Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File:                     ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier:          tRX5cipZX6xDj5Bl1gHuGPnSbb3ktgbsmZJQZ9hkcDE=
Subject key identifier:   B9:9B:38:C9:CC:B2:42:3F:B2:75:20:75:7C:16:36:C8:70:68:80:96
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer:       /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial:       019F148A53607F0FA25C8344859F4D3406EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number:          0B97
Signing time:             Mon 29 Jun 2026 18:00:37 +0000
Manifest this update:     Mon 29 Jun 2026 18:00:37 +0000
Manifest next update:     Tue 30 Jun 2026 18:00:37 +0000
Files and hashes:         1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
                          2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
                          3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: U8E4oMRkFInHMPAKe4GN86ZMXMpQaiQ/e3ZOvkXIxYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:8a:53:60:7f:0f:a2:5c:83:44:85:9f:4d:34:06:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
        Validity
            Not Before: Jun 29 18:00:37 2026 GMT
            Not After : Jun 30 18:00:37 2026 GMT
        Subject: CN=b99b38c9ccb2423fb27520757c1636c870688096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:86:90:94:38:68:e7:77:6b:77:69:65:5b:
                    18:88:be:d3:07:41:2b:51:85:ef:8d:a0:e2:70:22:
                    b3:f3:5f:25:2c:7b:f2:b5:98:f8:ee:4a:9b:fc:22:
                    16:9c:15:59:e8:54:6d:28:e6:3c:a5:57:e6:ea:21:
                    22:18:bf:97:cc:cf:fb:32:8e:eb:fd:47:84:6d:94:
                    bb:0f:85:92:24:fe:31:95:a7:c6:a1:0c:1b:59:4c:
                    38:dd:05:22:75:7b:76:0b:38:1d:9d:a7:b9:16:fb:
                    c9:92:ea:52:b8:ea:c9:e2:24:26:ed:02:32:03:2e:
                    e7:56:07:57:ef:83:37:89:65:59:76:d7:9d:77:c4:
                    8b:98:23:30:1b:41:fe:25:41:02:bb:3e:a5:ce:78:
                    49:00:f4:de:e6:3b:bc:c9:87:24:e1:7b:1a:c6:da:
                    18:3e:0e:a9:9c:4e:b3:52:4d:69:a0:b8:75:c3:86:
                    35:77:23:88:38:46:69:8c:a2:eb:c0:f2:2a:5f:14:
                    d3:c2:4a:10:66:54:54:07:36:3d:1e:0b:81:53:33:
                    6c:f7:b4:a8:d7:c7:42:5a:f7:28:37:69:8d:ff:37:
                    ae:cf:95:6d:4b:40:32:46:f0:24:e4:c2:4b:50:48:
                    54:9a:34:f5:07:03:d3:b2:46:8f:41:06:06:2c:40:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:38:C9:CC:B2:42:3F:B2:75:20:75:7C:16:36:C8:70:68:80:96
            X509v3 Authority Key Identifier:
                keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:14:c6:89:63:fb:57:15:18:b1:aa:7e:44:c3:84:d6:71:22:
         22:bd:0a:de:05:ad:78:54:b6:9d:f5:df:b5:de:87:45:2d:e5:
         1e:dd:e3:46:9e:5d:d3:58:af:13:c9:7d:28:7a:1f:b0:f2:2b:
         1e:ec:5c:8c:f7:bf:60:a7:ea:ec:77:ab:3d:ea:cc:93:13:ec:
         09:d3:4b:d7:40:fd:78:9c:46:66:e0:35:5c:bc:c8:99:cb:44:
         c2:a9:f4:f1:d6:50:b0:a5:19:ac:56:ef:46:63:a6:5a:e7:b9:
         b5:d7:63:75:86:44:c0:a0:5a:64:05:d8:dc:8a:40:a0:6a:5a:
         fc:a3:59:d5:0a:c1:e1:9e:f4:a8:3c:01:51:ee:c0:b7:d8:7a:
         ff:98:0c:ba:3c:d8:47:ea:69:2f:4d:b4:0a:15:58:25:c4:da:
         8b:a1:f4:7f:90:00:e9:f8:23:a1:15:d6:d9:e3:e8:5f:b5:90:
         09:6d:6e:8c:df:3f:bc:1c:29:73:60:e5:5d:26:e6:41:0a:36:
         81:b8:e3:b3:4d:8a:54:76:e2:7b:1a:54:6d:e3:1a:5a:eb:ee:
         08:c9:f8:f1:f7:66:93:bf:43:ce:79:89:aa:5b:bb:0e:27:ed:
         f1:4a:e3:32:b0:3f:20:e0:a4:ba:30:d7:cb:27:52:9f:c7:25:
         87:9a:34:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8UilNgfw+iXINEhZ9NNAbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh
NTU2ZjQwHhcNMjYwNjI5MTgwMDM3WhcNMjYwNjMwMTgwMDM3WjAzMTEwLwYDVQQD
EyhiOTliMzhjOWNjYjI0MjNmYjI3NTIwNzU3YzE2MzZjODcwNjg4MDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO6GkJQ4aOd3a3dpZVsYiL7TB0Er
UYXvjaDicCKz818lLHvytZj47kqb/CIWnBVZ6FRtKOY8pVfm6iEiGL+XzM/7Mo7r
/UeEbZS7D4WSJP4xlafGoQwbWUw43QUidXt2Czgdnae5FvvJkupSuOrJ4iQm7QIy
Ay7nVgdX74M3iWVZdtedd8SLmCMwG0H+JUECuz6lznhJAPTe5ju8yYck4XsaxtoY
Pg6pnE6zUk1poLh1w4Y1dyOIOEZpjKLrwPIqXxTTwkoQZlRUBzY9HguBUzNs97So
18dCWvcoN2mN/zeuz5VtS0AyRvAk5MJLUEhUmjT1BwPTskaPQQYGLECmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmbOMnMskI/snUgdXwWNshwaICWMB8GA1UdIwQY
MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt
NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw
LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxTGiWP7
VxUYsap+RMOE1nEiIr0K3gWteFS2nfXftd6HRS3lHt3jRp5d01ivE8l9KHofsPIr
HuxcjPe/YKfq7HerPerMkxPsCdNL10D9eJxGZuA1XLzImctEwqn08dZQsKUZrFbv
RmOmWue5tddjdYZEwKBaZAXY3IpAoGpa/KNZ1QrB4Z70qDwBUe7At9h6/5gMujzY
R+ppL020ChVYJcTai6H0f5AA6fgjoRXW2ePoX7WQCW1ujN8/vBwpc2DlXSbmQQo2
gbjjs02KVHbiexpUbeMaWuvuCMn48fdmk79DznmJqlu7Dift8UrjMrA/IOCkujDX
yydSn8clh5o0aA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 22:30:06 2026 by rpki-client