Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          nH8o7WPGrLRkazM3hSw6kwjC2AnGKz9PcA53S71gjso=
Subject key identifier:   E6:35:72:2E:63:4E:0F:EB:57:5A:60:50:DB:68:7B:13:B1:BA:5B:3F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       01A0E767309AE59BE80D86FD6D38B25BE604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          0EAE
Signing time:             Mon 28 Sep 2026 09:44:54 +0000
Manifest this update:     Mon 28 Sep 2026 09:44:54 +0000
Manifest next update:     Tue 29 Sep 2026 09:44:54 +0000
Files and hashes:         1: 1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa (hash: 3vBSkWaA78OycQPV5V4Y1lrmpOPd5P5/xF01SIV5iJY=)
                          2: 1-REYCxfHPdAVD7tNS5ps5sxn9Fo.roa (hash: kldVBPNFiYtgeus8NuesmoUqa0jcFirszlkfKnDmJ4U=)
                          3: 1HcPQ5pfKmPtctEimZHE7z79hac.roa (hash: 01IfM+fb4QfgTTaJeTcZGafqZtEIOcrvm8euITSheiU=)
                          4: 7OfFzqNW0NQL25TrVQF_BiapumI.roa (hash: YT+fh85oI+5zy1kS07FvYGKTzwU1BU2GPvlU5/vt2dM=)
                          5: 7RyWvRC2Y0TftwhFj5iQJQz3_ag.roa (hash: nnMDjyO2WOvwEHmLiOn3cUezXD9HK3mnTmiDaCIFDnE=)
                          6: 9nbTY9pBE5ppQKT70vyCQjeMmZA.roa (hash: GhcaTojY+Sq4kKVUmTSjnzft3uRijlYH2hhZLqJrurU=)
                          7: CLvieQcycU-jVZ0rNWe_Whtp7K0.roa (hash: GhFSAlJ6xb+CTvebpjppk9iI+LSCfFhHd2oyvaT4u6I=)
                          8: D31LDaiFUxCIEk0Ck2_Zc83-R90.roa (hash: aLcJxNTZmQZRz5aNXkDx5xs2ilX8NDzgHn3D9fxSAwo=)
                          9: EjpzgiXwC7omQHNgYlcRzu_e8UU.roa (hash: MRUgtinadxY36CAXX+Sb8EbCP+mT/wSWQT2+h7ZWlcY=)
                          10: F18hS-AxZ30cjD1UqNy6exhRjHA.roa (hash: FOiYDMEDwKJ4QI7pMVza9WaGBzrroPhtrcOFSWifdVk=)
                          11: Fekxz83cw-qipMMKalFLm9cHDBA.roa (hash: 4P+8/TrggLqnTQMU/nWTl1kPGOuK4OJ+/hRBkU2gXhY=)
                          12: NtCh4QMaLJ8u8SRhPXME6l6rDtU.roa (hash: 8DbAlQmhIDDvbE2RTYsHAQ7w/0X/XjYpI/GfiC7MO08=)
                          13: SsjUG7QZd27xGISddpgqwONLVjM.roa (hash: +phxIAkNOdbjJbeOyKq9YzXuBX0IlnRFfgnlxP/IxXA=)
                          14: TQ7ysTGQIakmu4CVTNc31GK2dfs.roa (hash: MScEjjiTLmx3/HT0srp+gqbybWKE16rip04S7ew+ay8=)
                          15: TxLHYeLn5waqZBrieFj7HGS5upQ.roa (hash: AQE4iNmgZ8XsKpE8R3Tqs44Bi3JeC42kBaLI3MHTv1Y=)
                          16: UboZ50C_e6m85Y04ZZEQFVaz2bU.roa (hash: Za+7ixivpFVxRDrXbo5D+97t0iV/6NJ0y3X8U2eMBXY=)
                          17: VCYG9jW5ZRPqIZH3NPG8M5D6rdo.roa (hash: WZCSC8WmNP3+eVsC/jCVzVB4Byy4L+TdEgXvUowz1qs=)
                          18: X0kSuarZ-g_McCBdBJMAHOmD78E.roa (hash: Gr2z6DPYOsIVXCMbomTNzbkS+4fkBpnvaCGP+zUJOhk=)
                          19: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: +6yUh3nFN3YyKoQniFm10+OWuRWdB5VaUEOBeb127p8=)
                          20: aFGocHElaMjlAKj_s9X0AGQIDK4.roa (hash: 39qCRlygHYd/7jND+sswYuDowpmtu5zTOOVVyh15i5U=)
                          21: er_rwL0usAKGdp1cd-4r_3wkqgM.roa (hash: s0g7qH9i0RnM2iXZ8NIWx07ZOx+cLrqoxoVUT4Oh0ug=)
                          22: mqwgub1uibS9x_F9WiQDrkerEqE.roa (hash: b33ZxY73dmejWTF0+JpuLdsl1eGBScAuV9NIFHXrnIo=)
                          23: ovKU-7fIoHEbxGnC8uK3B7AE7ls.roa (hash: 0NX/3qhIuInCzT512TWVoFDQGXKd3nViP8eLecNLz/c=)
                          24: usickz1JkHSllPbZAi4fwIOVzHk.roa (hash: WEX+IonYma3tMGJoZDK3/oEc0wu/mpt2bYpraiX2Bz0=)
                          25: xZUujeAFSTwArzpPu_lWFdggi9k.roa (hash: qxKigoq4FbC2Td1b3o1qFzpWqs7daeLkojwYiOlRGAk=)
                          26: yj_CcFDjRS6kxurlMCMLc70m99M.roa (hash: UmvE8kk0YgpEOqNwu4S2xYjNUXx4ucexqwqQxmv5H8w=)
                          27: zIOSTykVc36D8SnbJZHi0FQd05Y.roa (hash: qZtcMDx5ye7mHsew9NCTHHuvczJbnZxpM/XrN9SLc9I=)
                          28: zPteSfOjom7QWMmEMxZDi_vA-iY.roa (hash: rrGLmwvmuRirnSrr4c0rl9ZjsO4Ec7TvIhYJsaWhutQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:67:30:9a:e5:9b:e8:0d:86:fd:6d:38:b2:5b:e6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Sep 28 09:44:54 2026 GMT
            Not After : Sep 29 09:44:54 2026 GMT
        Subject: CN=e635722e634e0feb575a6050db687b13b1ba5b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:1b:41:cb:e6:f7:e6:3f:64:0a:22:a4:a6:
                    2d:61:a5:9f:cb:f5:b5:10:1f:43:2f:dd:97:f9:84:
                    06:32:9e:20:98:7e:3d:18:3f:50:ab:61:00:5b:28:
                    d8:27:0f:f7:9e:1d:2c:f4:a8:73:0e:8f:ab:ac:ca:
                    0c:ea:83:33:ec:02:40:9b:8b:73:a3:ba:6f:ca:07:
                    b5:91:dc:4d:63:15:80:ec:b1:04:04:1e:10:c7:59:
                    ec:ad:c8:b3:02:07:96:f7:67:0c:55:d5:cd:d5:28:
                    33:9c:50:e3:d2:e7:fc:82:88:9b:a3:47:44:a1:21:
                    c9:e4:f1:7e:56:f9:8e:e1:e5:55:49:6b:63:ae:57:
                    63:98:39:d8:1f:0d:ec:93:0b:8d:e9:9d:f1:2e:0d:
                    b9:38:8b:3b:cc:bb:36:71:7c:cd:22:98:92:87:99:
                    3c:ed:38:3c:c9:5b:e2:b9:74:83:1e:5d:62:ea:f8:
                    3f:37:91:c7:2c:ff:14:e0:51:5e:29:a8:13:71:6b:
                    7e:6f:e0:ce:df:d6:47:ef:28:75:33:0b:f1:0b:83:
                    d6:78:7d:df:59:73:24:f2:70:4e:a2:ad:d7:4a:17:
                    ab:e4:a4:ca:7a:02:eb:55:16:17:d1:86:d8:92:c8:
                    d8:31:95:76:17:ec:50:80:2c:69:3b:7d:16:e9:45:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:72:2E:63:4E:0F:EB:57:5A:60:50:DB:68:7B:13:B1:BA:5B:3F
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:40:51:8c:80:37:1b:37:24:dd:cc:88:28:75:49:75:6e:a3:
         3b:d4:cc:05:16:10:d9:80:15:62:10:b3:a3:e1:89:39:11:9b:
         89:49:eb:cf:f5:58:ec:49:2b:b0:0b:0b:5b:2f:08:94:4a:42:
         6e:f0:2a:05:d0:42:06:2d:06:7f:a0:e3:18:c1:af:66:b3:ae:
         94:ec:33:a3:1d:d0:63:e3:e4:bc:7b:77:b6:b7:e5:13:7d:32:
         f0:b0:0c:31:8f:ba:51:0a:03:fd:bb:7b:b4:a7:71:e1:80:15:
         dd:ab:4d:6b:b4:a9:46:1e:73:52:1d:83:06:bd:fd:49:83:c7:
         4c:25:86:af:26:44:8e:8a:d5:ee:09:2c:84:7f:b5:66:27:de:
         36:dc:07:cc:74:7a:9c:fe:98:7c:81:8c:e3:b2:cd:11:ea:c7:
         43:f1:66:eb:26:26:90:dd:a9:67:6d:f5:79:c9:94:be:3e:12:
         54:75:aa:37:42:ae:05:c3:ea:e3:4a:38:a4:d7:ff:ec:1e:f4:
         66:40:5b:79:95:f0:df:ae:9d:fa:93:35:76:57:be:63:49:da:
         5b:f0:b9:b0:f3:31:ae:c8:14:cd:dc:b6:1f:29:43:a7:db:62:
         4a:89:5a:02:24:d3:c3:cc:f6:f3:82:cb:bc:45:61:08:ea:54:
         4f:c9:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:37:36 2026 by rpki-client