Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File:                     ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier:          WPwitcRuoh0WyuUorXetgoDE9OjqS7V8UjsuoHO6eaQ=
Subject key identifier:   E1:ED:40:FF:FB:93:A0:49:00:70:79:1B:3B:54:FC:D4:B9:9C:47:ED
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer:       /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial:       019FA906B0FDA8C00B14EDD3718B72A736DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number:          056A
Signing time:             Tue 28 Jul 2026 14:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:15 +0000
Files and hashes:         1: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=)
                          2: 3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa (hash: XNNIE44ge5HMxwFA2gOqxuT00NVaU1du4qDwv9gF7DE=)
                          3: 4IdsjnThncy8CG7B4TEdC8OXYTg.roa (hash: qFz8bZzW9j+BuaK9Mq/+zPbN9lxrJMGuuYqn1jNVi7U=)
                          4: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=)
                          5: BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa (hash: 05vt9fKeq/KeqsC+KCtUCmGwZwle34vu62iXl6HflOY=)
                          6: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=)
                          7: Hn8PQyjLrgS6wf-4GZkEHuiPt8I.roa (hash: B1KDHu5Q7IVTvBJkPx3Mc8M6o2s+jQ1JcT/y4p7LFng=)
                          8: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=)
                          9: JmZyr_HiGWhXrQT4G35RdzY5FBo.roa (hash: 7gA8L5P9/nr9jLYxlFbsO9wNhD1sAVMuCpL277mztEA=)
                          10: Oy1Vr9hwyTh0-0iHW94GDDDFmYs.roa (hash: 5fFerRCf8VBYV4VrGw9Oh25817KoFKu/y2AnqGnWOXw=)
                          11: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=)
                          12: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=)
                          13: SAdG_ltq21So6we7PAnL5y8GnAE.roa (hash: vdA/VKJ3jIWlwu5h51e9/T2jAaSzyxtrlOoDwppTFZo=)
                          14: XoFzh61HvXn8N4_uYDhIsdZ7-FM.roa (hash: RfmrC2Sb0knZBCFUN5W+wRzUQ+Ae+sn1nnBRNPAHalI=)
                          15: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=)
                          16: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=)
                          17: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=)
                          18: ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa (hash: w3m4Zbf/SMXuCAD+NsICucoE5BD2LNv3NWgrAZRXOqQ=)
                          19: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=)
                          20: hH36JJO_rAsnohFls8GFE7NlzVk.roa (hash: jYlrJWAsZ9W20ZvqcFDoHNdl1/TJ/d5Ssc/5Jh190NE=)
                          21: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=)
                          22: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=)
                          23: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=)
                          24: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=)
                          25: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=)
                          26: spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa (hash: BXi3IKk77rzMZn4UUQVhpo+TVx8nOmwNympB1D3a7c8=)
                          27: uv5hOM2EL0ZROQexv5lATLPcqUQ.roa (hash: AQwzgVCBYATPgW2R9QHaQmDekCRO+HGMVqXoJbA+k+A=)
                          28: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=)
                          29: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=)
                          30: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: gE+1F9VcJ9Atp93GCk/9HtTH9xnhohD8ognKBcN4kwU=)
                          31: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:b0:fd:a8:c0:0b:14:ed:d3:71:8b:72:a7:36:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
        Validity
            Not Before: Jul 28 14:00:15 2026 GMT
            Not After : Jul 29 14:00:15 2026 GMT
        Subject: CN=e1ed40fffb93a0490070791b3b54fcd4b99c47ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:4d:be:a5:09:32:00:c7:ff:f2:88:52:6b:
                    5a:e6:26:55:75:13:c7:2e:e2:d3:c5:d3:6f:79:68:
                    9d:f0:be:0b:bc:53:04:17:b0:7e:a9:9d:10:0e:e5:
                    df:c5:2b:c7:c6:30:21:8d:b6:4c:73:8b:e0:6d:57:
                    48:a7:23:a6:65:fb:34:0c:39:55:87:de:36:f2:32:
                    f0:bc:9e:d2:ab:63:b2:7a:81:67:13:04:33:d5:0b:
                    4a:bf:e6:09:4e:58:7f:0b:de:32:e2:25:ba:90:14:
                    90:46:c4:6a:df:93:31:2c:ee:f0:fb:bc:6c:48:90:
                    e2:ad:bb:79:67:95:27:e8:4e:08:c1:6c:b9:dd:59:
                    4e:a9:88:6a:68:e6:7e:2f:a1:1a:19:da:f4:d3:c7:
                    c5:ab:75:34:bf:ac:8f:5e:e2:67:38:82:62:e0:10:
                    5c:8c:38:e7:d0:24:02:70:5f:8a:3d:59:1e:b8:9c:
                    8d:3f:d5:6b:6c:a9:0b:43:42:ff:30:09:e3:07:70:
                    24:6f:cb:fc:31:78:56:13:0c:88:04:6e:52:bb:35:
                    28:e4:5a:61:41:5a:64:16:01:8c:3b:7b:e3:87:3c:
                    e9:95:3d:61:66:0a:10:f8:40:35:23:0f:bd:85:b0:
                    79:8d:77:0d:d1:37:03:33:4e:9a:05:5d:ec:66:f1:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:ED:40:FF:FB:93:A0:49:00:70:79:1B:3B:54:FC:D4:B9:9C:47:ED
            X509v3 Authority Key Identifier:
                keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:63:ab:f0:af:b6:93:de:59:1f:01:83:d0:37:c8:cd:18:e4:
         2e:b8:3f:57:e2:90:25:9e:49:8a:81:c7:6b:67:6a:1f:1f:1d:
         00:3c:db:35:77:44:42:d7:c4:26:20:de:06:f2:4a:a4:33:4f:
         3b:0e:19:3d:6a:40:58:44:d7:41:ed:c2:fd:42:1a:b5:1c:d9:
         4c:26:04:e3:2b:e9:f3:b3:6f:c8:62:59:a1:91:bd:c1:84:9a:
         cf:e1:bc:18:99:4a:ad:a7:c8:33:23:06:d4:b3:52:ec:ce:69:
         2e:48:c8:e2:d2:41:6e:59:7c:35:f0:8a:4c:7d:63:85:0b:dd:
         17:6e:53:9d:d2:96:96:f4:f5:1b:ce:8b:1a:11:62:5b:d4:52:
         8b:7a:f5:32:c2:44:a7:a0:15:bb:9d:6b:2c:d8:23:da:d7:de:
         5a:e9:59:c4:d3:80:0e:ca:83:f6:6e:a9:59:7d:b0:30:08:72:
         51:f0:b1:99:6b:4d:5a:a7:06:22:7d:17:a2:bb:2d:06:7a:a0:
         98:21:3a:fd:da:b6:56:97:26:a0:d3:f7:b0:fe:75:b6:06:41:
         03:62:9d:9f:27:3f:20:41:a5:fa:eb:14:7c:1e:ad:6f:7d:e3:
         21:52:c9:78:ea:67:02:53:16:dc:82:c6:e4:c4:04:bb:5a:bb:
         72:38:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:37 2026 by rpki-client