0c:
         60:8e:3d:b3:85:e8:59:e5:d9:1a:be:42:9b:10:c9:71:77:78:
         ca:32:11:01:0e:1d:83:16:78:8c:8b:58:47:22:1b:15:0e:59:
         62:30:45:64:59:d0:0d:32:8e:fe:46:ed:9d:99:7e:ce:1f:09:
         fa:a4:e1:a4:13:ec:90:fa:fb:21:b1:16:da:bd:10:19:27:73:
         a3:ee:13:1f:c5:42:f8:12:36:92:d8:57:4c:53:b4:97:89:c6:
         81:d6:81:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79YEc9yLOLgBZEHtEHWA/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjVkZmI5NTBkNjA0OGZkYzc5OGY2ZTBkM2ZkYTUxN2Vj
YmM2NDgwHhcNMjYwNjI1MDYwMzI1WhcNMjYwNjI2MDYwMzI1WjAzMTEwLwYDVQQD
EygxZTc4ZDBlMTk5ZjQ0OGUyM2U3NmIxMGFiZjI4NGFiZmZkZjA3YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnplCjnBD92Asi1FAstG06If6j9V+
TIVqKIt4HRPD+vXYHVHZh5zVVfmqJwpkZ9757+aQ6ihgw5c8tOKpSovwNRtUi1+f
woQDZsYoGyWl4E/vX/j2ZmJD2c1Ul6jWY4f3rr7l6N85KjiinA75NhT2xSVUwmfY
+sDwB07I/SGMeq3ipOK2rhOBkf87g7SwjTz1YpjsSPVWHk1igxcNVYtkLuaS5jgo
6qPqoOPe2ck1FCfTZQIpjsy2Blo4s4nuMJbgSCNdYRZ2zQXAcRhvDtDmQ34+6LdQ
nYg5+fFda5Ushr4oVdn15r4V6ayHBgRbf9xzdNwS4jdlNbjEhWPa/KjjmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB540OGZ9EjiPnaxCr8oSr/98HpPMB8GA1UdIwQY
MBaAFMu137lQ1gSP3HmPbg0/2lF+y8ZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdYZnVWRFdCSV9jZVk5dURUX2FVWDdMeGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lZTcxNjUtZWI2My00MzQ2LWE4ZGYt
NWY1YTkzZGE1MGY4LzEveTdYZnVWRFdCSV9jZVk5dURUX2FVWDdMeGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lZTcxNjUtZWI2My00MzQ2LWE4ZGYtNWY1YTkzZGE1MGY4
LzEveTdYZnVWRFdCSV9jZVk5dURUX2FVWDdMeGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpCLivfF
CG46WSKb9zZ2Am4DhOkfN7uWTl/WJjk931vS8hUMFP9Ji0UyxUhfy/lpgSkk6Kxl
WGhLGcMKwI9Nnumc8zveS9E3RGowGTDz55V3oML5KHo24T0YfvTzbTpUaUgxxqgi
D5tKHYXo14loTj0lpl1dZANLULpBrACQr7+gc1uJjMyM578BReIaGv7yrelwpeh+
LHccoE4EGOluz0EMYI49s4XoWeXZGr5CmxDJcXd4yjIRAQ4dgxZ4jItYRyIbFQ5Z
YjBFZFnQDTKO/kbtnZl+zh8J+qThpBPskPr7IbEW2r0QGSdzo+4TH8VC+BI2kthX
TFO0l4nGgdaBrA==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:05 2026 by rpki-client