Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          uGKD14CO+t6LUrTTGwKrj479eGEJCvGEeOVlbgzd8k4=
Subject key identifier:   EF:A5:74:57:BB:E5:8C:00:D7:36:FE:98:E2:5D:31:B4:57:F3:C4:7B
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       019D98F45F7E65CF6EAF98D27DABE6EABF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          149C
Signing time:             Fri 17 Apr 2026 01:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:44 +0000
Files and hashes:         1: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (hash: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA=)
                          2: 4AUPiq0Eff8j-x44TKNnB4pOjoQ.roa (hash: YcYJy3WZmJQk4yb1HfCHP/tTIv8ErXnt4xMaiJ21rvk=)
                          3: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (hash: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0=)
                          4: 8YzhnSN10hTauaidvQ9SJyu3qro.roa (hash: FtXj7rMNyFmmjhAHs+HHxN9MAe9qfrbQfR9dwyX4aqc=)
                          5: AvfVscAfeGLg0i5agSymFzbj6fs.roa (hash: nW4lR8Dij7vE8s1w3TnPTa0J1E2s9zBks1fdMQ53JRE=)
                          6: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (hash: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=)
                          7: ENi_6t4-opAr9_a4vxGzFuCBblk.roa (hash: PEdUz15lPm1QtLlqU3VVR9fWrexpCofmdV5wAzrfN5E=)
                          8: I664kINdQYZZixjAjFJ2wff1nBk.roa (hash: DFrf3nmCfO170wrqgfcGuszwxV4XEHBmrCGavXVsdUM=)
                          9: MCZi_c1huQ6n-Z4n0Hakd2KDigI.roa (hash: H2EeTFvMV9vfrNQ5klZfjHCU/MDXIu4F+IYD6yleIdg=)
                          10: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (hash: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k=)
                          11: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (hash: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA=)
                          12: QEhSXcwXsu0G-eTWLTcEW4Ss3Kw.roa (hash: 3hazU/kPvVBI6tMsprnBgK/LziRES3Sxxtlr+bH5YbI=)
                          13: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (hash: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c=)
                          14: RNDz_4tH9L_gf3FZK7wHn9W5JTw.roa (hash: iV+7oOHFOY9zS0+jnxTaMolInYSGv9N0+a/6Pd3g5JQ=)
                          15: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (hash: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA=)
                          16: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (hash: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=)
                          17: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: 5Q2CwGxH+T9sML5pi4BFw4LVJtUtNjUIHNYih9cAOrU=)
                          18: cFW2f7mYQVMT0WQiKum-84YT7Tg.roa (hash: NYhMRFKPP2MvfbOtQ4xBGxpe8K5LETaIrUVLB8Q0RF0=)
                          19: e3qdTpRStcCORxISaYYq3AP8CUc.roa (hash: iM5Rmk59sIgr6XSfhwlBdIK7TDwRtWgNhsnVyMMGkCs=)
                          20: g3Aqq8ieDulhltRT8RzCMXOJ6hA.roa (hash: g91OJ4H9j41EuGAt1Pac7eE+KaGklturxtGrn6P756c=)
                          21: iENB1Spx9V_JeHkY-UbptgejZiE.roa (hash: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=)
                          22: kgLefYWiNGknOidoKgqI74KkRkM.roa (hash: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps=)
                          23: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (hash: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE=)
                          24: nZEoNnUzLuKA0B7d88rqkJt68iQ.roa (hash: fgBH81eM//7Gr5s15+AQ9fhhR3aq2fqtD8PopfREdZw=)
                          25: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (hash: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc=)
                          26: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (hash: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=)
                          27: yrWxpBzKxRScDYePiOpxdj3dkio.roa (hash: r3hoxSF07m6IvBnRvDQ9QwosuUzrrCxMbtV2SLeyuvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:5f:7e:65:cf:6e:af:98:d2:7d:ab:e6:ea:bf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Apr 17 01:00:44 2026 GMT
            Not After : Apr 18 01:00:44 2026 GMT
        Subject: CN=efa57457bbe58c00d736fe98e25d31b457f3c47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:aa:22:11:2a:c4:0c:76:34:82:70:9d:d5:
                    48:05:57:c5:89:93:64:70:1f:28:ed:e0:af:f1:fd:
                    f1:a2:cf:fb:a4:39:94:bf:f5:1e:d1:b5:c6:d3:fc:
                    28:03:bc:b6:d2:5a:97:92:51:e0:83:c9:e3:74:bf:
                    46:36:3e:1d:32:52:6c:ec:13:76:b8:f1:59:77:59:
                    b4:25:06:e7:7a:20:96:08:5c:ae:0f:11:36:0f:14:
                    7b:71:8f:98:29:02:26:c0:42:54:2b:ad:83:2d:22:
                    62:7f:2e:fe:c7:61:b9:fb:91:4e:64:c9:a3:3f:4b:
                    03:08:e1:4a:d1:c2:96:d3:57:26:cc:f0:75:20:80:
                    32:10:6f:cb:cb:2b:48:fa:00:e1:c0:2e:eb:f2:8f:
                    e7:cd:63:1e:c1:83:83:38:5c:16:3c:c0:bb:a9:6b:
                    8a:fe:2d:3b:78:f3:a2:90:9b:e0:16:e8:2d:8a:14:
                    5e:1d:29:36:a6:39:ad:a5:23:e8:79:93:c9:f6:fe:
                    83:f4:a3:f5:2a:29:8c:bd:93:c2:b1:6f:da:a6:f1:
                    75:19:5b:12:23:55:ad:ae:66:58:0f:e6:fe:aa:b7:
                    bc:b9:f4:96:03:3b:84:85:77:da:a4:77:3d:58:ed:
                    8d:d9:0c:3d:96:e4:d3:6f:41:b7:cc:a0:82:d1:65:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:74:57:BB:E5:8C:00:D7:36:FE:98:E2:5D:31:B4:57:F3:C4:7B
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:f9:a3:2a:17:c8:51:a7:dc:6d:f3:7d:40:e3:d2:7d:b3:
         34:bc:28:58:fa:8f:91:b6:80:41:0d:e1:19:26:a4:75:47:29:
         e0:4b:62:c2:20:f6:17:51:5e:5a:a7:a2:08:04:5c:e3:6e:8d:
         8f:60:cf:b4:25:9d:33:4f:c3:be:2d:05:67:e5:59:4e:f0:00:
         7f:2c:d4:95:2a:37:b8:76:75:8a:19:eb:48:5d:bc:b8:a0:ed:
         33:3a:a8:66:6b:74:b4:e2:79:e4:ed:93:b9:9c:72:ed:0d:6a:
         ad:5b:7b:61:ac:8c:cb:46:10:f2:25:ae:bf:77:25:c8:ad:05:
         92:32:8a:db:b7:17:f1:25:84:f7:bd:b7:99:88:d0:d0:b6:74:
         de:59:6a:18:bd:bb:e9:05:a5:39:86:77:99:b1:a0:9e:fb:3b:
         6b:b6:fb:a6:a0:16:10:7b:18:37:72:da:b3:34:2d:9f:9a:99:
         23:b5:43:91:6b:9b:99:3f:e6:ea:81:82:ec:99:a1:73:c5:4a:
         b4:61:4f:a2:37:96:89:e8:66:23:28:70:18:68:da:41:df:75:
         eb:ec:a9:08:ec:3d:02:94:98:bc:65:09:ac:2c:74:8f:7e:99:
         88:ea:ea:3c:5a:6b:99:8c:2e:4f:4e:4f:59:f9:3a:40:63:67:
         54:51:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:08 2026 by rpki-client