Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          jNuAArm7F1vngckno4GewFgLm8cdrlzw8cwAl3YzekQ=
Subject key identifier:   C3:2B:F1:93:C2:2E:B6:7F:42:04:09:39:95:73:FD:98:58:51:33:75
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       019E1F4806EC9ECF89231B0131FC8A5B44E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          0D28
Signing time:             Wed 13 May 2026 03:01:14 +0000
Manifest this update:     Wed 13 May 2026 03:01:14 +0000
Manifest next update:     Thu 14 May 2026 03:01:14 +0000
Files and hashes:         1: 1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa (hash: 3vBSkWaA78OycQPV5V4Y1lrmpOPd5P5/xF01SIV5iJY=)
                          2: 1HcPQ5pfKmPtctEimZHE7z79hac.roa (hash: 01IfM+fb4QfgTTaJeTcZGafqZtEIOcrvm8euITSheiU=)
                          3: A956JOTlQ59lmcfnxZy--QUzGfo.roa (hash: RPpgTtbeiF27op+abzwfLowJGRtGnDFgjON32ZJTVfk=)
                          4: CLvieQcycU-jVZ0rNWe_Whtp7K0.roa (hash: GhFSAlJ6xb+CTvebpjppk9iI+LSCfFhHd2oyvaT4u6I=)
                          5: EjpzgiXwC7omQHNgYlcRzu_e8UU.roa (hash: MRUgtinadxY36CAXX+Sb8EbCP+mT/wSWQT2+h7ZWlcY=)
                          6: Fekxz83cw-qipMMKalFLm9cHDBA.roa (hash: 4P+8/TrggLqnTQMU/nWTl1kPGOuK4OJ+/hRBkU2gXhY=)
                          7: FjbhwRaWG8H0F9gsOugZzmYyQhI.roa (hash: eQ55wapBZou4y5GxsaxVO10r26QYB8emildRQ31E6/w=)
                          8: G1cVObMPOvr58gYfpMZUUg6xloA.roa (hash: kQwqsilWz22JvDZwbOTxkGaryBQcc34+YA+JEVWKuas=)
                          9: JYf2VJpHmRVEzNLa8FSxGlMFrG8.roa (hash: vdXXIyeKsFvWBG+HbbGuLa5wF5IPhtyQO7wpuZX4h1s=)
                          10: LuZReuXLJ1OuD39Eh8AnjJyH8d8.roa (hash: i8LWGzSoa4vkoY22nWh0T5O8XMQlgbg/pk2IR2Xl1Hg=)
                          11: TQ7ysTGQIakmu4CVTNc31GK2dfs.roa (hash: MScEjjiTLmx3/HT0srp+gqbybWKE16rip04S7ew+ay8=)
                          12: Tx1QRE1K0CqqbNISdem5mSeFyhY.roa (hash: TsoYEEq1X+nTDdaU6FQwegqSC4XnT5STovO4gDOXBsw=)
                          13: UboZ50C_e6m85Y04ZZEQFVaz2bU.roa (hash: Za+7ixivpFVxRDrXbo5D+97t0iV/6NJ0y3X8U2eMBXY=)
                          14: WhpdbusgONQkGfJUmuHu3hC04fM.roa (hash: dMwJ/FCdVp8IZAqayVtrT8hk8KNS++zwBXrsEJV7xwo=)
                          15: X0kSuarZ-g_McCBdBJMAHOmD78E.roa (hash: Gr2z6DPYOsIVXCMbomTNzbkS+4fkBpnvaCGP+zUJOhk=)
                          16: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: rLWRB2sFGfLJsaImKdMwzUMLVHr7mTSUDP0EBcUdXnM=)
                          17: aGx-mWhigRE4_KS4p7V620T7uRA.roa (hash: uYU/8IkqjXFpdqBKotX53i7emMpJhAXYS06trCmNRIw=)
                          18: jWhLrhE9ioMP947eBu_O1EpWlOQ.roa (hash: zqiN2GO+4eADjryw36IzQaGz8V+eCkbHjcHuBCp6yME=)
                          19: rKBqA4AVr8V474f1fS0u1WEme_g.roa (hash: Ztg6Dzjy4Iu5rj4fL+sFN+yMeB/hu7159PSBkLZlOq0=)
                          20: tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa (hash: xN2ctTPtxjMiIigccibut/P5bneSpRG4NOTR23KVdug=)
                          21: xZUujeAFSTwArzpPu_lWFdggi9k.roa (hash: qxKigoq4FbC2Td1b3o1qFzpWqs7daeLkojwYiOlRGAk=)
                          22: zPteSfOjom7QWMmEMxZDi_vA-iY.roa (hash: rrGLmwvmuRirnSrr4c0rl9ZjsO4Ec7TvIhYJsaWhutQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:06:ec:9e:cf:89:23:1b:01:31:fc:8a:5b:44:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: May 13 03:01:14 2026 GMT
            Not After : May 14 03:01:14 2026 GMT
        Subject: CN=c32bf193c22eb67f420409399573fd9858513375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:de:98:78:7a:84:e2:6f:66:89:d7:ae:ba:
                    e5:30:a1:e4:32:a2:82:89:56:fb:61:9a:00:e4:6e:
                    a4:cc:a4:a9:ef:30:c7:58:19:b1:83:c9:50:44:41:
                    52:ef:e1:b1:ee:5f:23:f2:01:a9:cc:c6:b1:f2:84:
                    40:bc:ca:a6:1e:cc:e9:1f:98:63:9f:b4:dc:d2:ab:
                    38:9e:75:a8:a0:89:14:b7:35:08:ab:8c:c4:31:18:
                    60:5b:e3:e0:a9:41:bd:6d:a6:88:b6:b1:12:2f:e9:
                    67:e3:46:4f:bd:a3:39:c6:c1:7c:74:8b:2a:9f:be:
                    09:fe:24:42:b2:1c:a8:e9:1f:7e:75:55:31:82:dd:
                    62:9f:b2:9a:51:9a:81:11:b1:5a:ca:04:6b:34:c7:
                    94:a4:2e:00:5e:dc:96:73:56:95:13:a1:ff:c1:f1:
                    48:7c:d6:b8:4f:94:a8:f6:81:94:41:2b:96:1d:81:
                    8a:db:b3:24:d6:f1:44:62:24:45:a1:a6:24:3e:bf:
                    ba:67:25:85:f8:c8:9e:7e:7e:b3:c8:c3:c4:ea:a2:
                    b9:eb:df:19:c3:ec:eb:28:1f:07:eb:8c:c7:0a:b3:
                    eb:74:5a:3e:28:eb:80:d8:26:62:86:46:cb:23:31:
                    99:35:d7:eb:74:d5:66:eb:44:52:91:f6:24:e2:11:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:F1:93:C2:2E:B6:7F:42:04:09:39:95:73:FD:98:58:51:33:75
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:1b:67:12:57:0d:f5:dc:fd:44:15:81:26:df:4b:2e:e8:
         30:8a:ab:9c:09:be:84:6d:34:56:83:92:6a:f1:25:cb:17:b8:
         55:45:19:8f:e6:5b:f2:9f:e1:96:87:23:4c:19:8f:b1:c1:93:
         51:57:fb:90:c4:ce:7c:f3:87:53:d8:09:d1:61:e7:6c:11:ee:
         6b:9d:21:33:36:11:a2:00:fc:16:d5:75:50:7e:23:81:ff:6b:
         64:6b:ee:88:5a:6f:6a:0e:f9:ac:7f:12:19:87:97:da:b5:06:
         ee:15:50:75:81:88:49:44:2b:5a:c4:54:74:ba:79:96:81:86:
         04:62:c9:52:6e:96:ed:68:7b:a1:e9:88:bd:66:58:f9:ab:77:
         a5:6f:35:2d:11:c2:48:4f:91:8d:b7:93:17:f8:c6:ec:1b:4e:
         67:54:64:4d:1a:e1:e9:11:52:a9:ba:07:5d:93:bd:17:99:18:
         2d:93:6a:5d:45:ba:ed:70:a5:cf:75:a7:16:44:e2:d6:b1:0c:
         0c:4c:04:44:9f:9b:63:ba:79:d4:7f:d7:73:c3:b8:c7:77:0f:
         a6:fe:67:78:bd:00:4f:26:e1:d9:0f:e2:8d:43:85:92:52:ff:
         25:d2:67:84:6e:dc:89:b8:0b:55:69:66:01:5f:71:d4:df:7b:
         61:5b:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:41 2026 by rpki-client