Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File:                     ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier:          mkyT+3zIkKOnPamEdDRxUXpR2a1zeLL0hQBiWhOJOpI=
Subject key identifier:   ED:A3:77:14:96:C5:28:DD:5B:7D:59:77:9D:02:7F:1B:67:BB:1C:3F
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer:       /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial:       019EB733900044279FCE0B0C4F37F52749F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 15:01:10 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:10 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:10 +0000
Files and hashes:         1: DDllGy-0gN7gn7wR05GXGFPsqY0.roa (hash: 56XqjX/8wAHrfEweKci5I2st8Uu/z5VPWpGUoclsXrc=)
                          2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: U1ubBi6w3SNs5v3BNtAnl1PEBZTh4zmkRHAbq3FXSWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:90:00:44:27:9f:ce:0b:0c:4f:37:f5:27:49:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
        Validity
            Not Before: Jun 11 15:01:10 2026 GMT
            Not After : Jun 12 15:01:10 2026 GMT
        Subject: CN=eda3771496c528dd5b7d59779d027f1b67bb1c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:ad:d4:31:80:90:1c:5f:71:61:86:07:4f:
                    1c:1b:31:8c:30:96:d7:6f:b1:bb:c4:05:e5:9b:de:
                    73:2b:38:24:ba:9f:0f:4c:33:d1:94:64:c7:15:fc:
                    f6:52:72:c2:ca:af:3d:8f:eb:71:bf:d2:d9:ea:ca:
                    cc:f1:b0:29:cb:b0:8b:76:fc:ab:b7:bd:01:43:5c:
                    8c:ed:6f:41:af:f8:a4:e6:02:6b:5a:41:72:8f:c6:
                    4f:23:02:8e:b6:13:46:5d:bb:aa:36:ab:61:a9:7b:
                    c1:65:20:18:46:55:9b:c7:2c:a7:c2:bb:8d:3d:ee:
                    d4:01:cf:01:64:b8:9a:aa:6e:c8:8d:1d:a8:c1:82:
                    38:fd:6b:59:08:8b:3f:6b:ae:66:c0:15:c8:d3:da:
                    40:b3:15:f3:b9:a5:8a:77:7f:d7:67:46:d0:b3:7a:
                    8e:35:05:5b:1e:9a:59:3d:ab:d7:5f:6a:0a:a3:86:
                    46:94:09:31:e0:a6:8e:35:e4:20:8c:41:05:85:33:
                    63:de:2c:98:cf:c1:b7:f0:39:f7:ed:7d:94:7f:7f:
                    10:77:3d:e4:1b:12:6b:6f:25:66:63:2c:8b:5d:86:
                    d0:3a:13:31:81:9b:f4:94:ce:a7:59:fc:49:a4:55:
                    c1:c7:8e:2c:5a:57:9b:62:75:58:36:b7:32:bb:24:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A3:77:14:96:C5:28:DD:5B:7D:59:77:9D:02:7F:1B:67:BB:1C:3F
            X509v3 Authority Key Identifier:
                keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:60:7a:a1:56:b1:d3:25:f7:46:3c:c1:ff:8b:0b:86:bb:
         db:ec:b8:83:ef:aa:dd:88:ec:df:b2:68:53:d7:4c:df:46:ae:
         b4:7e:39:3a:68:b3:8f:3d:d0:2f:b4:10:a2:d6:25:86:0d:59:
         14:26:ec:ab:28:49:4a:14:16:69:a4:e8:f7:85:71:5d:f1:32:
         d7:da:11:ec:59:86:c5:b5:e5:2b:22:45:c4:06:2f:91:bc:4f:
         71:11:8e:ab:ef:31:95:a3:29:68:98:e3:65:26:45:54:b4:59:
         cf:76:27:8e:c9:cb:50:63:ad:9e:49:73:92:c2:d8:8d:11:e0:
         ae:62:19:13:d5:b0:77:43:e2:1f:29:63:4c:af:48:37:c5:66:
         da:6a:66:7f:ef:98:17:1c:9c:ad:91:23:4f:63:1c:18:9e:84:
         10:0b:02:3b:4b:b1:6f:1c:df:52:3f:f4:55:f2:7f:a8:92:4f:
         01:80:f8:c0:89:3c:07:3e:15:9a:bc:46:27:26:18:fb:44:a1:
         9c:db:0b:ef:d3:ce:35:8d:72:cf:04:6c:85:91:ed:fb:2c:ce:
         7a:d1:e2:66:cf:f2:50:e5:d8:48:76:4f:2d:1e:08:9d:da:33:
         24:5b:ad:77:43:e3:78:2b:b5:87:25:17:3d:40:a7:e2:36:78:
         a2:b0:46:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63M5AARCefzgsMTzf1J0n0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZGM3NGUxMDgzMDQyMWQ0ZWVlYTk4MjQ0Y2ZkMWI0MTE5
MDM3ZmYwHhcNMjYwNjExMTUwMTEwWhcNMjYwNjEyMTUwMTEwWjAzMTEwLwYDVQQD
EyhlZGEzNzcxNDk2YzUyOGRkNWI3ZDU5Nzc5ZDAyN2YxYjY3YmIxYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA006t1DGAkBxfcWGGB08cGzGMMJbX
b7G7xAXlm95zKzgkup8PTDPRlGTHFfz2UnLCyq89j+txv9LZ6srM8bApy7CLdvyr
t70BQ1yM7W9Br/ik5gJrWkFyj8ZPIwKOthNGXbuqNqthqXvBZSAYRlWbxyynwruN
Pe7UAc8BZLiaqm7IjR2owYI4/WtZCIs/a65mwBXI09pAsxXzuaWKd3/XZ0bQs3qO
NQVbHppZPavXX2oKo4ZGlAkx4KaONeQgjEEFhTNj3iyYz8G38Dn37X2Uf38Qdz3k
GxJrbyVmYyyLXYbQOhMxgZv0lM6nWfxJpFXBx44sWlebYnVYNrcyuyTGewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2jdxSWxSjdW31Zd50Cfxtnuxw/MB8GA1UdIwQY
MBaAFMrcdOEIMEIdTu6pgkTP0bQRkDf/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzIt
N2ViNGMwODg1OTBmLzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzItN2ViNGMwODg1OTBm
LzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYpgeqFW
sdMl90Y8wf+LC4a72+y4g++q3Yjs37JoU9dM30autH45Omizjz3QL7QQotYlhg1Z
FCbsqyhJShQWaaTo94VxXfEy19oR7FmGxbXlKyJFxAYvkbxPcRGOq+8xlaMpaJjj
ZSZFVLRZz3YnjsnLUGOtnklzksLYjRHgrmIZE9Wwd0PiHyljTK9IN8Vm2mpmf++Y
FxycrZEjT2McGJ6EEAsCO0uxbxzfUj/0VfJ/qJJPAYD4wIk8Bz4VmrxGJyYY+0Sh
nNsL79PONY1yzwRshZHt+yzOetHiZs/yUOXYSHZPLR4IndozJFutd0PjeCu1hyUX
PUCn4jZ4orBGeg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:37:17 2026 by rpki-client