Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File:                     yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier:          w0ibli4zc4Vvb+LBcAdUWlZycfu7BXfgzWqToq/6Jeo=
Subject key identifier:   3B:71:F6:12:B6:34:8A:DB:08:69:6A:6B:3C:21:F7:2A:04:5D:61:93
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer:       /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial:       019EE443B0447A3528F39BCDEC7ABFD06200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number:          09E9
Signing time:             Sat 20 Jun 2026 09:01:41 +0000
Manifest this update:     Sat 20 Jun 2026 09:01:41 +0000
Manifest next update:     Sun 21 Jun 2026 09:01:41 +0000
Files and hashes:         1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
                          2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: 2YXGm0K+0mqnJjYQT2daBG3vcrcF68ritm/xdduFRS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e4:43:b0:44:7a:35:28:f3:9b:cd:ec:7a:bf:d0:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
        Validity
            Not Before: Jun 20 09:01:41 2026 GMT
            Not After : Jun 21 09:01:41 2026 GMT
        Subject: CN=3b71f612b6348adb08696a6b3c21f72a045d6193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:1f:b0:53:80:2e:19:13:c4:1e:52:9f:74:
                    69:88:38:c2:5c:af:ed:4d:ed:45:47:9e:05:75:5d:
                    48:5e:76:62:c9:7d:60:04:30:31:38:7e:a8:2e:be:
                    d3:36:db:8c:7f:21:83:ea:b8:28:3f:23:e9:d1:ad:
                    97:34:3a:c3:35:7e:03:db:24:36:12:2b:42:37:a1:
                    9f:77:1a:df:df:df:30:b4:a5:f2:ff:2c:e1:63:9f:
                    4b:87:61:a6:86:91:ed:19:c7:06:6e:7e:c1:76:d4:
                    4c:ef:4f:39:40:87:93:2d:66:b8:9f:f7:ef:ec:81:
                    77:39:c7:67:e4:7d:2d:e5:36:6b:45:81:40:ae:52:
                    8a:36:ca:d4:e9:74:62:b3:0f:e7:be:be:2f:fb:dc:
                    e2:75:ab:37:66:fa:27:e0:1d:f6:b2:ac:ad:dd:aa:
                    a3:1b:1b:e9:03:62:ba:c1:0f:34:7d:67:e1:1e:79:
                    53:3d:e7:62:94:6f:73:e3:77:45:04:36:82:35:64:
                    d8:da:0f:81:99:5e:e7:17:17:9f:f6:33:de:fd:4f:
                    e7:4e:e4:de:9d:c6:26:d7:51:e0:a7:76:43:b3:30:
                    55:b1:33:80:78:32:6b:86:a8:dc:d8:06:7a:64:fe:
                    53:51:fe:48:6c:35:a2:3f:f8:39:b8:4f:42:56:21:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:71:F6:12:B6:34:8A:DB:08:69:6A:6B:3C:21:F7:2A:04:5D:61:93
            X509v3 Authority Key Identifier:
                keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:5e:9f:a8:41:66:18:2f:94:2d:85:af:37:fd:62:5f:70:
         da:6d:37:ab:64:76:99:a3:d1:3d:88:8c:ba:d9:10:79:7f:ce:
         89:ee:29:c8:12:44:5a:02:8d:cf:35:02:ad:27:7d:0b:01:3f:
         26:cc:e2:d3:e6:11:c0:d8:4e:0a:d1:16:cd:ec:1d:b3:1c:14:
         1b:e2:9c:9d:66:5e:ef:2a:69:4c:2a:ef:06:57:c5:43:f8:0f:
         05:98:35:07:7d:f9:16:a5:fd:63:12:19:a4:12:c3:bd:a6:16:
         18:1e:aa:08:ac:0f:91:29:e9:f4:e2:f3:43:17:d1:a2:41:9d:
         a3:12:8b:e3:b7:56:0f:13:67:86:f1:bb:df:f4:5b:22:0b:60:
         51:c4:24:11:f4:69:27:07:4d:26:10:ec:71:f0:da:e2:59:b9:
         76:40:5f:39:d0:3f:0c:42:04:d5:81:db:5b:7c:78:77:a5:ee:
         11:d8:00:1d:e0:5a:75:3f:ee:c9:19:85:05:a9:ac:93:b0:bd:
         56:81:d5:d4:98:0a:33:36:12:41:27:cc:c3:d5:6f:7b:25:51:
         57:cf:39:01:2d:0b:4b:1f:05:cd:1e:44:54:61:0b:b0:f8:54:
         7c:b7:76:01:6c:5f:a4:6c:df:32:e1:2f:7c:42:d3:f0:f7:a2:
         f8:f2:6b:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7kQ7BEejUo85vN7Hq/0GIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy
YThlYWMwHhcNMjYwNjIwMDkwMTQxWhcNMjYwNjIxMDkwMTQxWjAzMTEwLwYDVQQD
EygzYjcxZjYxMmI2MzQ4YWRiMDg2OTZhNmIzYzIxZjcyYTA0NWQ2MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxofsFOALhkTxB5Sn3RpiDjCXK/t
Te1FR54FdV1IXnZiyX1gBDAxOH6oLr7TNtuMfyGD6rgoPyPp0a2XNDrDNX4D2yQ2
EitCN6Gfdxrf398wtKXy/yzhY59Lh2GmhpHtGccGbn7BdtRM7085QIeTLWa4n/fv
7IF3Ocdn5H0t5TZrRYFArlKKNsrU6XRisw/nvr4v+9zidas3Zvon4B32sqyt3aqj
GxvpA2K6wQ80fWfhHnlTPedilG9z43dFBDaCNWTY2g+BmV7nFxef9jPe/U/nTuTe
ncYm11Hgp3ZDszBVsTOAeDJrhqjc2AZ6ZP5TUf5IbDWiP/g5uE9CViEKHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtx9hK2NIrbCGlqazwh9yoEXWGTMB8GA1UdIwQY
MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct
ZjQ4NGRhOGU2N2MzLzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz
LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVclen6hB
ZhgvlC2Frzf9Yl9w2m03q2R2maPRPYiMutkQeX/Oie4pyBJEWgKNzzUCrSd9CwE/
Jszi0+YRwNhOCtEWzewdsxwUG+KcnWZe7yppTCrvBlfFQ/gPBZg1B335FqX9YxIZ
pBLDvaYWGB6qCKwPkSnp9OLzQxfRokGdoxKL47dWDxNnhvG73/RbIgtgUcQkEfRp
JwdNJhDscfDa4lm5dkBfOdA/DEIE1YHbW3x4d6XuEdgAHeBadT/uyRmFBamsk7C9
VoHV1JgKMzYSQSfMw9VveyVRV885AS0LSx8FzR5EVGELsPhUfLd2AWxfpGzfMuEv
fELT8Pei+PJrIg==
-----END CERTIFICATE-----
Generated at Sat Jun 20 12:02:22 2026 by rpki-client