Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File:                     YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier:          1+nt6cm1HRaX3kZvKrrmfCKtKLmb2LMnyx4hc67sq9M=
Subject key identifier:   2D:8F:62:03:19:67:0B:BC:19:51:1C:E4:21:15:78:52:81:85:BB:8B
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer:       /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial:       01A002B89E0402EEE33A738EF153928DD5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number:          14C5
Signing time:             Sat 15 Aug 2026 00:00:48 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:48 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:48 +0000
Files and hashes:         1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
                          2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: MxJqVe/3d57kAmVrdrrx3IysmS7cGlpcZiyFw1J9B5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:9e:04:02:ee:e3:3a:73:8e:f1:53:92:8d:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
        Validity
            Not Before: Aug 15 00:00:48 2026 GMT
            Not After : Aug 16 00:00:48 2026 GMT
        Subject: CN=2d8f620319670bbc19511ce4211578528185bb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:f1:0b:6f:1e:89:65:b6:fe:55:fd:08:22:
                    72:2c:36:2e:8a:c5:a5:42:01:d0:b1:eb:47:06:10:
                    cc:c3:4b:1d:9f:71:99:e6:48:a4:bc:ff:97:f4:47:
                    3b:37:81:49:62:e1:43:a9:c7:62:fa:aa:55:da:15:
                    dd:02:98:92:55:e2:ef:d4:1b:fb:7d:a1:65:12:69:
                    26:76:0d:93:24:01:14:6b:b6:10:5a:ad:5d:1b:a1:
                    70:7e:64:ba:e9:bc:c7:88:ab:04:f2:29:29:be:75:
                    b9:46:b4:e8:a1:e1:20:02:92:26:31:75:47:af:66:
                    29:08:80:1d:4f:e7:4b:1a:ad:77:3b:31:ef:b5:58:
                    28:7d:69:81:28:a3:f2:8a:4f:c9:38:6e:04:5e:5c:
                    fa:d8:0b:45:c1:2e:ad:d4:71:63:95:88:9d:25:53:
                    9a:37:90:a2:2a:43:67:b2:c7:ae:29:8a:8d:dc:d0:
                    24:8d:c5:2c:a2:fb:26:69:d4:37:32:40:6c:e2:f7:
                    1a:65:a6:5b:f2:f1:63:2b:92:f9:54:1e:32:8e:7d:
                    34:b4:da:c7:2c:03:3a:12:42:8b:14:11:cc:fb:83:
                    47:ba:c8:b7:ad:e2:e5:50:6f:e4:ab:85:22:b8:58:
                    6a:fd:1c:89:93:00:61:2a:09:e1:56:50:fe:62:3c:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:62:03:19:67:0B:BC:19:51:1C:E4:21:15:78:52:81:85:BB:8B
            X509v3 Authority Key Identifier:
                keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:f1:15:5e:23:c9:14:42:dc:ca:f1:04:18:68:56:c6:c5:
         69:e6:5f:ef:36:eb:10:5e:d6:6f:bb:03:2f:93:2e:29:f0:64:
         54:94:cd:5d:7b:1a:f3:e6:8e:e5:53:0c:08:d1:33:8b:95:38:
         c7:eb:6a:3d:5c:cf:73:68:05:b7:80:29:92:4b:13:8a:21:37:
         14:58:68:b3:96:51:7b:52:b5:3b:89:a2:c3:ee:c4:88:9a:e4:
         19:ac:98:49:40:1f:bf:e2:57:1c:6d:29:e6:ef:97:62:b3:43:
         b2:7a:6f:70:f8:79:0a:60:88:4f:fe:85:4c:8b:13:79:ad:d6:
         f2:4b:da:4b:31:79:ed:32:34:96:97:bf:33:60:73:53:98:a6:
         12:37:f8:1f:f1:b7:64:bd:e9:e5:37:a4:01:6a:8e:0e:23:4c:
         53:15:db:62:37:93:3b:27:d3:eb:51:dd:3a:4e:c4:3a:15:dd:
         bb:32:90:da:d9:04:ef:98:90:05:5e:52:a1:d9:0d:d4:02:62:
         7a:71:67:ba:af:af:cf:33:09:f0:5b:6e:92:3c:ae:a8:6e:a8:
         ee:5d:b4:0f:68:ef:2a:e0:20:52:17:ff:1c:64:4f:31:e2:ed:
         68:60:e1:4f:00:eb:2a:29:4c:6a:8d:e7:a5:c0:56:24:74:07:
         70:3f:24:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuJ4EAu7jOnOO8VOSjdXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3
MjA3NjIwHhcNMjYwODE1MDAwMDQ4WhcNMjYwODE2MDAwMDQ4WjAzMTEwLwYDVQQD
EygyZDhmNjIwMzE5NjcwYmJjMTk1MTFjZTQyMTE1Nzg1MjgxODViYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRrxC28eiWW2/lX9CCJyLDYuisWl
QgHQsetHBhDMw0sdn3GZ5kikvP+X9Ec7N4FJYuFDqcdi+qpV2hXdApiSVeLv1Bv7
faFlEmkmdg2TJAEUa7YQWq1dG6FwfmS66bzHiKsE8ikpvnW5RrTooeEgApImMXVH
r2YpCIAdT+dLGq13OzHvtVgofWmBKKPyik/JOG4EXlz62AtFwS6t1HFjlYidJVOa
N5CiKkNnsseuKYqN3NAkjcUsovsmadQ3MkBs4vcaZaZb8vFjK5L5VB4yjn00tNrH
LAM6EkKLFBHM+4NHusi3reLlUG/kq4UiuFhq/RyJkwBhKgnhVlD+Yjy/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2PYgMZZwu8GVEc5CEVeFKBhbuLMB8GA1UdIwQY
MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt
N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk
LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme7xFV4j
yRRC3MrxBBhoVsbFaeZf7zbrEF7Wb7sDL5MuKfBkVJTNXXsa8+aO5VMMCNEzi5U4
x+tqPVzPc2gFt4ApkksTiiE3FFhos5ZRe1K1O4miw+7EiJrkGayYSUAfv+JXHG0p
5u+XYrNDsnpvcPh5CmCIT/6FTIsTea3W8kvaSzF57TI0lpe/M2BzU5imEjf4H/G3
ZL3p5TekAWqODiNMUxXbYjeTOyfT61HdOk7EOhXduzKQ2tkE75iQBV5SodkN1AJi
enFnuq+vzzMJ8FtukjyuqG6o7l20D2jvKuAgUhf/HGRPMeLtaGDhTwDrKilMao3n
pcBWJHQHcD8kuw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:46:27 2026 by rpki-client