Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File:                     YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier:          RLiJGlVg7VbCm+AUgpdAQyPBt3toeljXCnUHRSliqWw=
Subject key identifier:   70:09:C1:2F:0F:B7:8A:DC:7C:3D:01:EB:EC:8E:FA:78:D9:2D:20:CB
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer:       /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial:       019F92B624F005DCDA8E942D8E61955E5473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number:          11BE
Signing time:             Fri 24 Jul 2026 06:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:38 +0000
Files and hashes:         1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: nsAKgcc2YkLtg3ZcGpbRfTqffTShwVK+OoxdmpqsiTM=)
                          2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:24:f0:05:dc:da:8e:94:2d:8e:61:95:5e:54:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
        Validity
            Not Before: Jul 24 06:00:38 2026 GMT
            Not After : Jul 25 06:00:38 2026 GMT
        Subject: CN=7009c12f0fb78adc7c3d01ebec8efa78d92d20cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:ff:8e:ba:f6:d2:f6:8b:ba:74:e1:9b:64:
                    b6:0a:cc:66:73:f7:b9:06:eb:85:c2:f9:00:04:d0:
                    bc:a6:ed:a3:98:e5:0d:95:f2:00:1e:38:1f:df:bb:
                    34:9e:97:ba:89:19:e4:95:fe:0b:66:42:8f:35:44:
                    99:24:6b:b8:4a:cf:a7:ee:31:95:77:de:e7:2a:3f:
                    a4:ec:9f:f1:d6:aa:2c:bf:45:cc:10:3f:e5:8e:be:
                    5c:1e:49:1b:43:59:24:16:76:59:89:06:3c:39:3a:
                    df:79:44:d0:40:8f:1e:b3:9d:9c:fd:7c:78:dd:be:
                    b4:dd:90:21:17:37:ca:76:49:2a:fa:3e:81:f0:44:
                    40:51:76:4e:40:d7:59:7c:27:cb:c6:e5:10:f0:a9:
                    4b:b5:fb:4c:2d:5b:1a:83:e0:d0:c7:5e:c6:a3:c9:
                    26:35:e8:59:e1:20:47:dc:a2:05:6f:a9:67:d1:bb:
                    be:13:ea:e6:0d:63:9a:fa:28:8e:5a:03:60:eb:c6:
                    bf:e6:dc:36:99:6a:cc:f2:5e:10:99:4d:37:10:b5:
                    ee:c1:e3:c4:27:2c:44:bb:eb:88:7f:a7:52:49:a2:
                    13:ca:5b:47:7f:1a:6a:42:6e:c9:51:35:d3:6b:05:
                    77:80:c2:72:b3:1f:4f:c4:09:08:60:46:4d:fd:fd:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:C1:2F:0F:B7:8A:DC:7C:3D:01:EB:EC:8E:FA:78:D9:2D:20:CB
            X509v3 Authority Key Identifier:
                keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:90:86:0c:38:93:ae:35:87:38:49:f7:aa:65:37:36:2b:
         c7:5b:b5:e2:b4:01:b3:09:b8:ff:f7:1c:56:08:54:83:b9:19:
         93:b6:bd:c5:ae:98:8d:04:ca:28:cc:3b:6f:44:59:d8:e0:08:
         16:90:8d:f3:ae:86:0e:24:5b:21:d5:26:3c:b2:ad:ac:0b:28:
         99:aa:e7:df:01:4a:12:a4:bf:cf:d0:ce:9f:4c:3e:64:82:d1:
         09:5e:46:89:28:36:4e:b1:5f:c0:99:0b:9f:f0:04:51:3d:50:
         b6:e6:b6:eb:1a:6e:0c:58:f8:e9:e7:40:ed:a0:a6:06:88:2f:
         23:9c:ff:19:42:51:5e:93:ff:8a:86:40:23:b2:9b:dd:c5:0f:
         da:e4:22:96:2a:9c:e5:66:ee:02:c8:8e:b6:5b:45:cb:78:5e:
         a8:6a:e8:dd:d0:d3:4d:67:7f:de:19:8d:cb:10:58:07:9f:ff:
         42:2c:86:c2:e1:0b:c8:f3:f1:32:26:b4:a0:9a:ad:21:f6:fa:
         a0:8d:7b:95:9d:c8:12:ad:d0:3c:7b:4a:54:3d:8b:2b:13:05:
         6a:31:7a:29:39:91:fb:17:7b:0b:8a:0f:6a:71:57:5c:46:a1:
         1e:0d:01:d5:db:93:91:fe:2d:09:8e:06:c5:25:3a:04:d5:f9:
         35:22:db:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StiTwBdzajpQtjmGVXlRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz
MmJjNDQwHhcNMjYwNzI0MDYwMDM4WhcNMjYwNzI1MDYwMDM4WjAzMTEwLwYDVQQD
Eyg3MDA5YzEyZjBmYjc4YWRjN2MzZDAxZWJlYzhlZmE3OGQ5MmQyMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xj/jrr20vaLunThm2S2Csxmc/e5
BuuFwvkABNC8pu2jmOUNlfIAHjgf37s0npe6iRnklf4LZkKPNUSZJGu4Ss+n7jGV
d97nKj+k7J/x1qosv0XMED/ljr5cHkkbQ1kkFnZZiQY8OTrfeUTQQI8es52c/Xx4
3b603ZAhFzfKdkkq+j6B8ERAUXZOQNdZfCfLxuUQ8KlLtftMLVsag+DQx17Go8km
NehZ4SBH3KIFb6ln0bu+E+rmDWOa+iiOWgNg68a/5tw2mWrM8l4QmU03ELXuwePE
JyxEu+uIf6dSSaITyltHfxpqQm7JUTXTawV3gMJysx9PxAkIYEZN/f0baQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAJwS8Pt4rcfD0B6+yO+njZLSDLMB8GA1UdIwQY
MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt
OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh
LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRuQhgw4
k641hzhJ96plNzYrx1u14rQBswm4//ccVghUg7kZk7a9xa6YjQTKKMw7b0RZ2OAI
FpCN866GDiRbIdUmPLKtrAsomarn3wFKEqS/z9DOn0w+ZILRCV5GiSg2TrFfwJkL
n/AEUT1Qtua26xpuDFj46edA7aCmBogvI5z/GUJRXpP/ioZAI7Kb3cUP2uQiliqc
5WbuAsiOtltFy3heqGro3dDTTWd/3hmNyxBYB5//QiyGwuELyPPxMia0oJqtIfb6
oI17lZ3IEq3QPHtKVD2LKxMFajF6KTmR+xd7C4oPanFXXEahHg0B1duTkf4tCY4G
xSU6BNX5NSLbiA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:02 2026 by rpki-client