Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          naNo9EiiGa7A3JoXQP8odVVp5zLi7sa7YZJavsuNt8w=
Subject key identifier:   7F:57:B4:B0:16:CC:4E:6A:8F:4A:06:DC:2A:73:7E:82:41:70:37:28
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       019EBFFF3AC5DCDC5F792CBBB13F2B8A9ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          1537
Signing time:             Sat 13 Jun 2026 08:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:35 +0000
Files and hashes:         1: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (hash: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA=)
                          2: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (hash: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0=)
                          3: 8YzhnSN10hTauaidvQ9SJyu3qro.roa (hash: FtXj7rMNyFmmjhAHs+HHxN9MAe9qfrbQfR9dwyX4aqc=)
                          4: AvfVscAfeGLg0i5agSymFzbj6fs.roa (hash: nW4lR8Dij7vE8s1w3TnPTa0J1E2s9zBks1fdMQ53JRE=)
                          5: BEVlDcor43VAa1g0ysAQVW11jnI.roa (hash: rH2U4tFo6BG7+FF49K5fvFq8MR/6cLhyKObynLMrdMg=)
                          6: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (hash: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=)
                          7: ENi_6t4-opAr9_a4vxGzFuCBblk.roa (hash: PEdUz15lPm1QtLlqU3VVR9fWrexpCofmdV5wAzrfN5E=)
                          8: I664kINdQYZZixjAjFJ2wff1nBk.roa (hash: DFrf3nmCfO170wrqgfcGuszwxV4XEHBmrCGavXVsdUM=)
                          9: MCZi_c1huQ6n-Z4n0Hakd2KDigI.roa (hash: H2EeTFvMV9vfrNQ5klZfjHCU/MDXIu4F+IYD6yleIdg=)
                          10: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (hash: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k=)
                          11: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (hash: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA=)
                          12: QEhSXcwXsu0G-eTWLTcEW4Ss3Kw.roa (hash: 3hazU/kPvVBI6tMsprnBgK/LziRES3Sxxtlr+bH5YbI=)
                          13: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (hash: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c=)
                          14: RNDz_4tH9L_gf3FZK7wHn9W5JTw.roa (hash: iV+7oOHFOY9zS0+jnxTaMolInYSGv9N0+a/6Pd3g5JQ=)
                          15: Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa (hash: ig9la0Fl/sbfAliXhYYjjCFuvHdOCtk7Nkqph1vk7qg=)
                          16: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (hash: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA=)
                          17: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (hash: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=)
                          18: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: zio8T+7VOPXagpnv+JQgi6w5cxWSZBRbFRy4l3dJhDE=)
                          19: cFW2f7mYQVMT0WQiKum-84YT7Tg.roa (hash: NYhMRFKPP2MvfbOtQ4xBGxpe8K5LETaIrUVLB8Q0RF0=)
                          20: e3qdTpRStcCORxISaYYq3AP8CUc.roa (hash: iM5Rmk59sIgr6XSfhwlBdIK7TDwRtWgNhsnVyMMGkCs=)
                          21: g3Aqq8ieDulhltRT8RzCMXOJ6hA.roa (hash: g91OJ4H9j41EuGAt1Pac7eE+KaGklturxtGrn6P756c=)
                          22: iENB1Spx9V_JeHkY-UbptgejZiE.roa (hash: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=)
                          23: kgLefYWiNGknOidoKgqI74KkRkM.roa (hash: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps=)
                          24: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (hash: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE=)
                          25: nZEoNnUzLuKA0B7d88rqkJt68iQ.roa (hash: fgBH81eM//7Gr5s15+AQ9fhhR3aq2fqtD8PopfREdZw=)
                          26: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (hash: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc=)
                          27: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (hash: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:3a:c5:dc:dc:5f:79:2c:bb:b1:3f:2b:8a:9a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Jun 13 08:00:35 2026 GMT
            Not After : Jun 14 08:00:35 2026 GMT
        Subject: CN=7f57b4b016cc4e6a8f4a06dc2a737e8241703728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:bb:a7:a2:9c:8c:ef:be:14:38:6a:19:45:
                    4a:1d:26:fe:4e:0a:73:20:a5:93:24:af:bb:85:61:
                    d0:49:9b:fd:da:ab:fd:85:63:76:64:ea:44:0f:6a:
                    25:d2:74:4c:da:cc:e9:ae:fc:9d:f1:36:03:b0:ee:
                    37:30:54:8e:f9:cf:c5:1d:ae:bd:25:4e:e8:3e:66:
                    d5:3d:23:81:07:ec:f3:a6:f0:1a:37:b5:2e:fa:c1:
                    cd:ed:32:6c:a8:e5:94:bc:4f:a0:b8:9e:c5:69:c0:
                    fe:50:d0:be:ba:b5:49:44:92:a1:0c:25:77:c1:2f:
                    86:c3:33:57:fc:50:ad:be:a2:25:dd:c8:50:9e:85:
                    9d:30:29:e0:43:ff:18:72:08:35:2b:f0:96:e1:da:
                    b6:e2:1b:5d:af:c8:80:3e:67:64:45:73:6a:13:a2:
                    49:d4:a2:60:bf:b2:1b:eb:9f:ee:45:fc:0e:9a:4b:
                    ad:5f:5d:91:b4:f7:9c:f5:df:89:32:38:98:9a:00:
                    11:0a:5e:04:31:ac:7f:c4:6f:66:56:8e:8c:a2:59:
                    36:ad:22:ea:1e:f9:e7:d0:58:7c:99:e7:87:af:9a:
                    48:6f:95:2f:80:be:d0:fb:d0:94:a5:14:55:5e:cc:
                    ea:99:be:91:1e:df:9e:ed:b4:69:05:40:f7:5d:22:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:57:B4:B0:16:CC:4E:6A:8F:4A:06:DC:2A:73:7E:82:41:70:37:28
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:43:39:6d:0e:c9:3b:65:12:67:1d:b1:6b:a9:47:6f:96:
         21:f8:50:a7:b4:21:80:21:3e:3a:4c:ed:10:28:80:fb:f0:34:
         0c:56:c3:c1:3b:72:be:05:2f:f8:94:8b:a2:28:8a:7d:32:ca:
         fb:aa:78:f2:51:80:45:7c:7e:79:71:84:0d:c7:87:29:15:d4:
         3c:73:d8:41:31:e0:46:ea:4a:9d:f1:c9:5f:76:e4:83:d9:24:
         2b:5e:9c:2e:02:10:7d:2d:82:8d:2f:2f:42:32:56:e7:92:89:
         4c:58:81:3c:b1:20:ea:e3:53:0c:d9:5f:f5:42:c6:88:27:e6:
         51:67:0f:97:6d:d5:f3:03:39:63:b2:16:17:a9:c0:50:58:ad:
         3f:cb:5d:7e:ee:64:e1:da:ad:06:e9:82:42:2c:c7:a5:d3:ca:
         aa:56:fb:6b:9b:13:51:db:31:36:52:1f:28:1a:0f:5d:ce:98:
         c3:3a:c3:32:4a:73:96:3d:df:2d:23:0e:50:67:1e:7f:49:c0:
         8f:17:bc:db:ef:08:7e:0a:8c:e0:ca:fa:b7:15:48:22:61:16:
         6e:5b:38:ea:7c:89:3d:4b:70:20:f5:60:f4:e6:84:9d:71:47:
         00:74:ad:3c:1c:55:4b:bf:82:a0:0c:93:c2:e1:04:dc:61:17:
         a3:88:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:38 2026 by rpki-client