Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          Ngjc2/e9MDabC1Tzcet+6YRjDO1v+dumkLLhOGPPrwg=
Subject key identifier:   11:43:24:D8:D4:3D:18:B5:ED:1D:48:00:89:87:08:CE:68:E3:76:AC
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       01A0CEC81382E7DA5EA0D8E9FD0B4B26B989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          1A75
Signing time:             Wed 23 Sep 2026 15:00:13 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:13 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:13 +0000
Files and hashes:         1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
                          2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
                          3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
                          4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: 5fhS+PMdRiQIxd01ExF15d6H/iOuP7HCMuwT0dOH+GY=)
                          5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
                          6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
                          7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
                          8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:13:82:e7:da:5e:a0:d8:e9:fd:0b:4b:26:b9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Sep 23 15:00:13 2026 GMT
            Not After : Sep 24 15:00:13 2026 GMT
        Subject: CN=114324d8d43d18b5ed1d4800898708ce68e376ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:06:5b:11:f4:bb:61:48:98:b4:37:69:58:
                    dc:bf:df:de:10:b5:fe:15:d9:65:bf:bb:14:53:97:
                    06:11:a6:c3:a9:4a:8d:ea:53:55:21:15:e1:36:0e:
                    56:51:a1:91:dd:e4:12:ef:3e:04:19:34:77:8b:e4:
                    eb:c5:35:e4:05:33:00:bd:aa:4b:1c:fc:98:c3:91:
                    4d:b1:a6:6a:4d:bf:c5:da:3e:a9:0e:67:42:c3:69:
                    2c:97:d8:18:74:6e:5f:72:07:67:a7:40:45:59:14:
                    69:f2:91:f7:7b:d1:06:13:91:f3:e1:fb:7f:67:01:
                    6f:3e:8f:c7:37:9b:4f:86:88:93:09:c7:1e:aa:76:
                    36:9e:90:22:48:a8:74:d4:23:17:7c:92:76:a9:a4:
                    eb:2f:67:f0:c0:2b:fb:39:d1:5c:7a:25:cd:af:86:
                    41:7c:b4:2a:b4:30:b8:14:f2:0f:5c:8d:7d:3c:57:
                    4d:55:ed:c2:3a:22:fa:de:67:a3:45:f3:e4:0c:50:
                    2e:b0:c7:7f:c1:7f:96:c4:d3:cc:b9:a7:02:f2:56:
                    87:d1:7e:96:7d:25:30:d3:a5:75:4d:2c:de:23:78:
                    fb:c1:a0:be:51:97:b7:c9:b0:36:09:5a:79:42:03:
                    40:8f:7f:7b:ba:c6:58:5e:e6:7b:1b:bd:14:f1:2e:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:43:24:D8:D4:3D:18:B5:ED:1D:48:00:89:87:08:CE:68:E3:76:AC
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:90:22:1d:7e:79:32:65:e0:49:2f:14:5c:13:a4:d6:25:8c:
         91:73:d7:18:97:ae:17:e8:81:cb:04:2e:c7:f1:0f:3f:35:88:
         1b:ac:11:41:8e:16:67:3c:7e:44:6c:1a:fa:f0:93:a9:7e:f0:
         5d:37:49:a5:ee:ed:3b:f9:2f:bc:0c:52:2e:67:c4:02:f5:b8:
         1c:89:58:65:1e:93:83:b8:2f:0f:e7:96:7b:76:d4:36:33:78:
         85:06:42:48:4e:27:d3:7f:7e:ef:e6:3f:cd:19:b5:d6:d2:85:
         ff:47:36:fb:45:f7:9b:12:a4:7a:a6:76:91:66:66:ee:45:53:
         37:22:71:67:1f:72:60:15:f1:82:06:da:bd:b9:46:35:37:53:
         b1:5c:08:93:75:f3:b5:63:da:4d:ca:73:1f:c0:03:f7:fb:e8:
         df:62:f4:e1:85:77:cd:9d:3f:34:f0:cc:6e:20:25:39:5a:d2:
         13:67:35:99:74:97:c5:68:f0:9b:cb:b4:49:12:59:f2:73:fd:
         ab:1f:65:ec:73:1d:00:d9:38:ac:6f:70:6b:30:97:77:9d:1e:
         03:80:c9:89:e6:a9:1d:13:46:7f:aa:47:5f:11:39:7e:c5:6c:
         a6:2e:1f:2a:4d:4a:e2:7c:fd:b3:98:03:e4:2f:17:54:f1:7a:
         50:a0:5e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyBOC59peoNjp/QtLJrmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjYwOTIzMTUwMDEzWhcNMjYwOTI0MTUwMDEzWjAzMTEwLwYDVQQD
EygxMTQzMjRkOGQ0M2QxOGI1ZWQxZDQ4MDA4OTg3MDhjZTY4ZTM3NmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJMGWxH0u2FImLQ3aVjcv9/eELX+
Fdllv7sUU5cGEabDqUqN6lNVIRXhNg5WUaGR3eQS7z4EGTR3i+TrxTXkBTMAvapL
HPyYw5FNsaZqTb/F2j6pDmdCw2ksl9gYdG5fcgdnp0BFWRRp8pH3e9EGE5Hz4ft/
ZwFvPo/HN5tPhoiTCcceqnY2npAiSKh01CMXfJJ2qaTrL2fwwCv7OdFceiXNr4ZB
fLQqtDC4FPIPXI19PFdNVe3COiL63mejRfPkDFAusMd/wX+WxNPMuacC8laH0X6W
fSUw06V1TSzeI3j7waC+UZe3ybA2CVp5QgNAj397usZYXuZ7G70U8S75PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFDJNjUPRi17R1IAImHCM5o43asMB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpAiHX55
MmXgSS8UXBOk1iWMkXPXGJeuF+iBywQux/EPPzWIG6wRQY4WZzx+RGwa+vCTqX7w
XTdJpe7tO/kvvAxSLmfEAvW4HIlYZR6Tg7gvD+eWe3bUNjN4hQZCSE4n039+7+Y/
zRm11tKF/0c2+0X3mxKkeqZ2kWZm7kVTNyJxZx9yYBXxggbavblGNTdTsVwIk3Xz
tWPaTcpzH8AD9/vo32L04YV3zZ0/NPDMbiAlOVrSE2c1mXSXxWjwm8u0SRJZ8nP9
qx9l7HMdANk4rG9wazCXd50eA4DJieapHRNGf6pHXxE5fsVspi4fKk1K4nz9s5gD
5C8XVPF6UKBejA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:38:12 2026 by rpki-client