Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File:                     ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier:          pI0oZTXKOei83KrmCWm/aCahQsog8/zWO6dlL9KOTdY=
Subject key identifier:   A7:D4:C6:F0:C7:29:F0:39:1D:6D:A8:09:B0:65:2C:D9:8A:C8:8A:C3
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer:       /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial:       01A0C3A021562E60F92CDF6C8C8F1D7F78D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number:          0607
Signing time:             Mon 21 Sep 2026 11:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:46 +0000
Files and hashes:         1: 1WjvRzOKhnD2a533QX-zWGhy6mU.roa (hash: H5qbHbDAL7jdx9T9KEl6Xakz8nWIjJ0cE1oQa7xKVLA=)
                          2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=)
                          3: 3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa (hash: XNNIE44ge5HMxwFA2gOqxuT00NVaU1du4qDwv9gF7DE=)
                          4: 4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa (hash: N/6K00b1BuFhTw/CFjj1QlwHlKUxym0tqK2UkGVKAtg=)
                          5: BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa (hash: 05vt9fKeq/KeqsC+KCtUCmGwZwle34vu62iXl6HflOY=)
                          6: HTNYR2yr94a8EGiK6hAbvtY6o6k.roa (hash: KMWU4G6lDxx80Y3CEw+h1nuvz/CTjsjL+YK1q+mIGr0=)
                          7: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=)
                          8: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=)
                          9: Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa (hash: LJOqk2hOPW4zF0QKMT6vQWzbYu9x4wpSjNeypKNolNc=)
                          10: Nb9JZyAefPbjpxi2cVC2-yfzww8.roa (hash: jl0bmDnzSH6frV+fkRxoTDwv3W5rPCZjAk979Fat9xw=)
                          11: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=)
                          12: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=)
                          13: SAdG_ltq21So6we7PAnL5y8GnAE.roa (hash: vdA/VKJ3jIWlwu5h51e9/T2jAaSzyxtrlOoDwppTFZo=)
                          14: TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa (hash: LvtCwiSgCnn6r8P4XA2+zpyeRQdDCd4zCmE86m3gSlM=)
                          15: XlpVEpCaKbvVp_iIY2abwrGuU7A.roa (hash: PuO/riDrTsvlx5rAd1GX11Jvzo3pxxNGOivQ4nq5cYA=)
                          16: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=)
                          17: ZYcu8wrfIbufE6Iy8VMFUuGyAuY.roa (hash: UZXVUv3S3cNg6npRSvbm/y2Rp2w5vhtlG82p6sftGJ8=)
                          18: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=)
                          19: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=)
                          20: ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa (hash: w3m4Zbf/SMXuCAD+NsICucoE5BD2LNv3NWgrAZRXOqQ=)
                          21: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=)
                          22: hH36JJO_rAsnohFls8GFE7NlzVk.roa (hash: jYlrJWAsZ9W20ZvqcFDoHNdl1/TJ/d5Ssc/5Jh190NE=)
                          23: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=)
                          24: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=)
                          25: pViHmwqQeVqQnj5hkym3ThYCYhU.roa (hash: rbWNEzeG5z5UiJBRWTWbbSTYvlpCEEASp5X1FRCLxnc=)
                          26: qlVHtidyMtTQ064ypejRJRTrhIs.roa (hash: 4mWiwniRAL4tXa87dTnfBRs6/ACyraRAiFOgqpNYILY=)
                          27: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=)
                          28: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=)
                          29: spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa (hash: BXi3IKk77rzMZn4UUQVhpo+TVx8nOmwNympB1D3a7c8=)
                          30: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=)
                          31: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=)
                          32: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: sGrgVXuAuBL2Y6Jt/BFEAb26J3Fa3ADrTPlNMVIkZFI=)
                          33: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:a0:21:56:2e:60:f9:2c:df:6c:8c:8f:1d:7f:78:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
        Validity
            Not Before: Sep 21 11:00:46 2026 GMT
            Not After : Sep 22 11:00:46 2026 GMT
        Subject: CN=a7d4c6f0c729f0391d6da809b0652cd98ac88ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:a2:4b:fe:44:58:d7:bb:4f:64:8d:8a:d8:
                    a9:6a:00:58:a8:87:4e:74:ac:4d:42:9e:eb:19:36:
                    7e:42:95:36:5e:66:1c:33:a1:30:d5:6f:20:2f:a4:
                    15:7f:41:78:8d:74:89:0e:f4:02:f6:a9:d6:dd:cc:
                    6e:55:30:36:8f:70:e7:66:6c:94:e2:2e:cf:92:b3:
                    1e:4e:30:72:20:51:95:98:33:f0:c0:24:0d:ac:0c:
                    c5:7a:88:f6:77:a1:88:3d:4a:df:b9:77:fd:ac:7e:
                    c3:f8:fb:3d:a9:5c:07:1f:20:88:15:df:00:f1:50:
                    60:e0:80:14:f2:71:68:70:70:da:e4:75:5b:7f:75:
                    78:48:65:f1:8b:71:ba:da:54:d1:14:56:c3:8b:c9:
                    c1:40:ac:5c:20:61:fb:b9:f2:89:c6:14:ec:04:1f:
                    d8:c8:a0:73:f9:54:94:c0:af:c3:6e:f5:42:88:df:
                    6c:13:0a:c4:85:54:15:62:a7:a1:ff:c7:e3:45:43:
                    3d:3a:52:dd:58:1a:81:51:2a:86:84:f6:9b:5c:bb:
                    5c:86:b0:82:9b:d8:22:20:d1:82:a4:36:a1:3f:52:
                    54:5b:93:24:ad:c1:3f:24:88:bf:3b:f0:65:7b:eb:
                    62:64:54:9c:e8:f8:d5:87:15:19:c9:9a:b2:cc:b9:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:C6:F0:C7:29:F0:39:1D:6D:A8:09:B0:65:2C:D9:8A:C8:8A:C3
            X509v3 Authority Key Identifier:
                keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:39:37:bc:ec:72:81:3a:34:16:2f:fb:70:ac:53:bc:83:
         2e:00:6f:5d:98:23:e0:15:95:ea:dc:11:27:f1:a5:6d:11:38:
         9c:55:6e:81:9c:5b:4a:10:14:07:96:24:6d:db:ba:6c:40:fd:
         0c:da:01:5c:15:d8:7e:09:bb:09:0f:fa:fe:ca:35:98:e6:76:
         55:03:ab:af:e5:66:81:91:39:6a:00:1f:83:7e:23:86:2e:ab:
         81:62:d8:ba:f4:0f:d8:2b:1f:aa:88:17:ed:9a:f2:3d:f2:fe:
         4f:02:30:5e:92:47:78:dc:33:72:00:ed:3a:27:02:b6:98:74:
         9f:8e:09:aa:85:67:ce:d4:4e:f8:53:98:ae:e3:70:bc:8f:4b:
         59:0e:1a:d2:43:44:e7:6c:d8:65:4b:83:16:d4:1f:ea:39:44:
         92:0f:51:35:24:02:4a:ff:a0:b2:cd:2a:1f:9c:3e:d2:3e:d8:
         ed:04:b4:46:db:dd:80:d1:c2:15:1f:41:a1:bb:38:55:e4:b6:
         75:e9:c8:1f:eb:a3:3e:27:b6:19:18:e5:06:e1:55:99:3f:34:
         4b:ef:93:eb:e8:06:af:0c:6d:62:c1:29:e7:32:df:1a:d3:a3:
         ed:f2:84:e4:aa:74:ac:53:4b:0b:87:a7:19:98:ef:32:8c:82:
         6b:9c:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:01:20 2026 by rpki-client