Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File:                     Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier:          uV6eOuZ/hI6qa1N80cowXZlAXHcDV72LvCOHdwBefuM=
Subject key identifier:   5E:B2:3A:0E:52:09:8E:37:99:A7:E5:4A:1B:B7:B2:E2:EC:88:D7:3A
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer:       /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial:       01A0CB904849876F06F27E34B2E7683758F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number:          141B
Signing time:             Wed 23 Sep 2026 00:00:25 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:25 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:25 +0000
Files and hashes:         1: 1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa (hash: 4EkSHJe3HHgvn/GmwogeggDvlFUsX8hwMgws3SiRAfs=)
                          2: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
                          3: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
                          4: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
                          5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
                          6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
                          7: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
                          8: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
                          9: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
                          10: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
                          11: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
                          12: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
                          13: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
                          14: Q3xAijESeYdlTPBRNmpFnCp3SeM.roa (hash: YwvuP8Q0rR+0UvPl0hG/coqtl5YgB8mhSubSAs1dCWg=)
                          15: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
                          16: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
                          17: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
                          18: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
                          19: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
                          20: X39u8-9nKBEShz-NMa6JOcIhFuQ.roa (hash: YQ/B8p3fFHa4y5b+f+S7RWE/AGybnxVLW5r+tC2DXw8=)
                          21: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
                          22: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
                          23: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: SYiO12m/82yrrbUbapYcepaVnHRLPzKCUgMIX3jIyFs=)
                          24: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
                          25: gXToFCTUuvuYMIEdmvS6O56XgPo.roa (hash: pR1vScVxKAcrSeb8XWNSFRHsHQo7yVXqwsICeVIj3hg=)
                          26: jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa (hash: WEJrQ+xJek+2Absm0J+C3VpL2xmTd9FmmDu0jKWpyi0=)
                          27: kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa (hash: sS02QxMncCoHPvN+ZDUnzYl7QCBel0tw7QHGIiNuats=)
                          28: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
                          29: oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa (hash: I1u3TRoo6Y+BB7n1CDMuA9kawRp5ZHIK/39fhQ2i9Yo=)
                          30: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
                          31: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
                          32: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
                          33: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
                          34: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
                          35: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
                          36: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:48:49:87:6f:06:f2:7e:34:b2:e7:68:37:58:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
        Validity
            Not Before: Sep 23 00:00:25 2026 GMT
            Not After : Sep 24 00:00:25 2026 GMT
        Subject: CN=5eb23a0e52098e3799a7e54a1bb7b2e2ec88d73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:2f:7d:12:47:33:a4:56:e1:98:7a:cb:49:
                    89:65:f9:1e:2f:eb:ce:bc:b8:5a:54:65:8f:57:7f:
                    ca:8c:2a:fa:73:62:af:95:52:d4:fe:fb:87:5c:6b:
                    e4:16:6f:4a:16:fd:ae:40:07:32:0c:dd:24:40:51:
                    4b:5b:d0:90:a9:a3:05:bc:c8:8c:04:a0:7d:93:81:
                    56:80:ae:88:8c:f9:36:5a:ce:45:ce:e2:2a:0f:f4:
                    95:3e:2a:9c:08:77:aa:d2:16:68:ff:a3:d3:54:f7:
                    45:50:ce:80:e4:4d:18:b3:02:57:2e:d1:32:0d:a2:
                    a7:03:39:28:f9:0b:8f:4a:6c:4f:84:72:3a:f0:68:
                    81:51:64:f2:21:16:12:f0:82:9d:d8:ae:5a:38:17:
                    b7:eb:e0:5a:ea:de:77:e7:e8:21:7b:c9:78:52:98:
                    0d:18:03:3b:a4:11:99:13:ad:51:52:f0:5b:48:ad:
                    7a:ca:c3:91:03:2c:2a:45:ea:c2:f1:52:03:2c:0c:
                    a7:8a:3f:ff:68:f1:0e:99:84:d6:0d:b1:22:da:5e:
                    57:13:e7:57:ca:ec:ea:61:17:41:f5:4c:91:19:f1:
                    7c:7f:44:00:c0:e7:fb:78:a3:d0:65:73:94:ed:37:
                    2b:8e:06:c9:02:fb:30:e1:6c:ff:37:5f:8b:ef:7f:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B2:3A:0E:52:09:8E:37:99:A7:E5:4A:1B:B7:B2:E2:EC:88:D7:3A
            X509v3 Authority Key Identifier:
                keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:65:35:25:c6:04:81:3d:3c:4d:38:26:ef:c3:ac:cd:90:03:
         e0:7b:7e:5e:97:35:0a:1f:18:28:c2:8d:19:44:04:2d:25:a8:
         a8:dd:46:ce:3c:f9:1a:16:be:e2:db:16:9b:a7:95:f5:80:e3:
         92:9f:16:6a:76:6e:eb:48:43:10:cc:67:07:f4:2d:05:30:56:
         44:01:41:d0:92:18:2b:5b:70:d8:c1:41:56:68:85:10:7b:67:
         c3:8c:e2:a2:4f:15:0c:aa:03:97:2b:5a:f1:92:5b:16:d7:1b:
         16:05:7f:70:eb:51:86:b5:10:0c:c4:13:d2:a9:f2:a8:db:9c:
         f9:9b:1e:04:34:45:22:32:73:b0:46:76:38:1e:a8:70:5e:1c:
         b9:25:6e:73:0c:c5:9c:08:95:85:84:c7:77:c1:60:f3:ee:49:
         b4:a6:3e:24:d2:3c:96:cc:7d:f2:2c:63:a1:1a:e3:71:47:74:
         cf:6f:a3:5f:25:9b:7b:73:86:1e:e8:ae:0f:33:0f:fb:30:64:
         1e:fe:61:95:7d:e4:80:dc:cb:c7:07:76:20:69:72:a4:77:a0:
         d4:da:cb:cc:4a:87:81:37:ab:b4:cb:2f:a0:04:03:b7:18:40:
         51:f4:89:28:47:f6:28:c0:9b:9d:28:2b:80:00:90:e9:34:d0:
         b8:66:ea:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkEhJh28G8n40sudoN1jwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwOTIzMDAwMDI1WhcNMjYwOTI0MDAwMDI1WjAzMTEwLwYDVQQD
Eyg1ZWIyM2EwZTUyMDk4ZTM3OTlhN2U1NGExYmI3YjJlMmVjODhkNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy8vfRJHM6RW4Zh6y0mJZfkeL+vO
vLhaVGWPV3/KjCr6c2KvlVLU/vuHXGvkFm9KFv2uQAcyDN0kQFFLW9CQqaMFvMiM
BKB9k4FWgK6IjPk2Ws5FzuIqD/SVPiqcCHeq0hZo/6PTVPdFUM6A5E0YswJXLtEy
DaKnAzko+QuPSmxPhHI68GiBUWTyIRYS8IKd2K5aOBe36+Ba6t535+ghe8l4UpgN
GAM7pBGZE61RUvBbSK16ysORAywqRerC8VIDLAynij//aPEOmYTWDbEi2l5XE+dX
yuzqYRdB9UyRGfF8f0QAwOf7eKPQZXOU7TcrjgbJAvsw4Wz/N1+L73/O7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6yOg5SCY43maflShu3suLsiNc6MB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWU1JcYE
gT08TTgm78OszZAD4Ht+Xpc1Ch8YKMKNGUQELSWoqN1Gzjz5Gha+4tsWm6eV9YDj
kp8WanZu60hDEMxnB/QtBTBWRAFB0JIYK1tw2MFBVmiFEHtnw4ziok8VDKoDlyta
8ZJbFtcbFgV/cOtRhrUQDMQT0qnyqNuc+ZseBDRFIjJzsEZ2OB6ocF4cuSVucwzF
nAiVhYTHd8Fg8+5JtKY+JNI8lsx98ixjoRrjcUd0z2+jXyWbe3OGHuiuDzMP+zBk
Hv5hlX3kgNzLxwd2IGlypHeg1NrLzEqHgTertMsvoAQDtxhAUfSJKEf2KMCbnSgr
gACQ6TTQuGbqVQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:59:18 2026 by rpki-client