Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          WhP+QcTVtXJq/HndyUnC5DWO+Fqe6i6ca0Tf+U8if4c=
Subject key identifier:   F8:39:C6:09:C0:20:CF:0A:3D:7D:B1:CD:6A:52:FF:77:BA:2D:CB:37
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       01A0CDEC63AFA209DC7BA381B93DE63442C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          165C
Signing time:             Wed 23 Sep 2026 11:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:16 +0000
Files and hashes:         1: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (hash: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA=)
                          2: 5-GtKhoAa66dioBZrpVFfqRz7cI.roa (hash: 8StcYCEG4rjyFat3WS2Tv/dBrTZvUN2GO2Qno0+qmVg=)
                          3: 73GQds5O9lYETaz_JvZJg5MtNDc.roa (hash: 5CnDcaJnAh40dI/cXcg78sdklFt4ZI6jaj6cDvX3nbI=)
                          4: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (hash: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0=)
                          5: 8YzhnSN10hTauaidvQ9SJyu3qro.roa (hash: FtXj7rMNyFmmjhAHs+HHxN9MAe9qfrbQfR9dwyX4aqc=)
                          6: CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa (hash: xeqybNdNDUhTz+vqC7eFdYvvA3AqqR+6Az4dsTt8u+E=)
                          7: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (hash: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=)
                          8: ENi_6t4-opAr9_a4vxGzFuCBblk.roa (hash: PEdUz15lPm1QtLlqU3VVR9fWrexpCofmdV5wAzrfN5E=)
                          9: I664kINdQYZZixjAjFJ2wff1nBk.roa (hash: DFrf3nmCfO170wrqgfcGuszwxV4XEHBmrCGavXVsdUM=)
                          10: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (hash: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k=)
                          11: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (hash: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA=)
                          12: QEhSXcwXsu0G-eTWLTcEW4Ss3Kw.roa (hash: 3hazU/kPvVBI6tMsprnBgK/LziRES3Sxxtlr+bH5YbI=)
                          13: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (hash: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c=)
                          14: RNDz_4tH9L_gf3FZK7wHn9W5JTw.roa (hash: iV+7oOHFOY9zS0+jnxTaMolInYSGv9N0+a/6Pd3g5JQ=)
                          15: Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa (hash: ig9la0Fl/sbfAliXhYYjjCFuvHdOCtk7Nkqph1vk7qg=)
                          16: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (hash: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA=)
                          17: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (hash: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=)
                          18: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: kJTRja9nnLY9ko7fEC2XuYjEJ8xQqz0IEQYQPO09YAw=)
                          19: cFW2f7mYQVMT0WQiKum-84YT7Tg.roa (hash: NYhMRFKPP2MvfbOtQ4xBGxpe8K5LETaIrUVLB8Q0RF0=)
                          20: iENB1Spx9V_JeHkY-UbptgejZiE.roa (hash: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=)
                          21: kgLefYWiNGknOidoKgqI74KkRkM.roa (hash: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps=)
                          22: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (hash: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE=)
                          23: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (hash: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc=)
                          24: rjAJbLG2Zw4o_Pjxfe1qJfc4HJE.roa (hash: PgUAFIkeOTWwErAjDkjVk0mJqFSxps5oqsCSRQBUIgw=)
                          25: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (hash: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:63:af:a2:09:dc:7b:a3:81:b9:3d:e6:34:42:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Sep 23 11:00:16 2026 GMT
            Not After : Sep 24 11:00:16 2026 GMT
        Subject: CN=f839c609c020cf0a3d7db1cd6a52ff77ba2dcb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:36:d6:4f:e9:02:06:53:8e:7e:be:cd:0a:
                    98:3c:28:f4:f4:82:6a:c4:02:b4:d2:73:31:d4:9a:
                    ce:c3:62:5d:7b:06:be:5a:fd:e1:33:6f:2b:9f:76:
                    8f:ae:0a:6c:f9:c0:05:82:2b:44:30:d7:ae:a2:37:
                    41:a8:ad:03:ec:e3:d1:92:6c:40:4d:6f:e7:25:60:
                    40:cc:e6:09:4f:a9:1c:dd:03:da:9b:7e:48:f2:83:
                    ac:28:c0:6e:ed:f5:3b:bd:5d:72:1e:75:04:3d:b3:
                    e1:59:30:eb:0d:20:a3:b0:bd:12:31:ec:e9:3a:d1:
                    e8:de:48:21:5e:35:ef:da:08:9f:7f:0b:0a:8f:76:
                    0d:87:30:05:d5:15:bb:b9:b5:77:4c:8f:24:e0:76:
                    e4:b6:c1:a0:38:7d:6a:ee:b8:02:b8:e6:f7:e3:70:
                    da:d8:e4:d9:85:2f:13:de:72:f1:5d:7f:a8:3b:b8:
                    56:ef:da:79:ee:82:c7:a4:e2:1a:cd:8f:94:26:98:
                    af:71:de:a7:ab:6b:bc:f7:df:c3:bb:e1:da:2f:8a:
                    73:c0:4c:75:d6:8e:83:ba:fb:16:26:55:0d:e6:1d:
                    db:3f:12:45:9a:a4:09:6a:d2:d9:31:44:b1:b9:28:
                    fd:35:83:e3:14:52:d4:76:0d:4e:b0:88:9c:0d:73:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:C6:09:C0:20:CF:0A:3D:7D:B1:CD:6A:52:FF:77:BA:2D:CB:37
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:20:c6:e2:a5:29:89:51:4d:51:ff:99:1d:90:a3:4c:77:
         64:bb:d9:2d:e3:51:13:2f:05:65:ba:54:22:cf:0a:28:70:8f:
         77:b1:0a:d1:4d:0b:bf:44:f4:ef:10:2c:1b:a5:41:30:58:0c:
         6e:36:34:9d:0c:51:8b:25:76:5a:a9:ba:fd:8b:d1:50:61:ba:
         93:22:0d:d3:45:c7:99:97:ec:b5:34:6b:32:82:88:26:4e:54:
         c7:1d:c6:5f:71:e4:92:dc:98:f7:d1:a8:f2:cf:5a:30:04:b1:
         4b:15:de:ac:a7:eb:4c:5c:39:f1:24:a4:33:73:1a:2f:8f:2e:
         7a:17:20:4b:cb:f5:f1:a1:59:e6:4a:98:4d:c4:02:89:f4:9d:
         f0:d7:45:69:06:7e:4b:51:e5:82:f3:be:7b:81:1d:ee:95:af:
         ec:15:89:d6:66:1c:ff:f6:b1:90:0f:e8:0a:a3:40:66:68:91:
         00:cf:c1:3c:a7:c8:19:8c:45:70:17:48:69:27:4c:02:a3:30:
         ae:2a:0f:4c:5a:f9:d5:93:cb:c0:18:6f:7e:0e:e4:09:03:a2:
         b0:8a:1a:a8:60:b2:df:3b:a5:6c:4f:7e:9d:fc:ec:55:6d:b0:
         47:09:1e:d0:cf:2d:9b:5f:2c:da:c5:6b:6e:a6:61:a2:cf:5c:
         2a:50:e4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7GOvognce6OBuT3mNELIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjYwOTIzMTEwMDE2WhcNMjYwOTI0MTEwMDE2WjAzMTEwLwYDVQQD
EyhmODM5YzYwOWMwMjBjZjBhM2Q3ZGIxY2Q2YTUyZmY3N2JhMmRjYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IA21k/pAgZTjn6+zQqYPCj09IJq
xAK00nMx1JrOw2Jdewa+Wv3hM28rn3aPrgps+cAFgitEMNeuojdBqK0D7OPRkmxA
TW/nJWBAzOYJT6kc3QPam35I8oOsKMBu7fU7vV1yHnUEPbPhWTDrDSCjsL0SMezp
OtHo3kghXjXv2giffwsKj3YNhzAF1RW7ubV3TI8k4HbktsGgOH1q7rgCuOb343Da
2OTZhS8T3nLxXX+oO7hW79p57oLHpOIazY+UJpivcd6nq2u899/Du+HaL4pzwEx1
1o6DuvsWJlUN5h3bPxJFmqQJatLZMUSxuSj9NYPjFFLUdg1OsIicDXNmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg5xgnAIM8KPX2xzWpS/3e6Lcs3MB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcAgxuKl
KYlRTVH/mR2Qo0x3ZLvZLeNREy8FZbpUIs8KKHCPd7EK0U0Lv0T07xAsG6VBMFgM
bjY0nQxRiyV2Wqm6/YvRUGG6kyIN00XHmZfstTRrMoKIJk5Uxx3GX3HkktyY99Go
8s9aMASxSxXerKfrTFw58SSkM3MaL48uehcgS8v18aFZ5kqYTcQCifSd8NdFaQZ+
S1HlgvO+e4Ed7pWv7BWJ1mYc//axkA/oCqNAZmiRAM/BPKfIGYxFcBdIaSdMAqMw
rioPTFr51ZPLwBhvfg7kCQOisIoaqGCy3zulbE9+nfzsVW2wRwke0M8tm18s2sVr
bqZhos9cKlDkEA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:52:38 2026 by rpki-client