Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          2lrOE6KUnjSMDZSlBolrX3STbMf8Rq6kgXvxQqUuoZ8=
Subject key identifier:   55:D4:C4:FB:66:91:94:EB:94:DF:4A:32:D1:62:0C:BC:2F:4B:DD:21
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       019E9C29A751D52896472D53885C41DC4B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          10D6
Signing time:             Sat 06 Jun 2026 09:00:35 +0000
Manifest this update:     Sat 06 Jun 2026 09:00:35 +0000
Manifest next update:     Sun 07 Jun 2026 09:00:35 +0000
Files and hashes:         1: pkANJWQGRxeYUhe9QHaxt_kkCZ0.roa (hash: JQPpr1NgeNVkQnAHd4pZVUEgVBBePxibUcmbvm5s/ds=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: jlB5HR13dmTxoD0Yb2sMv718MPJalK7KbPKYki/M9Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:29:a7:51:d5:28:96:47:2d:53:88:5c:41:dc:4b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Jun  6 09:00:35 2026 GMT
            Not After : Jun  7 09:00:35 2026 GMT
        Subject: CN=55d4c4fb669194eb94df4a32d1620cbc2f4bdd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:b3:bf:f4:87:4d:5c:f3:38:6b:15:24:1f:
                    44:7e:41:56:14:67:b4:de:cc:b7:f5:13:d9:d0:12:
                    5f:d4:ef:24:a7:91:20:6c:b7:19:67:3e:d5:e4:2a:
                    21:9b:ab:51:b7:b5:15:9e:3d:ad:64:4f:79:52:9e:
                    39:07:ec:15:b9:10:40:5a:77:92:3d:07:a0:e8:59:
                    41:88:a1:fe:e4:6d:cf:d1:0f:43:a3:62:e7:5c:68:
                    d5:38:11:eb:6c:b4:9a:07:c9:9d:e0:e2:98:a0:79:
                    f8:f9:ae:d2:fc:1a:20:11:1f:8b:f8:88:c6:79:f0:
                    e2:19:c5:83:bc:b2:27:71:dd:bd:31:2f:4d:b1:85:
                    38:21:6a:82:4c:6c:56:46:79:d1:81:b0:9e:73:aa:
                    79:63:c1:b5:35:c7:05:b5:35:d1:6c:55:8f:38:ee:
                    ff:54:a9:1d:a3:c3:02:9b:2f:3c:e6:a8:36:04:17:
                    5d:af:c9:72:30:e1:1f:ec:67:96:18:37:a3:12:b8:
                    40:4c:b3:da:fb:01:1e:17:7c:93:c3:4c:e1:f4:c1:
                    42:3c:4a:aa:76:0e:60:b7:de:3f:cc:bf:bd:46:dc:
                    d3:8c:8a:65:c3:fe:57:e8:02:34:63:1a:31:28:48:
                    d8:aa:00:f4:70:b1:1c:ba:37:3b:32:06:30:47:3d:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D4:C4:FB:66:91:94:EB:94:DF:4A:32:D1:62:0C:BC:2F:4B:DD:21
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:77:c1:ab:62:da:66:35:c8:75:e1:31:dc:1c:14:a3:d7:
         d9:ec:8b:e8:57:56:a9:d8:13:72:99:2d:e0:a8:05:bf:f0:25:
         cc:ec:03:ee:b5:09:dc:ec:f2:13:e8:d2:f3:8b:a5:8d:c2:ec:
         34:3a:da:e6:2a:85:01:09:db:d8:b7:2f:64:b9:50:a5:02:84:
         72:e7:99:b0:e4:89:70:73:f7:5f:b8:03:ca:c2:be:07:3f:8e:
         8d:35:87:18:02:05:50:2e:f7:dd:fb:a9:58:ba:a5:af:de:3d:
         2b:9d:59:10:6e:9b:dd:6a:f2:51:bc:88:35:5f:ec:ca:34:04:
         1e:a0:c5:0d:4d:06:b5:88:a8:5a:d6:87:f2:08:ae:f8:4a:75:
         59:66:4c:1d:fe:27:37:02:ad:9e:5e:a4:e7:07:c8:1f:ec:d6:
         27:0d:ff:7c:f4:fd:4d:b4:19:3d:17:a9:ea:f1:83:f9:9a:ad:
         5a:a7:49:d5:12:2b:60:11:0c:31:db:e3:93:87:41:5a:c8:cd:
         5f:07:1c:c3:cc:9b:ed:7c:5f:8f:52:1d:46:80:2f:5c:ac:b6:
         f0:66:d7:df:5d:f8:ad:74:bb:b6:db:65:59:42:5c:7d:43:34:
         e0:31:cb:2b:06:cb:f6:7c:a2:c8:45:8f:17:df:36:bd:6b:b4:
         a6:c3:79:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6cKadR1SiWRy1TiFxB3EsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx
ZGU1OWIwHhcNMjYwNjA2MDkwMDM1WhcNMjYwNjA3MDkwMDM1WjAzMTEwLwYDVQQD
Eyg1NWQ0YzRmYjY2OTE5NGViOTRkZjRhMzJkMTYyMGNiYzJmNGJkZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBuzv/SHTVzzOGsVJB9EfkFWFGe0
3sy39RPZ0BJf1O8kp5EgbLcZZz7V5Cohm6tRt7UVnj2tZE95Up45B+wVuRBAWneS
PQeg6FlBiKH+5G3P0Q9Do2LnXGjVOBHrbLSaB8md4OKYoHn4+a7S/BogER+L+IjG
efDiGcWDvLIncd29MS9NsYU4IWqCTGxWRnnRgbCec6p5Y8G1NccFtTXRbFWPOO7/
VKkdo8MCmy885qg2BBddr8lyMOEf7GeWGDejErhATLPa+wEeF3yTw0zh9MFCPEqq
dg5gt94/zL+9RtzTjIplw/5X6AI0YxoxKEjYqgD0cLEcujc7MgYwRz2aywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXUxPtmkZTrlN9KMtFiDLwvS90hMB8GA1UdIwQY
MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt
ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj
LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPh3wati
2mY1yHXhMdwcFKPX2eyL6FdWqdgTcpkt4KgFv/AlzOwD7rUJ3OzyE+jS84uljcLs
NDra5iqFAQnb2LcvZLlQpQKEcueZsOSJcHP3X7gDysK+Bz+OjTWHGAIFUC733fup
WLqlr949K51ZEG6b3WryUbyINV/syjQEHqDFDU0GtYioWtaH8giu+Ep1WWZMHf4n
NwKtnl6k5wfIH+zWJw3/fPT9TbQZPRep6vGD+ZqtWqdJ1RIrYBEMMdvjk4dBWsjN
Xwccw8yb7Xxfj1IdRoAvXKy28GbX3134rXS7tttlWUJcfUM04DHLKwbL9nyiyEWP
F982vWu0psN5Vg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 18:07:05 2026 by rpki-client