Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          rnqinxCYuNMqb+LTyvVgJpoad2x654sbTQZfFeVMGC0=
Subject key identifier:   E2:46:D3:BE:88:AB:26:D3:B9:60:1E:1F:62:75:60:EE:59:47:D3:3B
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       019F93243DAF51C0A836A1132EDAD0F170A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          15D8
Signing time:             Fri 24 Jul 2026 08:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:53 +0000
Files and hashes:         1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: 2X08pMtqWkoyHmRIWkjg2UQ6FBuuXLmi4z+y4F+Q9Ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:3d:af:51:c0:a8:36:a1:13:2e:da:d0:f1:70:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Jul 24 08:00:53 2026 GMT
            Not After : Jul 25 08:00:53 2026 GMT
        Subject: CN=e246d3be88ab26d3b9601e1f627560ee5947d33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:06:a3:ff:21:62:ee:07:31:80:e7:03:66:
                    bd:d8:cc:4e:1e:59:f0:a3:2c:ad:fb:ba:eb:da:e6:
                    c4:62:76:cf:c1:78:56:5b:13:62:3d:89:93:17:3e:
                    a5:ce:22:7a:a3:a7:11:87:ae:65:03:96:1c:83:f0:
                    9f:ba:19:6a:dc:bf:d2:38:63:78:8e:5f:ce:cb:4c:
                    57:9e:81:42:f9:40:69:ba:c1:27:cb:42:c4:05:5b:
                    82:72:1f:81:33:d6:d1:01:6b:cb:dd:d5:9b:49:fb:
                    dc:73:8c:f5:d0:33:23:7e:f9:72:08:e5:ba:08:01:
                    51:2e:38:ce:5a:17:82:4a:68:4c:06:aa:22:c0:f3:
                    f5:70:8e:d0:8d:99:38:2a:95:12:5d:0d:2d:d6:bc:
                    5a:54:a3:97:85:3f:08:75:b2:96:29:19:03:3a:dd:
                    3b:24:3e:b4:73:0d:14:ca:ca:4a:c0:01:98:cf:f0:
                    26:c5:89:04:c4:8b:1a:99:4e:70:b0:59:84:f9:e5:
                    8a:80:7b:ba:67:de:0b:bb:34:9a:d3:98:d2:89:f2:
                    fc:e9:a8:6e:22:0b:59:9c:e7:a5:ed:96:e1:10:3b:
                    d6:70:88:d4:4e:da:2c:8c:bf:85:b8:7b:61:c0:75:
                    e8:ef:ca:d4:92:21:a5:ce:26:39:3d:37:82:a1:18:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:D3:BE:88:AB:26:D3:B9:60:1E:1F:62:75:60:EE:59:47:D3:3B
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ff:c6:0b:f5:70:a0:6c:e6:31:0d:78:44:3d:20:a6:7f:f7:
         c6:49:c6:45:70:75:66:5d:b2:69:2c:ad:ac:6e:ec:e9:f1:14:
         82:f4:3e:21:a9:69:06:cd:3e:e9:52:24:72:5e:d8:60:60:df:
         2c:3a:b4:85:27:07:4d:f4:b8:e9:50:5e:e6:f1:14:6b:ac:6c:
         08:eb:8d:47:9e:2b:ef:1a:12:6f:b5:af:b7:05:0c:04:a2:1e:
         2d:c8:31:11:8b:08:02:44:21:ff:6d:4a:7f:fd:81:50:f8:3b:
         64:b0:fb:a2:9d:ba:60:0c:b9:d9:de:e9:0e:8e:cd:d2:f5:ad:
         e6:ba:b9:62:50:6a:58:46:91:eb:0e:a7:83:9b:57:36:47:24:
         94:be:d5:ce:27:31:77:4a:e3:67:9c:3b:08:fe:27:8d:2e:26:
         fd:6a:d8:e5:1d:b9:99:df:6c:40:35:44:4b:f4:2d:3e:7e:ca:
         c3:9c:19:94:6e:7a:b6:fe:1e:27:1a:7d:a6:62:bd:40:b9:87:
         75:f6:32:a3:a1:3c:ad:35:8d:70:ce:0a:c9:b3:14:af:d0:18:
         33:c7:e3:d8:b8:c7:1f:e1:14:aa:ad:a2:2d:2f:c8:8d:6e:8b:
         03:b8:f9:d0:5b:78:f6:35:17:96:4f:40:3f:4e:ed:62:7e:c7:
         7c:56:23:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJD2vUcCoNqETLtrQ8XCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjYwNzI0MDgwMDUzWhcNMjYwNzI1MDgwMDUzWjAzMTEwLwYDVQQD
EyhlMjQ2ZDNiZTg4YWIyNmQzYjk2MDFlMWY2Mjc1NjBlZTU5NDdkMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+YGo/8hYu4HMYDnA2a92MxOHlnw
oyyt+7rr2ubEYnbPwXhWWxNiPYmTFz6lziJ6o6cRh65lA5Ycg/Cfuhlq3L/SOGN4
jl/Oy0xXnoFC+UBpusEny0LEBVuCch+BM9bRAWvL3dWbSfvcc4z10DMjfvlyCOW6
CAFRLjjOWheCSmhMBqoiwPP1cI7QjZk4KpUSXQ0t1rxaVKOXhT8IdbKWKRkDOt07
JD60cw0UyspKwAGYz/AmxYkExIsamU5wsFmE+eWKgHu6Z94LuzSa05jSifL86ahu
IgtZnOel7ZbhEDvWcIjUTtosjL+FuHthwHXo78rUkiGlziY5PTeCoRioUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJG076IqybTuWAeH2J1YO5ZR9M7MB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv/GC/Vw
oGzmMQ14RD0gpn/3xknGRXB1Zl2yaSytrG7s6fEUgvQ+IalpBs0+6VIkcl7YYGDf
LDq0hScHTfS46VBe5vEUa6xsCOuNR54r7xoSb7WvtwUMBKIeLcgxEYsIAkQh/21K
f/2BUPg7ZLD7op26YAy52d7pDo7N0vWt5rq5YlBqWEaR6w6ng5tXNkcklL7Vzicx
d0rjZ5w7CP4njS4m/WrY5R25md9sQDVES/QtPn7Kw5wZlG56tv4eJxp9pmK9QLmH
dfYyo6E8rTWNcM4KybMUr9AYM8fj2LjHH+EUqq2iLS/IjW6LA7j50Ft49jUXlk9A
P07tYn7HfFYjEQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:02 2026 by rpki-client