Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File:                     Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier:          p+SzoeG7q/ofpzVH3l4tSDwgGqeRZU6WscPbKCjRyr8=
Subject key identifier:   18:03:DA:9C:46:E3:E8:F8:57:BA:FA:0B:D0:88:20:4C:E0:A2:C8:71
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer:       /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial:       019E1CB530801FD3E2FFC6ACC0021800F806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number:          12AE
Signing time:             Tue 12 May 2026 15:01:36 +0000
Manifest this update:     Tue 12 May 2026 15:01:36 +0000
Manifest next update:     Wed 13 May 2026 15:01:36 +0000
Files and hashes:         1: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
                          2: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
                          3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=)
                          4: 6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa (hash: O0/6hTUPh/pNhMmPBODmIvQuruNGiAl8r721VcN/XzQ=)
                          5: 7DZoDX2VEwfm_hyJlp8Qo3lr0ac.roa (hash: d671EV+8befUt7H9mtE7TvXmuS59ieHNf29NMiVD7IQ=)
                          6: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
                          7: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=)
                          8: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
                          9: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
                          10: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
                          11: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
                          12: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
                          13: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
                          14: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
                          15: PP1tFuKDSWKU3uys7bPZgHmO32Y.roa (hash: ch0uWTewbG9M0McTdfxSKidScKLRv9p9iinr/2CaifY=)
                          16: RbjX86fcOMSY4QFLKDJwZ2qTveo.roa (hash: N6VxatQ/mIA8OoimGHGJtwJB+iRV96F3haafY4KxDvg=)
                          17: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
                          18: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
                          19: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
                          20: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
                          21: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
                          22: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
                          23: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: 1vS+0n4bEPMgbe8t+M/lyT9YdjW6zfJEjjjxcmtNfH4=)
                          24: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
                          25: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=)
                          26: lhGLvLH4B6mU8DcXwixTXo1UR58.roa (hash: exoOVM6vAsRIgRre7TsOkDPf3aLYJlM+uBmeSFMVO5g=)
                          27: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
                          28: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
                          29: s5heQ19LizKGGfMDqK5Iq5EUCS8.roa (hash: 3YsMiK/Tzw6pZesf/Yk4bL7YB+iCygnfpI53A+Wi7eo=)
                          30: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
                          31: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
                          32: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
                          33: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
                          34: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
                          35: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:30:80:1f:d3:e2:ff:c6:ac:c0:02:18:00:f8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
        Validity
            Not Before: May 12 15:01:36 2026 GMT
            Not After : May 13 15:01:36 2026 GMT
        Subject: CN=1803da9c46e3e8f857bafa0bd088204ce0a2c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:c5:66:65:1d:1a:97:87:c0:8b:aa:31:b4:
                    7a:5c:f4:df:10:15:11:1d:53:b3:f2:65:5b:70:3b:
                    c1:95:82:84:3b:51:38:95:86:3e:f8:6c:47:25:95:
                    b9:c3:5d:57:13:bd:2d:a0:4f:e6:cb:f1:4d:6f:64:
                    e7:5e:3b:89:b7:27:bb:29:71:cb:4b:fd:b3:77:a2:
                    4c:2c:e7:b5:95:4e:fa:3a:d0:1b:94:3a:6d:e4:88:
                    fe:f5:f8:a7:f3:04:7e:d6:ca:a1:f7:d5:ac:5a:b0:
                    5f:c9:f1:d4:ab:66:2c:5c:b9:12:2d:0e:f6:ce:25:
                    73:67:3a:80:aa:87:e2:00:71:d0:0b:2d:c0:22:0d:
                    49:1d:83:e3:5f:32:c4:9c:c7:ca:ae:ea:95:06:56:
                    42:0a:5a:d2:fb:83:37:3c:96:c8:42:4e:01:ea:17:
                    3c:71:d3:b4:8a:c2:23:f6:75:a7:f6:10:10:df:64:
                    44:c0:b8:64:f7:88:d5:79:f2:db:0b:f9:93:fd:80:
                    fa:1d:2f:95:87:76:06:ca:c1:ef:e2:4e:c6:45:92:
                    df:a0:62:b4:33:b6:e5:bf:35:df:7c:b0:15:dc:8c:
                    ee:b4:8d:dd:0a:19:c9:02:f7:a5:e6:54:9f:ff:48:
                    09:88:30:5c:07:90:76:04:2e:d9:3d:1d:35:5e:4c:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:03:DA:9C:46:E3:E8:F8:57:BA:FA:0B:D0:88:20:4C:E0:A2:C8:71
            X509v3 Authority Key Identifier:
                keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:ce:d1:1b:32:b0:d7:21:72:39:33:bc:6a:11:5b:e4:19:
         62:c3:db:ef:e6:33:f0:a9:3a:91:7a:fe:4b:c6:ce:f5:14:d3:
         f6:8c:3e:60:67:96:62:db:8f:ef:ff:97:ab:8b:1a:02:a9:2c:
         3a:c7:bc:a8:c2:4f:70:48:fa:51:50:4d:ec:0a:e4:39:61:3f:
         2d:a2:ee:54:bc:81:15:85:d5:74:32:78:cc:08:e9:8e:b9:17:
         6c:44:dc:b5:cf:11:54:c5:be:3f:b5:14:ad:80:10:63:9d:62:
         5f:eb:c6:c9:8f:fe:23:52:be:76:ea:43:3a:90:40:f6:ed:c7:
         82:b9:70:ba:55:cd:0a:a5:3b:a4:bc:a7:a0:07:57:c0:1b:4d:
         bf:3a:56:59:11:e5:43:dc:ab:57:3e:fd:be:ff:82:4c:e9:b2:
         0c:00:50:c0:f9:bc:61:ec:2d:ed:52:91:37:85:07:f4:96:28:
         df:c5:24:a6:b8:67:8b:35:f2:1d:b7:e6:db:ab:f9:9d:5c:50:
         d6:c3:bd:1d:1a:f1:9b:2d:68:18:ee:9a:ad:3e:9f:cc:a0:19:
         c2:29:e3:7f:5d:28:44:2d:d3:20:77:1b:e3:27:d7:e8:1a:e9:
         b8:8d:86:bf:77:f7:6b:69:bf:fc:ea:b6:b0:9f:8d:f9:f1:65:
         48:69:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:48:28 2026 by rpki-client