Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File:                     YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier:          FWGwMNqDA816EKXDn5JoDoPxUwC2dz91M1SAiGBqyIs=
Subject key identifier:   88:C5:3B:88:05:DC:8C:3A:32:7E:D0:A3:51:BE:9D:7B:DC:EF:72:48
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer:       /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial:       019E1ED9F318A1C3114BF945BC549537943D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number:          05C5
Signing time:             Wed 13 May 2026 01:01:00 +0000
Manifest this update:     Wed 13 May 2026 01:01:00 +0000
Manifest next update:     Thu 14 May 2026 01:01:00 +0000
Files and hashes:         1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
                          2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: Fq1EQSSIsrA0E3VoV9gDaw3R20A7ojtPYunbB6IlZkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:f3:18:a1:c3:11:4b:f9:45:bc:54:95:37:94:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
        Validity
            Not Before: May 13 01:01:00 2026 GMT
            Not After : May 14 01:01:00 2026 GMT
        Subject: CN=88c53b8805dc8c3a327ed0a351be9d7bdcef7248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:8d:32:82:52:c6:c5:ec:3d:bf:43:c4:c4:
                    61:48:6a:ee:cf:2e:fc:9d:a1:86:65:c2:c6:1b:b0:
                    f9:d9:2f:12:b4:68:3c:20:8f:50:a4:99:0e:72:3d:
                    fa:25:e2:59:a1:a3:71:e3:5c:03:2f:ce:c8:ea:72:
                    a6:e8:60:b5:6e:f1:92:e3:e7:9a:05:7a:5f:fb:5a:
                    bd:74:f9:de:d2:2c:0d:a0:5f:c3:1a:14:55:40:52:
                    1e:0c:21:65:b2:af:f3:11:0d:b2:be:33:e1:a6:b6:
                    fc:d2:68:60:ff:e2:ef:f3:3a:b9:fc:20:41:94:85:
                    b2:39:e3:64:04:56:78:4c:38:c6:c8:b0:76:36:05:
                    ba:d9:3d:6a:03:ba:11:f2:43:20:11:7c:8a:b8:d5:
                    8a:5f:8f:cb:51:f3:76:75:82:2d:6c:40:f9:1c:17:
                    45:ac:88:4a:5f:28:50:74:6b:0b:7c:ef:22:b7:44:
                    00:8e:99:ca:81:79:24:e6:c3:27:76:a5:1a:95:6d:
                    c5:58:90:de:03:fe:5d:44:55:1d:7e:fa:89:83:15:
                    e1:ab:71:5d:26:cb:e9:da:dd:48:32:8a:fe:07:e1:
                    2e:53:d0:85:d2:b5:e8:84:4f:7b:34:ec:3c:84:61:
                    f7:2f:5f:3f:97:ff:a5:90:ba:47:b9:7e:70:ec:fb:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C5:3B:88:05:DC:8C:3A:32:7E:D0:A3:51:BE:9D:7B:DC:EF:72:48
            X509v3 Authority Key Identifier:
                keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:de:de:de:a3:42:d7:a0:25:41:f6:dc:87:af:3d:b3:04:
         a8:db:17:b1:39:e7:c6:53:96:40:d0:fe:82:e8:ac:fa:c9:a0:
         dc:02:d3:c3:bb:3c:c1:f1:db:52:6a:df:4d:4e:d0:73:93:89:
         a7:29:2c:48:18:3a:6d:8b:25:de:b0:1a:ca:6b:81:e8:94:16:
         47:b5:2b:dd:9b:9b:e6:3b:77:11:74:56:1b:f6:78:15:26:a3:
         1c:72:c4:05:d1:bf:74:55:9f:a8:45:a1:b2:e4:6e:84:29:e0:
         68:f6:3e:72:87:dd:f8:d2:02:1d:f7:42:04:d6:6c:07:53:21:
         97:f3:1d:ff:f8:1b:38:21:5e:9b:ef:66:8c:1f:84:4d:31:c6:
         f4:41:9a:d4:62:96:1b:b1:5a:d5:3e:1b:61:9b:a8:8c:4e:e0:
         40:a0:4c:e4:fb:87:4d:ce:c3:1e:2f:22:53:a1:f9:66:17:1e:
         3a:ab:d7:c0:6b:13:e4:2c:b8:8b:92:01:ce:7e:28:77:51:2b:
         26:6c:15:ba:5b:62:01:d0:ee:0a:83:c3:93:24:fb:a2:d2:10:
         21:5d:b6:1b:68:6c:a5:6c:34:6a:e3:46:10:df:14:16:d8:f3:
         f5:e6:c0:55:9b:d4:db:ff:cb:ab:bf:6e:14:0b:e6:ed:f5:bd:
         e5:4d:f4:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2fMYocMRS/lFvFSVN5Q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw
NmFhNmYwHhcNMjYwNTEzMDEwMTAwWhcNMjYwNTE0MDEwMTAwWjAzMTEwLwYDVQQD
Eyg4OGM1M2I4ODA1ZGM4YzNhMzI3ZWQwYTM1MWJlOWQ3YmRjZWY3MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEuNMoJSxsXsPb9DxMRhSGruzy78
naGGZcLGG7D52S8StGg8II9QpJkOcj36JeJZoaNx41wDL87I6nKm6GC1bvGS4+ea
BXpf+1q9dPne0iwNoF/DGhRVQFIeDCFlsq/zEQ2yvjPhprb80mhg/+Lv8zq5/CBB
lIWyOeNkBFZ4TDjGyLB2NgW62T1qA7oR8kMgEXyKuNWKX4/LUfN2dYItbED5HBdF
rIhKXyhQdGsLfO8it0QAjpnKgXkk5sMndqUalW3FWJDeA/5dRFUdfvqJgxXhq3Fd
Jsvp2t1IMor+B+EuU9CF0rXohE97NOw8hGH3L18/l/+lkLpHuX5w7PvgWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjFO4gF3Iw6Mn7Qo1G+nXvc73JIMB8GA1UdIwQY
MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt
ZWYzM2Q4NWE0YTg2LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2
LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif7e3t6j
QtegJUH23IevPbMEqNsXsTnnxlOWQND+guis+smg3ALTw7s8wfHbUmrfTU7Qc5OJ
pyksSBg6bYsl3rAaymuB6JQWR7Ur3Zub5jt3EXRWG/Z4FSajHHLEBdG/dFWfqEWh
suRuhCngaPY+cofd+NICHfdCBNZsB1Mhl/Md//gbOCFem+9mjB+ETTHG9EGa1GKW
G7Fa1T4bYZuojE7gQKBM5PuHTc7DHi8iU6H5ZhceOqvXwGsT5Cy4i5IBzn4od1Er
JmwVultiAdDuCoPDkyT7otIQIV22G2hspWw0auNGEN8UFtjz9ebAVZvU2//Lq79u
FAvm7fW95U30QQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:07:01 2026 by rpki-client