Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File:                     YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier:          kZBURGpMvJ6wXEST2JElqiaIEcPfBH50IOHCRqIcet8=
Subject key identifier:   2D:9D:C7:E8:66:13:0C:13:C5:A1:D4:89:52:1A:2B:00:A9:DC:DE:B9
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer:       /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial:       019EB8B4AB574BA9191D3D8BD73D249EF107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number:          18AE
Signing time:             Thu 11 Jun 2026 22:01:48 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:48 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:48 +0000
Files and hashes:         1: 1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa (hash: 8/0JD00W9iNEqIm7TkhD9o/ThL160i8acaV44zkpW3I=)
                          2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: H5u7xLfitGL8MwuVHkEiQUAx3Bf+5nME7lqjKlbFZqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:ab:57:4b:a9:19:1d:3d:8b:d7:3d:24:9e:f1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
        Validity
            Not Before: Jun 11 22:01:48 2026 GMT
            Not After : Jun 12 22:01:48 2026 GMT
        Subject: CN=2d9dc7e866130c13c5a1d489521a2b00a9dcdeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:4b:0e:fd:6d:1e:68:f2:c4:16:ee:c1:40:
                    41:0c:97:b9:b0:bb:c9:ce:d7:db:c4:96:65:76:61:
                    1a:3d:85:54:66:a4:0a:2a:79:a9:f4:8e:9b:18:5d:
                    fc:e3:62:82:60:4b:f2:b4:0e:57:07:29:c2:12:05:
                    f8:6a:77:a9:c5:98:58:e9:eb:74:bc:8e:0f:56:17:
                    11:a0:07:a5:dd:91:96:c0:18:ba:9f:63:fe:9b:7a:
                    18:a7:7d:e7:95:d2:f9:c7:bd:34:b4:4e:d2:49:71:
                    c8:6e:af:41:0c:2c:98:87:bf:0c:20:98:59:1a:6e:
                    76:fc:b5:bf:9b:bd:51:98:a8:e2:1b:46:cd:d6:be:
                    65:6f:de:d3:2f:85:62:43:70:df:06:34:99:fd:fa:
                    7b:7d:d9:31:45:d2:56:a5:14:a0:05:f5:a7:d5:56:
                    fc:bb:47:8c:58:b0:36:dd:5d:fd:4e:ee:c5:ca:d8:
                    86:2f:7b:4c:35:05:2e:c9:84:04:14:24:97:66:a3:
                    59:fd:38:f0:d1:00:ab:d8:85:f4:92:18:1c:b4:74:
                    f1:20:16:88:69:76:71:e7:b4:10:fe:c6:df:13:b0:
                    30:40:c8:b7:1f:17:78:d7:67:f0:d8:5d:3c:c3:d3:
                    bb:e9:2f:e3:b2:56:ca:e0:f3:86:7a:24:ae:a7:da:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:C7:E8:66:13:0C:13:C5:A1:D4:89:52:1A:2B:00:A9:DC:DE:B9
            X509v3 Authority Key Identifier:
                keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b3:0d:63:04:7c:37:a1:d5:01:3c:12:cc:e5:63:c5:fa:fe:
         4b:5f:d7:11:73:31:54:19:40:47:03:d5:6f:2c:db:40:a1:1f:
         d9:ca:1a:ef:ab:73:d2:83:4b:4e:63:2e:fe:e3:ff:a6:10:93:
         6d:c1:2b:21:02:a5:ce:19:a6:04:9e:cf:33:e0:dc:fc:56:da:
         bd:8f:54:c9:38:45:25:f8:ed:3f:cf:09:6f:b9:e3:d1:0d:11:
         40:4c:3a:86:a9:72:ef:00:69:83:55:78:2b:c5:56:b1:c0:48:
         d8:52:44:f6:7c:0b:e0:65:3d:ed:13:66:b2:90:2c:3d:2f:7a:
         e8:c6:84:1f:00:ef:d6:c2:3e:d1:10:a8:98:61:c8:cb:f4:61:
         2d:b9:0c:06:8d:bd:c1:55:11:42:a0:bf:d1:f7:6c:0d:0a:46:
         7c:30:74:31:5b:50:91:84:19:c4:09:ee:3b:da:b4:82:0a:4c:
         a3:1f:a2:59:d3:e1:df:1c:d2:84:aa:3b:30:39:e9:e7:1c:cc:
         7d:e8:2e:fa:0e:9e:71:41:7a:5b:9e:f6:7d:95:87:ce:e7:47:
         49:70:15:d3:f3:1c:96:01:b6:da:7d:81:f6:e0:3f:52:96:03:
         85:4c:fa:e7:00:70:2b:7a:50:e0:e2:90:c5:81:c2:bb:e0:d2:
         56:4b:09:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tKtXS6kZHT2L1z0knvEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm
MjIyOGYwHhcNMjYwNjExMjIwMTQ4WhcNMjYwNjEyMjIwMTQ4WjAzMTEwLwYDVQQD
EygyZDlkYzdlODY2MTMwYzEzYzVhMWQ0ODk1MjFhMmIwMGE5ZGNkZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF9LDv1tHmjyxBbuwUBBDJe5sLvJ
ztfbxJZldmEaPYVUZqQKKnmp9I6bGF3842KCYEvytA5XBynCEgX4anepxZhY6et0
vI4PVhcRoAel3ZGWwBi6n2P+m3oYp33nldL5x700tE7SSXHIbq9BDCyYh78MIJhZ
Gm52/LW/m71RmKjiG0bN1r5lb97TL4ViQ3DfBjSZ/fp7fdkxRdJWpRSgBfWn1Vb8
u0eMWLA23V39Tu7FytiGL3tMNQUuyYQEFCSXZqNZ/Tjw0QCr2IX0khgctHTxIBaI
aXZx57QQ/sbfE7AwQMi3Hxd412fw2F08w9O76S/jslbK4POGeiSup9oPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2dx+hmEwwTxaHUiVIaKwCp3N65MB8GA1UdIwQY
MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt
MmM3ZWY5ZmYwM2Y1LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1
LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbMNYwR8
N6HVATwSzOVjxfr+S1/XEXMxVBlARwPVbyzbQKEf2coa76tz0oNLTmMu/uP/phCT
bcErIQKlzhmmBJ7PM+Dc/FbavY9UyThFJfjtP88Jb7nj0Q0RQEw6hqly7wBpg1V4
K8VWscBI2FJE9nwL4GU97RNmspAsPS966MaEHwDv1sI+0RComGHIy/RhLbkMBo29
wVURQqC/0fdsDQpGfDB0MVtQkYQZxAnuO9q0ggpMox+iWdPh3xzShKo7MDnp5xzM
fegu+g6ecUF6W572fZWHzudHSXAV0/MclgG22n2B9uA/UpYDhUz65wBwK3pQ4OKQ
xYHCu+DSVksJTA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:27:09 2026 by rpki-client