Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File:                     YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier:          NWV0lTZyw99jSzaDB4+mHMDgXUMuZmXv0cL5o6c6/Vw=
Subject key identifier:   AB:B9:1E:17:1E:D7:73:37:05:9A:66:3D:06:DE:94:4C:BD:3A:C0:D9
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       019F92EE2E69AC00A3DDFD9D6960FC598440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number:          1A2F
Signing time:             Fri 24 Jul 2026 07:01:50 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:50 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:50 +0000
Files and hashes:         1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=)
                          2: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=)
                          3: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=)
                          4: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=)
                          5: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=)
                          6: 9arIJVhxg9fd2PF0Zl1dv4bsaoM.roa (hash: iPeEBnua73nnKIEaWM/yfK+tuSM8JEEgKrGQmXc9Qsk=)
                          7: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=)
                          8: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=)
                          9: JNtINXdphOTbO4iskyGPH_VuIks.roa (hash: NN2JsXnSppDpEcAl5C3/gtPvDxz/VnRmnxMooC0SiXs=)
                          10: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=)
                          11: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=)
                          12: OvfyWv9UIqAtBl_nsQu2JTpIQQo.roa (hash: +BnAMt/KQdaB6b7HaQTEsRH6kJs2SPlugYpLEy1NY2o=)
                          13: OwOGkj3g_m-8rP4VEqsr21ez3t0.roa (hash: kWNy3fxPtEntltlLWADiH7P4BLQywgI40xILmr+8iRA=)
                          14: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=)
                          15: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=)
                          16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=)
                          17: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (hash: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=)
                          18: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: Dgp1gEFQwgHEu9j2ka+3uJcnXF51kCiYE5F6DJpuYt8=)
                          19: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=)
                          20: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=)
                          21: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=)
                          22: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=)
                          23: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=)
                          24: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=)
                          25: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=)
                          26: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=)
                          27: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=)
                          28: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=)
                          29: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=)
                          30: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ee:2e:69:ac:00:a3:dd:fd:9d:69:60:fc:59:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Jul 24 07:01:50 2026 GMT
            Not After : Jul 25 07:01:50 2026 GMT
        Subject: CN=abb91e171ed77337059a663d06de944cbd3ac0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:f7:00:bf:b8:11:b3:c4:90:9c:76:59:6a:
                    cf:33:5b:6f:3d:6f:db:ef:ea:a5:dd:43:b0:36:37:
                    dc:d6:b6:75:8e:c3:54:90:57:e4:bd:1b:bd:cf:9f:
                    42:f3:85:9f:fd:5e:21:87:64:20:9d:6c:00:26:20:
                    7c:97:1c:be:ad:0e:6f:88:fb:18:e3:eb:b5:40:a7:
                    94:eb:d5:56:88:bb:69:f0:01:47:2a:7b:b3:b4:87:
                    e7:bc:ef:da:46:0a:70:15:20:9a:71:91:63:12:38:
                    ea:94:03:b8:bf:31:6e:5f:e7:33:11:29:ea:ff:3f:
                    75:a0:f5:aa:cc:39:6d:43:77:fc:69:37:35:01:83:
                    50:73:88:79:3f:36:17:f7:c7:b4:67:96:7b:29:bf:
                    24:01:56:23:1a:83:e5:d4:64:5c:c5:1e:8b:2b:81:
                    d7:68:d7:94:bf:de:cd:a6:7c:13:ae:57:10:f0:3f:
                    a9:81:08:85:c0:9a:d0:9c:d1:04:3d:78:7c:9f:57:
                    42:20:ff:1a:0b:ea:39:4f:fa:48:09:4d:e1:88:db:
                    9a:5a:18:9a:30:a4:33:21:7d:a6:6f:fd:ae:1e:75:
                    66:6e:ba:d0:4f:33:b2:d1:41:56:84:1d:f7:0a:60:
                    99:90:e3:bd:07:2b:49:7d:cf:5a:fc:91:02:dc:24:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:1E:17:1E:D7:73:37:05:9A:66:3D:06:DE:94:4C:BD:3A:C0:D9
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:0e:d6:b8:c8:06:07:1a:fc:53:9e:03:a1:f4:5d:d4:f6:
         de:a9:c5:79:e6:3c:f8:08:56:8e:d4:6d:ca:c5:c6:83:fc:30:
         cc:53:38:d8:9a:ba:c3:76:8c:88:de:cb:31:66:a6:0e:0b:7e:
         00:51:e6:d5:ca:33:0c:f1:01:f2:88:24:12:e0:fc:83:8e:b2:
         c3:da:64:16:a8:05:91:78:6c:db:85:ee:92:cc:2c:06:fc:63:
         a1:91:72:9e:1b:45:ce:00:08:38:13:03:38:24:1d:90:b6:12:
         e0:fe:68:de:ee:e3:f2:97:0e:62:c9:30:15:ee:51:86:0b:84:
         f7:c9:8e:92:26:69:30:1e:9e:fe:2c:89:f7:9e:a0:44:06:da:
         a5:9f:20:c1:74:c0:a1:66:82:0c:c5:2c:ef:6a:d1:51:fd:1f:
         f9:4d:83:69:c7:52:93:eb:6f:9d:5a:44:0e:40:94:55:d6:02:
         8c:03:f5:4b:4b:6b:85:bb:ea:30:cd:d2:ed:e0:a1:58:e2:3d:
         74:6c:e9:3f:4f:21:e0:e3:50:ab:bc:6d:27:75:ba:15:86:50:
         a2:d4:30:a6:55:53:68:7f:0b:ac:3d:83:cd:df:b4:34:02:e9:
         0c:9a:e2:2c:da:20:1c:84:71:aa:54:b0:7f:9e:c8:cd:ed:68:
         2a:1c:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:14 2026 by rpki-client