Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File:                     YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier:          ROob//56Tk7bGN66lDwHMDQUEXdcy3WT+Mp+O/MHsVc=
Subject key identifier:   5C:E4:7E:21:CD:B8:26:B9:D5:2A:48:CF:42:82:01:B3:2F:12:6E:C8
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       019D26CCFE6ADF6A85CBDD22604060E773D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number:          18E7
Signing time:             Wed 25 Mar 2026 21:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:01 +0000
Files and hashes:         1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=)
                          2: 4AQpWQisjxEO_3sSCwM5-rsbP2U.roa (hash: pFbTw52/6hBtIeFj35KTMuXcfX4BCXpM3suldN/qkJc=)
                          3: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=)
                          4: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=)
                          5: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=)
                          6: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=)
                          7: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=)
                          8: IZIR-QqFsa8iNRaGlSO8v8Uzjtc.roa (hash: Dv1oCgzApSJKf6ojNDameScXxCxuHT1GCr5zFwma0t8=)
                          9: JkYPdWIPBS3UQdqks8w3N-B_PXA.roa (hash: 2dT7jcP61wNOKgKv9kGVucaeX72t3lEMFGix3NDqhMw=)
                          10: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=)
                          11: OvfyWv9UIqAtBl_nsQu2JTpIQQo.roa (hash: +BnAMt/KQdaB6b7HaQTEsRH6kJs2SPlugYpLEy1NY2o=)
                          12: REpPOVSFPxs6XWxXr83I7WsaONE.roa (hash: tWq3UF4A4s+oWUbvh9Wno2oVGe4je8aAL4JtfvCSLWU=)
                          13: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=)
                          14: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=)
                          15: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=)
                          16: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: BJSiXlJERHvhSF/JoWGKUY5uSepma2lgyBUUs2I4j2o=)
                          17: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=)
                          18: ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa (hash: ebvhaLhmgKTiPvOKK+bZy+ARcuy6m/BV6K1apwU9AoI=)
                          19: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=)
                          20: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=)
                          21: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=)
                          22: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=)
                          23: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=)
                          24: fvRquGdLskZKWulDnfJMDzpLPQU.roa (hash: CR6ZcpCz35mtzaAxSqlJ2NEOBSGjyHieJtOAbogUd+0=)
                          25: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=)
                          26: iBkluHdof_8F1tiIIeu1IUHVsdo.roa (hash: RauoNPl8ybB9uctj5qhY44EnOPIJ7Dn5vhqsB1W7sqI=)
                          27: mG70oaiQLw1CChve0widRVbMPck.roa (hash: YUzhMfkYxAz3L8ebkuYt8br4uvQAozQEY+LaakqqCkA=)
                          28: mshfArpzUjCOI3VAXt9ofx-FYsU.roa (hash: E4AU/ALB2gm1Ouwc1urgcMRh4bzLaMU2R6VEybB+8q4=)
                          29: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=)
                          30: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=)
                          31: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=)
                          32: saXVgoVzNRbFAdgTctYGeI4Btug.roa (hash: Ni5nFlKALS6As/RHO2AnppySml8jTNUM8omaVQR73WQ=)
                          33: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=)
                          34: xygQhFvaDn0KcsXT2TVrBVJGRy8.roa (hash: dsftadFShOGlp8GVX992hYwLlmpdYYKlbeZgmlDhCys=)
                          35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:fe:6a:df:6a:85:cb:dd:22:60:40:60:e7:73:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Mar 25 21:01:01 2026 GMT
            Not After : Mar 26 21:01:01 2026 GMT
        Subject: CN=5ce47e21cdb826b9d52a48cf428201b32f126ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:d7:eb:67:b5:1c:ba:d7:09:d7:5a:a7:5d:
                    ea:ec:fa:6d:d8:cf:89:d2:b1:ad:fb:37:fb:9f:ba:
                    0d:0e:2d:fa:6b:1f:b5:35:d6:5e:46:be:5c:aa:ca:
                    1e:c2:10:95:f6:54:bd:9a:75:17:95:3c:76:05:2b:
                    ce:7e:e3:c2:f9:08:0e:e3:e3:a6:ab:92:76:22:49:
                    3c:d7:0a:19:bb:63:71:82:74:1e:4d:41:f7:01:4b:
                    73:56:b7:fb:df:c6:71:a0:34:ac:45:be:5d:92:bb:
                    49:68:7c:bc:c6:49:d1:39:27:66:22:8b:97:80:0f:
                    1d:58:15:32:8c:ba:e7:6f:49:b5:b3:eb:86:95:4e:
                    08:ec:5f:c1:45:28:19:69:ab:d0:22:4b:0e:d7:ed:
                    8c:47:38:13:e8:9a:f2:91:ee:81:7b:52:a8:18:a1:
                    99:da:b5:79:b7:15:9f:8e:32:ba:d2:a5:cd:e2:32:
                    63:22:31:6b:02:ea:0f:be:e8:6a:e7:45:5d:28:21:
                    8e:5e:fc:38:7d:c9:90:a7:8f:c8:16:b1:28:52:75:
                    93:66:a4:98:92:52:ca:16:06:f7:3f:ad:9f:0d:01:
                    ad:a2:c6:da:7d:b9:b3:1e:87:d8:cf:54:54:07:08:
                    eb:d6:fa:c2:a4:60:b0:b7:bb:32:5c:23:2e:a5:1c:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:7E:21:CD:B8:26:B9:D5:2A:48:CF:42:82:01:B3:2F:12:6E:C8
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:22:f4:43:a7:65:4c:bf:18:3a:9b:91:07:de:3a:5f:73:56:
         c0:d1:67:14:bb:7b:1d:4e:65:e7:db:68:3c:0a:7b:17:bd:bf:
         e8:24:b8:d4:ed:8a:c9:d2:59:0b:25:cf:5a:9b:32:54:db:85:
         bb:d0:9a:a8:40:c7:2a:59:6d:c7:28:5c:cd:81:e3:ee:5d:a5:
         ae:f3:16:3b:37:cb:1b:7f:7a:33:9e:dc:a9:33:4f:56:4d:a9:
         7a:a3:8a:5b:be:0a:b7:00:3f:64:e5:ee:93:38:cb:93:2c:21:
         0f:75:e4:74:a7:64:6a:df:ca:5d:45:27:15:e4:73:f3:33:b7:
         7f:d8:91:bc:44:f6:03:5b:b4:d0:e2:6d:04:62:36:f0:d2:c4:
         ec:df:30:05:c8:dd:2f:3a:a1:f7:29:c7:c8:04:93:8c:54:dd:
         c2:07:49:bc:35:b7:89:f1:d8:c7:0f:0d:bd:ee:f1:21:a6:b2:
         d8:0b:76:9e:17:9e:39:04:58:73:0d:98:8d:4a:b0:6e:d3:57:
         0c:50:5c:89:3a:3f:c8:23:a8:e4:8a:f0:f7:f0:89:6f:79:19:
         1b:71:8a:78:d2:6f:89:19:b4:f1:66:a8:21:78:b8:88:56:0f:
         aa:26:ad:1b:25:34:5a:52:2b:ea:e9:95:03:99:67:bb:ab:31:
         89:6c:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client