Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File:                     ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier:          zGEXqUDLuqWGuHDZn7Xxl0wqdhOlzrZlBcTFvu9LU/M=
Subject key identifier:   56:81:21:5E:AD:3B:0F:71:81:28:04:68:7F:F2:03:0A:1E:23:C5:B4
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer:       /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial:       019F10E4F0E8E99C6DB24D6AC76755285D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number:          199C
Signing time:             Mon 29 Jun 2026 01:01:07 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:07 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:07 +0000
Files and hashes:         1: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=)
                          2: 8Id6sTHdcFkfUCqRJpjnYeFNQBk.roa (hash: HvMiexrvTWxUOohCCadA9QpvUikgt3I/EHl1Snej7o4=)
                          3: v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa (hash: R4mBNHuUDg1/Cm7AUx43PJr/9fmdUhHVc5FWE7aFrnc=)
                          4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: ALMpIZHdVxt//ePsGLgeDjx3P8+zmXakxLuSYgWsfLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:f0:e8:e9:9c:6d:b2:4d:6a:c7:67:55:28:5d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
        Validity
            Not Before: Jun 29 01:01:07 2026 GMT
            Not After : Jun 30 01:01:07 2026 GMT
        Subject: CN=5681215ead3b0f71812804687ff2030a1e23c5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:e4:16:59:9a:3f:50:69:0c:d4:cb:88:fe:
                    a6:8c:91:76:7e:e8:c6:ba:73:e6:e4:9f:1c:df:a0:
                    21:8f:8e:25:b9:7d:a8:34:d4:22:6a:db:7a:22:56:
                    c6:78:0f:ac:98:3d:d2:af:dc:8d:42:db:ad:13:ab:
                    cb:94:09:e4:6e:80:8e:bd:66:03:2a:6c:6b:d7:ab:
                    63:d5:ad:a5:2c:ec:f3:f9:88:2e:87:31:a6:6b:de:
                    95:5e:77:f6:bd:63:42:d0:a3:82:1c:04:27:ca:5a:
                    10:5e:36:4a:58:01:c2:0f:41:57:5b:07:32:89:dc:
                    f8:b9:86:ba:84:0f:96:0d:95:0d:47:18:69:5f:7d:
                    36:98:87:09:77:d3:eb:3d:38:34:d7:33:5e:fc:72:
                    ce:36:e0:d0:eb:f0:19:81:69:eb:cd:b4:7a:1b:97:
                    6c:da:7f:db:36:e7:50:98:d7:fd:67:27:05:75:c1:
                    1b:f9:bf:d6:f5:c0:26:1d:32:eb:2a:75:14:3e:3f:
                    b8:b0:fe:86:80:b7:97:6c:5e:80:32:d2:04:cb:c1:
                    64:28:34:ce:28:96:a4:9b:8b:02:84:62:9d:19:c5:
                    83:17:62:85:d7:9c:5c:1f:9f:45:24:35:e3:3b:18:
                    b4:b6:1d:1d:f4:00:63:11:29:b8:14:75:33:ac:48:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:81:21:5E:AD:3B:0F:71:81:28:04:68:7F:F2:03:0A:1E:23:C5:B4
            X509v3 Authority Key Identifier:
                keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:50:a4:87:ba:7a:18:9f:6e:a0:e1:34:f8:86:c1:ce:c7:6f:
         b6:c0:59:18:e0:9e:ea:87:76:8d:11:e3:f6:53:c9:60:19:56:
         49:6d:2c:04:39:26:21:21:7b:9e:d8:b3:e2:3e:63:19:91:70:
         59:4a:cb:a9:6d:16:8b:a9:d0:5d:35:b6:b9:56:38:2c:a0:ea:
         15:bd:8c:7c:a8:0f:7f:57:96:b3:2c:3f:b3:f4:87:26:a5:ed:
         73:7a:05:47:93:1f:2f:cd:1c:4e:cd:11:79:e8:de:43:85:9e:
         8e:81:8e:73:95:3e:6b:6f:49:b1:af:1a:15:0f:f8:bb:4f:34:
         96:af:35:65:3c:c4:a9:0a:ee:5f:f5:c8:7f:c6:d5:7c:1a:31:
         a5:f4:f9:e4:58:6f:62:ab:09:31:3d:16:14:cb:0f:6a:3a:c8:
         e0:48:c0:e5:cd:f6:08:fa:27:fb:f3:67:27:36:02:94:dd:3b:
         51:72:ec:9d:51:fc:95:67:86:a1:41:a2:f2:56:7b:b9:7b:98:
         70:73:62:8d:1d:9c:de:af:eb:70:23:1a:6c:fd:4a:90:a4:2a:
         b7:4f:40:ac:a4:77:c9:d9:97:7a:df:9d:0c:60:af:ed:54:86:
         ef:db:0a:c7:c4:b8:b2:3f:32:41:53:79:f2:04:5a:e2:8c:cf:
         bf:c6:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:55 2026 by rpki-client