Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File:                     Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier:          cKQYu+GbVimRFhO8SX3UJLEnlILY0cw7FSdhP9riJFs=
Subject key identifier:   69:3D:9B:68:E4:C7:D8:1E:34:3C:B3:1B:13:60:97:99:13:B5:0E:46
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer:       /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial:       01A1DA263EEAD257FEB9DDFE486B585EC33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number:          14AA
Signing time:             Sat 14 Nov 2026 13:01:41 +0000
Manifest this update:     Sat 14 Nov 2026 13:01:41 +0000
Manifest next update:     Sun 15 Nov 2026 13:01:41 +0000
Files and hashes:         1: 1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa (hash: 4EkSHJe3HHgvn/GmwogeggDvlFUsX8hwMgws3SiRAfs=)
                          2: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
                          3: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
                          4: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
                          5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
                          6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
                          7: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
                          8: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
                          9: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
                          10: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
                          11: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
                          12: LDS1YWjD86IXDHwiDyYizlLQQJ0.roa (hash: p58RlPZiCl5HhwC1+r2kH86yb/BlzYcWhfxWQdG7jog=)
                          13: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
                          14: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
                          15: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
                          16: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
                          17: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
                          18: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
                          19: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
                          20: WiMfA99SsOV0pwFy7JsEyWnrdm8.roa (hash: 5NqNzQWytqF+oyfW/l4tHkkMYWiUXHJ7o1g4dGmCkkM=)
                          21: X39u8-9nKBEShz-NMa6JOcIhFuQ.roa (hash: YQ/B8p3fFHa4y5b+f+S7RWE/AGybnxVLW5r+tC2DXw8=)
                          22: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
                          23: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
                          24: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: L1WakaKp2NYqA4EBHYwjNlOWkAoRgOnUxQoAvaj6aKI=)
                          25: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
                          26: gXToFCTUuvuYMIEdmvS6O56XgPo.roa (hash: pR1vScVxKAcrSeb8XWNSFRHsHQo7yVXqwsICeVIj3hg=)
                          27: jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa (hash: WEJrQ+xJek+2Absm0J+C3VpL2xmTd9FmmDu0jKWpyi0=)
                          28: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
                          29: oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa (hash: I1u3TRoo6Y+BB7n1CDMuA9kawRp5ZHIK/39fhQ2i9Yo=)
                          30: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
                          31: trHxVfnichbSHm59zOzfyrvJyAY.roa (hash: 4xymR1Veq6eKricZ81/4LeFEs5UWx7qOZ493cSlDlSE=)
                          32: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
                          33: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
                          34: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
                          35: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
                          36: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
                          37: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:26:3e:ea:d2:57:fe:b9:dd:fe:48:6b:58:5e:c3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
        Validity
            Not Before: Nov 14 13:01:41 2026 GMT
            Not After : Nov 15 13:01:41 2026 GMT
        Subject: CN=693d9b68e4c7d81e343cb31b1360979913b50e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:4a:a8:56:99:f9:41:21:be:90:f5:a9:66:
                    a9:dd:3e:50:24:2a:d1:a1:89:62:ed:81:72:d0:f2:
                    ba:37:58:54:6f:07:58:e4:0d:05:96:8e:28:ea:2c:
                    24:18:2b:63:1a:4a:77:15:73:3d:e7:4f:1d:ca:4e:
                    fe:62:2d:46:84:e1:6a:94:17:04:2f:6d:1f:af:33:
                    65:ac:0a:74:34:07:cb:35:5a:09:25:0d:65:6d:24:
                    34:06:23:27:59:ef:6a:6a:71:33:d6:ba:80:2c:30:
                    6e:13:6e:0a:76:e1:55:5a:45:5f:80:21:3e:e5:5d:
                    26:40:6f:e9:9d:4e:31:50:b8:48:57:a9:87:2a:1d:
                    4c:a8:ac:31:22:ff:58:1b:f4:34:57:04:a4:79:1f:
                    82:08:93:32:fb:99:5a:86:b6:72:12:81:7d:0e:1a:
                    c9:41:a1:5b:fc:b9:20:65:24:02:ca:e1:a7:04:c0:
                    29:0b:3c:6a:01:72:42:45:21:5d:6a:e3:f6:65:af:
                    73:9c:06:1e:07:be:f3:77:d0:3f:9c:14:80:f7:be:
                    96:f8:11:e2:1d:12:59:63:09:21:9c:bd:ca:a7:10:
                    9d:93:a7:29:d7:6a:37:46:36:cf:35:82:75:f7:05:
                    4f:d3:0e:89:0e:81:12:24:02:43:3d:29:b6:f8:d3:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:9B:68:E4:C7:D8:1E:34:3C:B3:1B:13:60:97:99:13:B5:0E:46
            X509v3 Authority Key Identifier:
                keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:55:51:8d:48:71:ce:98:a0:b3:1d:6e:02:fe:62:10:4c:
         24:d1:0f:3e:7f:57:07:57:fc:a5:a0:9e:41:37:31:1d:de:f1:
         1e:69:6c:59:cc:90:b9:e5:7a:e3:dc:f8:59:32:4a:ba:4d:0d:
         d7:4b:f5:f1:a1:10:40:59:6e:e2:b5:fc:e5:8c:9b:53:b1:fb:
         06:39:8d:d9:78:c6:4d:0b:fb:4a:8b:66:11:5c:dd:f2:3f:a0:
         c2:51:5d:bc:cf:1d:8e:17:f7:13:34:d0:ee:ab:09:d3:14:4a:
         c2:26:13:5f:c4:b1:f5:9d:b5:b9:cf:f8:b1:a0:22:34:fa:8a:
         fd:39:33:ab:52:83:c5:3b:90:38:b8:be:07:4f:cb:31:08:86:
         c0:13:cf:24:3c:20:86:a2:b7:e0:f8:63:80:f5:96:86:d8:51:
         c4:f1:1d:64:94:6b:58:6d:fd:74:0d:98:86:7a:bf:27:62:7f:
         de:3e:eb:ee:2a:94:55:a4:e5:7b:5d:cf:64:23:0f:30:a5:6c:
         90:cf:b2:92:a2:43:15:3c:73:a3:7b:a2:fc:6f:a0:37:7a:f3:
         43:8f:c4:31:61:79:91:eb:62:e5:82:9e:db:93:39:45:c5:57:
         fc:0a:42:6e:cf:bc:2e:07:c7:47:34:0b:1e:4e:10:77:0b:f2:
         4d:1e:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----