Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          JdpxPbds5NmU7h+gA+03psD51VO0QgoXIsBnXjY46gI=
Subject key identifier:   4F:04:A6:69:66:3F:8F:CA:A4:90:07:81:C1:5F:C6:51:12:AA:40:DF
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       01A0CD47B61E7098D5765C0088CA387FC59A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          1625
Signing time:             Wed 23 Sep 2026 08:00:23 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:23 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:23 +0000
Files and hashes:         1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
                          2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
                          3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
                          4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
                          5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
                          6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: 6b2zD5dwfIm3Twk4bRXon4VztndeT36jbHd3TC6jRUc=)
                          7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
                          8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
                          9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:b6:1e:70:98:d5:76:5c:00:88:ca:38:7f:c5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Sep 23 08:00:23 2026 GMT
            Not After : Sep 24 08:00:23 2026 GMT
        Subject: CN=4f04a669663f8fcaa4900781c15fc65112aa40df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b3:0d:79:a0:63:57:f2:29:64:45:a3:ab:01:
                    7b:07:e7:52:06:1c:15:04:14:fb:23:c0:7f:1f:67:
                    98:9f:ab:db:9e:b9:83:81:6b:5b:0c:ee:93:cd:64:
                    af:55:08:47:2d:7f:5e:ad:db:63:d0:c0:a4:d6:d4:
                    6f:4f:dc:8c:94:75:7b:21:c0:7d:e2:b2:f8:db:f4:
                    c0:37:f4:69:c7:b0:4a:dd:5a:ce:4b:13:44:55:60:
                    64:bd:b8:36:75:40:4e:7b:04:05:72:9d:3b:23:3a:
                    6e:9c:af:3c:36:41:a4:88:27:3f:81:1d:b7:f0:7c:
                    f6:4b:87:df:dc:2b:27:73:25:c4:3d:ae:05:8d:f4:
                    87:cf:fa:5d:c0:7f:50:40:11:c5:33:18:f1:90:f9:
                    af:21:cc:93:7c:7d:4c:cf:53:2f:08:92:33:4b:2c:
                    e2:12:d9:85:ea:51:9f:01:3e:37:2b:94:2e:c6:fd:
                    67:98:c8:32:56:f8:ea:4f:41:78:9c:e9:fc:66:de:
                    db:32:70:6a:1c:d6:29:96:80:84:b5:cf:6e:c2:57:
                    85:4f:ce:41:c5:b1:01:68:87:d5:fa:66:28:db:e7:
                    e2:c1:37:f3:eb:74:af:1e:aa:e8:51:ea:12:eb:4c:
                    85:17:ab:ac:8e:f3:27:e9:f7:ba:ae:a7:cb:18:7f:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:A6:69:66:3F:8F:CA:A4:90:07:81:C1:5F:C6:51:12:AA:40:DF
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:24:f5:59:e1:ec:4d:fa:28:bf:17:97:ab:d8:2c:c3:9c:c0:
         2d:28:31:e3:ae:e5:06:0a:60:dc:92:b3:dc:9e:7d:66:67:a1:
         93:8e:4e:e2:9b:08:19:ea:90:b3:26:9b:80:87:31:ed:76:af:
         00:57:9c:c0:76:5b:ee:71:0c:98:fe:dd:de:f0:41:4e:44:55:
         00:3e:b4:c7:62:12:57:cc:65:2a:b5:64:93:11:c3:18:fd:d2:
         72:0d:d8:f2:d5:14:34:f5:97:d5:db:89:d7:00:cd:f4:0c:3f:
         6d:0a:66:38:79:6e:61:c5:98:62:65:43:ae:a7:d7:ff:0e:1f:
         94:3d:32:2a:4b:e9:9d:2f:7f:31:22:c7:66:f9:57:f8:49:b9:
         e9:68:fd:21:15:82:3c:e4:d8:1d:0c:1a:ab:e2:2e:28:b4:08:
         bf:97:a0:ac:72:c2:82:54:63:0e:17:7b:49:6b:f6:88:09:90:
         2a:65:a5:44:c2:2c:d8:9f:21:5f:d2:cb:e1:af:5d:47:86:bb:
         19:6f:eb:27:f5:45:3a:11:3f:a1:bf:51:2c:8e:dd:cf:50:3c:
         fe:35:8a:cb:ef:d5:34:73:89:40:9a:3c:64:d3:f2:49:2f:68:
         71:49:f9:16:ed:9d:e4:87:5e:a4:78:2f:fa:e2:fe:76:90:f6:
         ba:ba:6e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNR7YecJjVdlwAiMo4f8WaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjYwOTIzMDgwMDIzWhcNMjYwOTI0MDgwMDIzWjAzMTEwLwYDVQQD
Eyg0ZjA0YTY2OTY2M2Y4ZmNhYTQ5MDA3ODFjMTVmYzY1MTEyYWE0MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bMNeaBjV/IpZEWjqwF7B+dSBhwV
BBT7I8B/H2eYn6vbnrmDgWtbDO6TzWSvVQhHLX9erdtj0MCk1tRvT9yMlHV7IcB9
4rL42/TAN/Rpx7BK3VrOSxNEVWBkvbg2dUBOewQFcp07IzpunK88NkGkiCc/gR23
8Hz2S4ff3CsncyXEPa4FjfSHz/pdwH9QQBHFMxjxkPmvIcyTfH1Mz1MvCJIzSyzi
EtmF6lGfAT43K5Quxv1nmMgyVvjqT0F4nOn8Zt7bMnBqHNYploCEtc9uwleFT85B
xbEBaIfV+mYo2+fiwTfz63SvHqroUeoS60yFF6usjvMn6fe6rqfLGH8eywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8EpmlmP4/KpJAHgcFfxlESqkDfMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkST1WeHs
TfoovxeXq9gsw5zALSgx467lBgpg3JKz3J59Zmehk45O4psIGeqQsyabgIcx7Xav
AFecwHZb7nEMmP7d3vBBTkRVAD60x2ISV8xlKrVkkxHDGP3Scg3Y8tUUNPWX1duJ
1wDN9Aw/bQpmOHluYcWYYmVDrqfX/w4flD0yKkvpnS9/MSLHZvlX+Em56Wj9IRWC
POTYHQwaq+IuKLQIv5egrHLCglRjDhd7SWv2iAmQKmWlRMIs2J8hX9LL4a9dR4a7
GW/rJ/VFOhE/ob9RLI7dz1A8/jWKy+/VNHOJQJo8ZNPySS9ocUn5Fu2d5IdepHgv
+uL+dpD2urpu1w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:08 2026 by rpki-client