Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File:                     ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier:          Da9jqJjL3rsxQ80kW4gKn7wY+bdu+96tZ9CmHl/vxRY=
Subject key identifier:   94:E4:F6:43:54:38:BA:D1:5B:95:6C:2E:CF:CF:19:44:A3:26:E0:13
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer:       /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial:       019EC1121A53B7B16C471EAD901D35932C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number:          04EF
Signing time:             Sat 13 Jun 2026 13:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:49 +0000
Files and hashes:         1: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=)
                          2: 4IdsjnThncy8CG7B4TEdC8OXYTg.roa (hash: qFz8bZzW9j+BuaK9Mq/+zPbN9lxrJMGuuYqn1jNVi7U=)
                          3: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=)
                          4: BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa (hash: 05vt9fKeq/KeqsC+KCtUCmGwZwle34vu62iXl6HflOY=)
                          5: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=)
                          6: Hn8PQyjLrgS6wf-4GZkEHuiPt8I.roa (hash: B1KDHu5Q7IVTvBJkPx3Mc8M6o2s+jQ1JcT/y4p7LFng=)
                          7: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=)
                          8: JmZyr_HiGWhXrQT4G35RdzY5FBo.roa (hash: 7gA8L5P9/nr9jLYxlFbsO9wNhD1sAVMuCpL277mztEA=)
                          9: Oy1Vr9hwyTh0-0iHW94GDDDFmYs.roa (hash: 5fFerRCf8VBYV4VrGw9Oh25817KoFKu/y2AnqGnWOXw=)
                          10: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=)
                          11: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=)
                          12: UiRIOFkRgvabFdVCAz-FrcovEjw.roa (hash: +1uBi+0I8q7iwlz/Y/VRhlkVw4+oWOkdSjW4jigeH+o=)
                          13: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=)
                          14: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=)
                          15: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=)
                          16: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=)
                          17: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=)
                          18: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=)
                          19: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=)
                          20: pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa (hash: DDiufBot2z3oX+2RZxG2JEHDnkreGqKnf5XhZxIEUqQ=)
                          21: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=)
                          22: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=)
                          23: uv5hOM2EL0ZROQexv5lATLPcqUQ.roa (hash: AQwzgVCBYATPgW2R9QHaQmDekCRO+HGMVqXoJbA+k+A=)
                          24: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=)
                          25: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=)
                          26: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: PKDyWivS8KNkFbsCtlPCiWJqDOuW6wPWTA8eWujL/MI=)
                          27: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:1a:53:b7:b1:6c:47:1e:ad:90:1d:35:93:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
        Validity
            Not Before: Jun 13 13:00:49 2026 GMT
            Not After : Jun 14 13:00:49 2026 GMT
        Subject: CN=94e4f6435438bad15b956c2ecfcf1944a326e013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:51:65:69:5a:86:b1:9c:f7:9d:d6:27:1e:
                    34:fe:d6:8e:20:30:61:00:32:ad:89:85:65:3a:61:
                    54:e1:52:54:b8:a6:27:37:e1:54:bb:0e:38:e7:22:
                    cc:7f:87:1b:de:fe:52:65:14:5b:b5:e3:bc:f7:62:
                    0e:e3:4e:d5:05:b2:7c:42:66:d5:e0:ce:e7:63:e6:
                    de:d9:50:cf:c3:c4:de:d2:d5:a6:8e:f6:70:42:2b:
                    05:d3:96:c7:d2:e8:5b:13:44:97:e2:41:69:db:01:
                    db:66:7f:57:68:d9:81:fb:6c:ab:31:05:64:2e:36:
                    91:85:33:50:3b:a2:76:a5:95:36:54:da:fb:b8:1f:
                    59:77:c7:5f:30:cc:e6:a4:d7:a7:0a:ce:87:ed:91:
                    b5:f7:24:f5:5a:f4:cb:7a:83:4f:53:27:c6:5c:82:
                    ff:f1:38:06:ba:d3:02:d9:8d:62:e1:43:ef:6c:2a:
                    ac:18:72:a8:11:96:74:cc:d7:7b:47:63:7e:88:5b:
                    18:9b:48:33:7e:da:5c:c8:02:81:d2:be:d0:df:e9:
                    f6:0f:74:44:5b:8f:dc:82:4e:3b:eb:ea:a4:aa:52:
                    b9:19:1d:3b:54:3d:18:a7:e9:4a:1e:0f:ae:60:1b:
                    58:3b:e1:81:dd:f8:af:53:71:50:d9:5d:1f:07:78:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:F6:43:54:38:BA:D1:5B:95:6C:2E:CF:CF:19:44:A3:26:E0:13
            X509v3 Authority Key Identifier:
                keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:71:b1:37:67:e7:60:2a:d6:b2:56:d7:31:bf:45:f2:3e:
         c4:3f:cb:a4:89:29:e4:40:7a:3f:80:ac:6f:d7:72:32:5e:65:
         79:ef:a9:eb:b5:cd:fb:3c:db:76:ca:a2:d1:19:26:fa:99:66:
         46:29:f8:28:a3:d9:80:97:2f:7f:ba:0d:99:ec:29:df:f1:b1:
         d9:e8:d1:3c:51:d2:b1:78:41:14:ff:c0:69:c0:c5:54:5b:ea:
         0d:09:6b:27:b0:de:39:14:d6:75:11:6c:83:f0:77:29:30:67:
         05:d6:27:4a:d9:0d:3a:6b:54:6d:fc:77:d0:de:2a:22:9a:e6:
         9b:7a:6d:4d:12:38:03:08:6f:5f:16:7d:44:c3:3a:19:d7:b8:
         1e:ce:bb:e4:55:63:f5:c7:a9:05:8c:cf:f8:57:86:09:f4:64:
         3b:f6:79:7c:19:05:f6:ea:70:3d:0f:1b:68:23:cf:73:fd:aa:
         f2:cc:ba:a0:c6:76:86:0e:e6:9c:3d:87:18:59:ce:9b:83:61:
         40:67:f0:fc:48:e3:5c:8c:7d:38:63:ad:55:d7:e3:c8:32:88:
         3d:2f:e1:9d:f8:e8:4d:28:6a:43:26:ac:84:28:ba:b5:13:2a:
         dc:2b:33:18:9d:45:cd:3c:fc:23:b5:6c:39:09:1f:62:5f:5d:
         f3:7e:bb:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEhpTt7FsRx6tkB01kyydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYwNjEzMTMwMDQ5WhcNMjYwNjE0MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg5NGU0ZjY0MzU0MzhiYWQxNWI5NTZjMmVjZmNmMTk0NGEzMjZlMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshZRZWlahrGc953WJx40/taOIDBh
ADKtiYVlOmFU4VJUuKYnN+FUuw445yLMf4cb3v5SZRRbteO892IO407VBbJ8QmbV
4M7nY+be2VDPw8Te0tWmjvZwQisF05bH0uhbE0SX4kFp2wHbZn9XaNmB+2yrMQVk
LjaRhTNQO6J2pZU2VNr7uB9Zd8dfMMzmpNenCs6H7ZG19yT1WvTLeoNPUyfGXIL/
8TgGutMC2Y1i4UPvbCqsGHKoEZZ0zNd7R2N+iFsYm0gzftpcyAKB0r7Q3+n2D3RE
W4/cgk476+qkqlK5GR07VD0Yp+lKHg+uYBtYO+GB3fivU3FQ2V0fB3imCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTk9kNUOLrRW5VsLs/PGUSjJuATMB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomRxsTdn
52Aq1rJW1zG/RfI+xD/LpIkp5EB6P4Csb9dyMl5lee+p67XN+zzbdsqi0Rkm+plm
Rin4KKPZgJcvf7oNmewp3/Gx2ejRPFHSsXhBFP/AacDFVFvqDQlrJ7DeORTWdRFs
g/B3KTBnBdYnStkNOmtUbfx30N4qIprmm3ptTRI4AwhvXxZ9RMM6Gde4Hs675FVj
9cepBYzP+FeGCfRkO/Z5fBkF9upwPQ8baCPPc/2q8sy6oMZ2hg7mnD2HGFnOm4Nh
QGfw/EjjXIx9OGOtVdfjyDKIPS/hnfjoTShqQyashCi6tRMq3CszGJ1FzTz8I7Vs
OQkfYl9d8367dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:55 2026 by rpki-client