Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          zTWW6TtHAMwCaSNYgU4a3G4wGeI7HDX1qw+kXkXvnFU=
Subject key identifier:   51:5B:3E:04:9A:1E:DC:74:90:DE:A1:1E:CB:9B:EC:BB:A4:57:3F:3C
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       019E8F1341BA2E653EB252B2A0C82022B0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          09B8
Signing time:             Wed 03 Jun 2026 20:01:04 +0000
Manifest this update:     Wed 03 Jun 2026 20:01:04 +0000
Manifest next update:     Thu 04 Jun 2026 20:01:04 +0000
Files and hashes:         1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
                          2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: JnMhv1k6cIgWwH8d509tVuacIQKzHDa3Kfgr48cBYoQ=)
                          3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:13:41:ba:2e:65:3e:b2:52:b2:a0:c8:20:22:b0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Jun  3 20:01:04 2026 GMT
            Not After : Jun  4 20:01:04 2026 GMT
        Subject: CN=515b3e049a1edc7490dea11ecb9becbba4573f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:a2:12:c7:77:49:9c:31:fe:ff:0b:6a:15:
                    ad:d8:5d:01:fc:36:14:e6:00:ff:35:ea:4d:35:e6:
                    19:e2:5b:36:52:1d:e6:0b:df:62:cb:46:4f:59:f1:
                    e7:40:00:78:ce:30:66:bd:20:c2:2a:5a:ca:db:28:
                    47:b9:77:ea:bd:27:43:f3:7b:79:46:a8:47:47:29:
                    4a:43:fc:b8:30:a7:b5:ca:d1:d6:38:25:d7:75:85:
                    a8:6f:98:c7:e3:3a:55:2d:5c:41:47:12:ef:46:4a:
                    6c:c4:df:c0:4b:2d:b8:4c:13:1f:bd:53:6c:09:07:
                    dc:95:b0:a3:00:fb:c4:29:fb:92:05:cc:a6:9e:e5:
                    02:71:4b:2c:ee:2f:b6:93:06:92:94:0d:ec:43:36:
                    a4:f5:0c:d5:0d:8d:74:68:32:ff:31:6d:9a:db:f6:
                    b5:53:69:46:b5:0d:af:ee:9e:8b:d9:19:a8:c1:aa:
                    56:98:89:9b:84:6d:50:d5:e4:67:98:ca:da:c6:f4:
                    e0:62:e1:49:e4:d1:51:87:87:38:b6:24:a7:f0:4d:
                    63:85:49:d7:8b:b2:06:3f:fa:f9:5a:2e:af:bd:91:
                    e2:e4:e9:d8:40:bc:4c:9d:56:ec:62:b0:52:62:db:
                    01:92:a2:6b:80:d9:91:5f:77:87:af:4b:c4:76:b7:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:3E:04:9A:1E:DC:74:90:DE:A1:1E:CB:9B:EC:BB:A4:57:3F:3C
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:c7:b6:e8:d8:7c:f8:6e:02:8b:e6:2b:0c:35:3a:31:94:
         14:b3:00:12:2b:28:00:62:d4:e9:c5:ec:41:a4:da:4d:31:5a:
         02:91:0b:dd:20:05:1e:8e:15:06:f1:06:5a:fb:72:4e:80:90:
         fe:21:e6:bc:17:31:10:3a:48:6d:6d:39:59:56:83:a9:7a:8e:
         55:3f:a5:12:df:7d:7e:27:52:1c:51:fb:78:ab:49:63:0a:5a:
         11:84:b9:ea:3f:b6:da:58:00:f3:0f:7a:df:62:03:fe:79:88:
         16:d2:18:6a:ea:06:7f:6c:32:8f:8b:96:13:ad:aa:24:7b:89:
         bf:f8:bd:c5:9f:33:84:f2:6a:5e:8e:07:89:7e:00:06:03:27:
         e3:a6:cc:81:66:c0:56:f7:33:23:f7:8f:31:f1:aa:3c:8e:fc:
         dd:14:4c:c5:c3:51:20:0e:58:22:b4:84:51:59:3e:bf:b8:78:
         45:ed:dd:05:8f:eb:8e:8e:47:47:60:85:30:e7:8a:34:08:aa:
         8c:80:1c:68:5c:bb:a2:c8:4f:7a:84:34:ce:f2:7b:fa:6b:c4:
         95:e3:5c:a9:c5:1f:08:ed:ab:de:7e:43:37:f6:f3:cf:f2:ae:
         44:40:bb:69:aa:a6:84:59:2a:f2:53:04:e5:33:29:90:c4:42:
         21:f1:f6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6PE0G6LmU+slKyoMggIrD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4
ZTYxZTUwHhcNMjYwNjAzMjAwMTA0WhcNMjYwNjA0MjAwMTA0WjAzMTEwLwYDVQQD
Eyg1MTViM2UwNDlhMWVkYzc0OTBkZWExMWVjYjliZWNiYmE0NTczZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOGiEsd3SZwx/v8LahWt2F0B/DYU
5gD/NepNNeYZ4ls2Uh3mC99iy0ZPWfHnQAB4zjBmvSDCKlrK2yhHuXfqvSdD83t5
RqhHRylKQ/y4MKe1ytHWOCXXdYWob5jH4zpVLVxBRxLvRkpsxN/ASy24TBMfvVNs
CQfclbCjAPvEKfuSBcymnuUCcUss7i+2kwaSlA3sQzak9QzVDY10aDL/MW2a2/a1
U2lGtQ2v7p6L2RmowapWmImbhG1Q1eRnmMraxvTgYuFJ5NFRh4c4tiSn8E1jhUnX
i7IGP/r5Wi6vvZHi5OnYQLxMnVbsYrBSYtsBkqJrgNmRX3eHr0vEdre5HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFbPgSaHtx0kN6hHsub7LukVz88MB8GA1UdIwQY
MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt
ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz
LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQzHtujY
fPhuAovmKww1OjGUFLMAEisoAGLU6cXsQaTaTTFaApEL3SAFHo4VBvEGWvtyToCQ
/iHmvBcxEDpIbW05WVaDqXqOVT+lEt99fidSHFH7eKtJYwpaEYS56j+22lgA8w96
32ID/nmIFtIYauoGf2wyj4uWE62qJHuJv/i9xZ8zhPJqXo4HiX4ABgMn46bMgWbA
VvczI/ePMfGqPI783RRMxcNRIA5YIrSEUVk+v7h4Re3dBY/rjo5HR2CFMOeKNAiq
jIAcaFy7oshPeoQ0zvJ7+mvEleNcqcUfCO2r3n5DN/bzz/KuREC7aaqmhFkq8lME
5TMpkMRCIfH2Pw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 04:19:35 2026 by rpki-client