Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File:                     1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier:          AAMcQa7IwEHziS9EDeG/d1x3xVSvj46pMKA6mobT76Y=
Subject key identifier:   67:45:EF:D0:F8:93:FE:9C:41:2A:85:47:0D:9D:C1:CF:C8:1B:46:87
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer:       /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial:       019F190D30986FCE1A8CBEFECD121463E75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number:          198B
Signing time:             Tue 30 Jun 2026 15:02:02 +0000
Manifest this update:     Tue 30 Jun 2026 15:02:02 +0000
Manifest next update:     Wed 01 Jul 2026 15:02:02 +0000
Files and hashes:         1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: TBV+fWHiqcgoaZyjdfDvB0Iwvb262868aEdu52rGm7s=)
                          2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:30:98:6f:ce:1a:8c:be:fe:cd:12:14:63:e7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
        Validity
            Not Before: Jun 30 15:02:02 2026 GMT
            Not After : Jul  1 15:02:02 2026 GMT
        Subject: CN=6745efd0f893fe9c412a85470d9dc1cfc81b4687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:63:61:99:5b:c7:74:ae:a2:0d:88:40:2a:
                    c2:76:06:74:2e:df:2e:9e:1a:ab:a0:51:9f:ec:6f:
                    ae:1e:52:75:4c:44:2a:cb:15:ab:bd:a1:4b:7d:05:
                    7a:aa:74:74:4a:23:c9:fd:82:d8:0b:87:bf:77:fc:
                    57:26:56:94:7a:05:1a:4e:74:ed:a8:01:af:de:1f:
                    9c:10:d5:4f:8f:ba:1c:19:44:5c:32:fa:6c:40:26:
                    55:a8:a3:68:0f:a0:47:83:27:11:93:5d:4b:ac:26:
                    d4:34:9d:ff:b9:4c:ca:bf:4f:64:30:98:39:12:28:
                    40:be:ae:fe:47:33:13:5f:82:80:7a:08:23:a3:31:
                    96:0b:28:bf:ab:6d:2b:35:aa:b3:98:3d:91:a3:77:
                    aa:8d:99:a0:98:00:74:09:fe:e9:71:59:b8:31:dd:
                    d3:d0:77:1b:d4:0f:00:62:ad:da:0e:36:8c:29:7d:
                    5b:0d:75:c4:fb:c3:0a:58:8f:19:b7:18:24:ba:ac:
                    b5:29:51:9b:51:8e:d4:0c:93:8c:9a:9f:9b:4a:8a:
                    78:d5:b2:29:b6:4b:4a:55:16:5b:77:36:b5:64:56:
                    dd:66:e4:3b:1b:38:fa:b0:fe:03:fc:81:24:b6:9d:
                    18:2f:c4:52:57:21:48:2e:f0:9f:d7:28:a0:c4:6a:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:45:EF:D0:F8:93:FE:9C:41:2A:85:47:0D:9D:C1:CF:C8:1B:46:87
            X509v3 Authority Key Identifier:
                keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:2c:a0:46:76:35:77:7f:d7:dc:cc:08:cc:13:ff:54:cd:
         07:5f:16:bd:c8:2b:dd:a1:e0:7c:14:00:6c:53:a8:66:47:87:
         0e:01:a0:25:f9:34:9a:13:b8:53:dd:62:0f:20:e3:11:87:ee:
         75:74:8e:35:25:e2:45:9b:a8:93:84:46:6b:f3:97:35:66:65:
         0d:c4:35:41:f5:89:89:58:01:92:a8:50:2a:19:7a:82:cd:1e:
         72:0f:1c:ea:01:f6:ad:02:31:ee:86:07:90:78:01:2b:ea:46:
         e7:eb:e4:c3:03:9a:d7:45:19:3c:13:9c:a7:e3:d0:71:eb:92:
         87:ee:e1:22:ec:fb:c4:a6:26:69:4c:84:80:7f:92:fc:d2:18:
         ed:f7:6a:7b:fb:77:aa:13:a4:be:ff:ac:14:73:fe:9d:a8:11:
         75:d1:b5:7e:73:1e:2b:99:61:ab:3b:b8:42:44:d0:bf:5f:3a:
         cd:c0:64:6f:be:1c:5b:fb:94:7b:0b:6a:f2:41:51:5e:cc:53:
         fc:8e:1b:f3:9a:c5:d5:3e:26:fc:8b:a8:56:b7:ef:d8:b6:23:
         c2:50:81:c0:ad:ec:3f:b1:32:ba:f9:e5:b3:90:b2:e9:de:69:
         ab:98:ed:b6:4e:9a:9f:8d:12:bb:61:b9:f5:ad:86:a7:c2:1e:
         a8:2d:aa:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDTCYb84ajL7+zRIUY+dfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4
NGJkZjcwHhcNMjYwNjMwMTUwMjAyWhcNMjYwNzAxMTUwMjAyWjAzMTEwLwYDVQQD
Eyg2NzQ1ZWZkMGY4OTNmZTljNDEyYTg1NDcwZDlkYzFjZmM4MWI0Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/djYZlbx3Suog2IQCrCdgZ0Lt8u
nhqroFGf7G+uHlJ1TEQqyxWrvaFLfQV6qnR0SiPJ/YLYC4e/d/xXJlaUegUaTnTt
qAGv3h+cENVPj7ocGURcMvpsQCZVqKNoD6BHgycRk11LrCbUNJ3/uUzKv09kMJg5
EihAvq7+RzMTX4KAeggjozGWCyi/q20rNaqzmD2Ro3eqjZmgmAB0Cf7pcVm4Md3T
0Hcb1A8AYq3aDjaMKX1bDXXE+8MKWI8Ztxgkuqy1KVGbUY7UDJOMmp+bSop41bIp
tktKVRZbdza1ZFbdZuQ7Gzj6sP4D/IEktp0YL8RSVyFILvCf1yigxGoLiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdF79D4k/6cQSqFRw2dwc/IG0aHMB8GA1UdIwQY
MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt
MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw
LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCksoEZ2
NXd/19zMCMwT/1TNB18Wvcgr3aHgfBQAbFOoZkeHDgGgJfk0mhO4U91iDyDjEYfu
dXSONSXiRZuok4RGa/OXNWZlDcQ1QfWJiVgBkqhQKhl6gs0ecg8c6gH2rQIx7oYH
kHgBK+pG5+vkwwOa10UZPBOcp+PQceuSh+7hIuz7xKYmaUyEgH+S/NIY7fdqe/t3
qhOkvv+sFHP+nagRddG1fnMeK5lhqzu4QkTQv186zcBkb74cW/uUewtq8kFRXsxT
/I4b85rF1T4m/IuoVrfv2LYjwlCBwK3sP7Eyuvnls5Cy6d5pq5jttk6an40Su2G5
9a2Gp8IeqC2qkw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:01 2026 by rpki-client