Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File:                     YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier:          GktfIV7ged6y754u/cdEq5oDYo2JCossclSfBqBQdvo=
Subject key identifier:   56:87:2C:55:5E:9E:1D:25:42:13:DE:CA:C5:97:20:CE:3F:AD:15:FB
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer:       /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial:       019EBFC8C97CDD76EC2D38AC62D02356102B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 07:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:07 +0000
Files and hashes:         1: Awm_DabV6b5aFzZjoL4IRRaHXvI.roa (hash: 8OukxgZtrCYr2IAiBPp1+KwaQD8XPdUdi2hA8JM9baM=)
                          2: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: jXxLF3l7QtvFt4Rw9nBf77FXQC9gYNoYpvNAbgGC9eY=)
                          3: llfMrhUWfSkRK5hK0AzdhqQLJv8.roa (hash: hJA3pZdghhHwfd7bRm3Ls7VwTVf1TOxJacXNTFZzVPI=)
                          4: nFnwvZn2y6J_tUGewNTO4fY9C0k.asa (hash: zDo5Ms/ybgPRllQhXvdgQws7ZsKZj1TDWdYoEliu338=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:c9:7c:dd:76:ec:2d:38:ac:62:d0:23:56:10:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
        Validity
            Not Before: Jun 13 07:01:07 2026 GMT
            Not After : Jun 14 07:01:07 2026 GMT
        Subject: CN=56872c555e9e1d254213decac59720ce3fad15fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:90:40:ce:29:0d:4c:e8:49:cd:03:a1:fa:
                    cf:21:9b:28:39:89:ed:aa:19:d9:3b:23:c9:3f:e0:
                    a3:fb:61:fe:bb:6f:d6:0f:d3:30:e4:1c:f4:bd:6f:
                    fb:32:d4:86:bc:b5:2a:c9:e4:a1:e7:07:8e:6c:6f:
                    ad:fe:08:de:57:7f:02:61:52:df:51:a7:7e:a3:3f:
                    42:f1:61:05:27:56:5f:90:29:14:6f:10:79:de:2c:
                    8f:66:29:52:01:a2:5d:0d:af:6c:d0:18:e9:02:19:
                    48:b5:0b:c9:99:c3:cf:88:b6:85:4a:ac:1b:27:35:
                    ce:2c:a6:09:3d:70:46:14:be:8a:49:6f:1a:df:28:
                    20:cf:dd:c9:78:68:65:d9:ab:02:4d:48:eb:61:b8:
                    4c:04:4a:e7:f6:4a:1a:b6:66:5b:8e:30:75:63:17:
                    2f:b6:0c:07:8c:0c:1a:b6:69:c3:0f:3e:1f:34:19:
                    14:c4:00:7b:b0:63:7d:65:51:19:c3:d8:c3:6d:d8:
                    d6:ea:ab:96:74:6b:52:a5:7d:c6:91:d2:67:2e:c2:
                    4c:a7:25:53:fc:cf:a3:74:6c:1b:ef:34:38:72:d7:
                    5c:13:21:c9:64:b0:7c:0f:5e:00:c2:f5:15:04:5c:
                    a5:36:53:e2:d5:3e:47:b5:46:70:4c:d0:31:e6:36:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:2C:55:5E:9E:1D:25:42:13:DE:CA:C5:97:20:CE:3F:AD:15:FB
            X509v3 Authority Key Identifier:
                keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:56:4f:1f:8c:8d:3e:c8:22:6a:70:b6:ac:41:95:80:c9:4f:
         7a:c4:11:30:b7:cf:44:e2:b5:bb:e3:84:99:85:7b:1d:fa:f5:
         6d:63:40:f7:83:00:66:0a:ec:89:6f:db:12:0a:24:47:43:6d:
         cc:b4:cf:5d:88:14:8b:d0:25:ea:09:e6:e6:81:a1:96:ed:6a:
         32:56:ab:9f:0d:61:f3:8c:bb:71:db:1a:ca:70:e2:89:e7:71:
         c0:d4:b9:76:89:c9:6d:23:36:87:18:66:c0:c8:25:5d:43:ca:
         2e:6d:68:9b:5b:c9:2d:0e:9d:57:06:35:67:1d:36:ab:d7:ae:
         07:a7:f0:86:91:7f:32:95:57:f5:27:ab:8d:39:fd:2d:57:79:
         d8:ed:bd:f9:0b:69:18:9f:4a:f5:76:3c:79:1a:66:c9:8b:00:
         e2:40:af:b5:6d:f8:4c:86:f2:61:57:8d:df:a2:2b:cf:37:be:
         ef:d2:5f:d5:54:5e:95:13:bb:85:4d:42:c3:ba:e5:b8:51:a7:
         25:31:ff:9f:28:3b:d5:52:14:e2:38:b7:e6:91:36:c7:ab:1c:
         fe:c8:4f:d7:ca:90:a4:d8:8a:f0:d6:73:f4:a2:ca:cd:ee:e8:
         63:cd:7e:6b:60:40:20:d7:af:c0:c8:3c:e7:b0:67:a2:53:76:
         17:08:d1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yMl83XbsLTisYtAjVhArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjYwNjEzMDcwMTA3WhcNMjYwNjE0MDcwMTA3WjAzMTEwLwYDVQQD
Eyg1Njg3MmM1NTVlOWUxZDI1NDIxM2RlY2FjNTk3MjBjZTNmYWQxNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDOQQM4pDUzoSc0DofrPIZsoOYnt
qhnZOyPJP+Cj+2H+u2/WD9Mw5Bz0vW/7MtSGvLUqyeSh5weObG+t/gjeV38CYVLf
Uad+oz9C8WEFJ1ZfkCkUbxB53iyPZilSAaJdDa9s0BjpAhlItQvJmcPPiLaFSqwb
JzXOLKYJPXBGFL6KSW8a3yggz93JeGhl2asCTUjrYbhMBErn9koatmZbjjB1Yxcv
tgwHjAwatmnDDz4fNBkUxAB7sGN9ZVEZw9jDbdjW6quWdGtSpX3GkdJnLsJMpyVT
/M+jdGwb7zQ4ctdcEyHJZLB8D14AwvUVBFylNlPi1T5HtUZwTNAx5jZYhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaHLFVenh0lQhPeysWXIM4/rRX7MB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlZPH4yN
PsgianC2rEGVgMlPesQRMLfPROK1u+OEmYV7Hfr1bWNA94MAZgrsiW/bEgokR0Nt
zLTPXYgUi9Al6gnm5oGhlu1qMlarnw1h84y7cdsaynDiiedxwNS5donJbSM2hxhm
wMglXUPKLm1om1vJLQ6dVwY1Zx02q9euB6fwhpF/MpVX9SerjTn9LVd52O29+Qtp
GJ9K9XY8eRpmyYsA4kCvtW34TIbyYVeN36Irzze+79Jf1VRelRO7hU1Cw7rluFGn
JTH/nyg71VIU4ji35pE2x6sc/shP18qQpNiK8NZz9KLKze7oY81+a2BAINevwMg8
57BnolN2FwjRtg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:57 2026 by rpki-client