Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File:                     YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier:          a+U/HpQsF0VmB48YQ425bOuxtKwRrfEdqKnV7QY3OWE=
Subject key identifier:   F7:48:0A:2C:67:5E:56:40:49:BA:38:63:17:97:41:2A:96:C1:7E:49
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       019FA82B89B076C51628A28D8169991781AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number:          1A3A
Signing time:             Tue 28 Jul 2026 10:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:53 +0000
Files and hashes:         1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=)
                          2: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=)
                          3: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=)
                          4: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=)
                          5: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=)
                          6: 9arIJVhxg9fd2PF0Zl1dv4bsaoM.roa (hash: iPeEBnua73nnKIEaWM/yfK+tuSM8JEEgKrGQmXc9Qsk=)
                          7: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=)
                          8: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=)
                          9: JNtINXdphOTbO4iskyGPH_VuIks.roa (hash: NN2JsXnSppDpEcAl5C3/gtPvDxz/VnRmnxMooC0SiXs=)
                          10: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=)
                          11: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=)
                          12: OvfyWv9UIqAtBl_nsQu2JTpIQQo.roa (hash: +BnAMt/KQdaB6b7HaQTEsRH6kJs2SPlugYpLEy1NY2o=)
                          13: OwOGkj3g_m-8rP4VEqsr21ez3t0.roa (hash: kWNy3fxPtEntltlLWADiH7P4BLQywgI40xILmr+8iRA=)
                          14: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=)
                          15: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=)
                          16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=)
                          17: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (hash: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=)
                          18: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: x0EGIsDKVWWgq1bvGSXILI5gubxPN/xSQX9CiTj+AEY=)
                          19: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=)
                          20: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=)
                          21: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=)
                          22: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=)
                          23: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=)
                          24: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=)
                          25: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=)
                          26: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=)
                          27: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=)
                          28: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=)
                          29: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=)
                          30: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:89:b0:76:c5:16:28:a2:8d:81:69:99:17:81:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Jul 28 10:00:53 2026 GMT
            Not After : Jul 29 10:00:53 2026 GMT
        Subject: CN=f7480a2c675e564049ba38631797412a96c17e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:54:e1:8c:c2:b4:a9:62:b1:f9:b8:08:f1:
                    13:95:47:e3:a2:7a:32:70:04:f2:4c:10:1e:fd:46:
                    77:d8:37:f9:b5:f8:91:9f:61:26:e1:60:57:4e:6e:
                    07:49:72:25:51:b4:e4:63:6e:6a:0d:7b:9a:5a:5b:
                    0b:8d:08:6a:43:a9:70:9a:b6:91:05:36:60:af:73:
                    ad:ba:7f:fc:2d:a2:50:2e:7c:23:23:53:2c:3b:73:
                    10:de:56:60:39:69:c1:26:ff:f5:3a:07:5d:3f:5c:
                    e3:36:fb:28:d7:68:ce:5f:cd:b8:8e:3c:2f:58:f9:
                    af:f9:4d:eb:84:b3:8d:2e:e9:ef:b6:ea:23:f4:74:
                    c9:09:3c:b0:03:fd:89:eb:a7:94:8a:c5:fc:62:9f:
                    1e:30:1d:1e:a1:bf:9d:71:57:76:6a:7d:4a:a3:46:
                    bb:30:9e:ce:73:8f:6a:a2:48:8d:3a:03:77:7d:39:
                    99:ac:4b:47:17:6f:6a:e6:34:d6:8f:38:5a:88:66:
                    5f:41:63:d3:d0:08:dd:31:7f:35:6d:09:ae:f5:86:
                    7b:55:10:2a:19:92:be:03:3a:68:b1:bd:25:c8:57:
                    0c:f9:17:d8:bc:15:a5:7a:2d:a0:0d:d9:28:9f:ef:
                    0e:79:bc:a0:a7:4b:ee:bb:ea:d5:5c:d1:45:e9:84:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:48:0A:2C:67:5E:56:40:49:BA:38:63:17:97:41:2A:96:C1:7E:49
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:b5:20:86:29:f4:08:ea:86:26:7f:0a:c2:90:1e:8e:7b:
         9f:a8:ef:09:9c:58:fc:27:78:7c:64:68:77:fa:95:15:f7:1e:
         19:12:22:f7:57:bd:b2:af:f8:6c:2c:7d:4d:f6:c5:8e:98:38:
         75:8d:51:4e:30:4f:b3:a3:c6:8b:f6:76:2d:3a:48:6e:73:a2:
         10:bd:fe:32:38:bf:9d:2d:e2:81:3b:d1:fe:62:54:fc:2b:c7:
         b2:b8:c7:26:1a:3b:4b:04:56:f9:e1:ee:06:b5:fb:9f:82:9b:
         f0:9c:ee:c8:6c:a0:79:3e:8b:7d:7d:77:7d:90:56:7a:b3:61:
         c1:f2:9e:b5:25:96:01:78:1e:7d:15:8f:a2:de:82:28:8e:bc:
         bd:40:9c:8a:f8:89:9f:ac:c2:0b:d6:10:62:c6:a1:04:0b:85:
         d9:c1:77:d0:a9:bd:35:fa:c1:00:ba:f9:b3:5e:1e:13:c5:1e:
         ee:46:01:86:1e:ff:8b:3d:0e:15:61:10:e3:7b:6c:8c:3f:23:
         79:75:3b:9e:5a:6f:d6:76:46:5c:2b:c2:2a:25:26:90:38:01:
         90:53:75:5e:c9:12:e5:6f:24:e4:0f:b3:b8:07:c8:2d:47:e6:
         8b:f8:6c:39:1f:2f:ac:d3:02:5b:ba:04:bb:7e:8c:1d:3c:d2:
         11:b9:2a:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK4mwdsUWKKKNgWmZF4GtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwNzI4MTAwMDUzWhcNMjYwNzI5MTAwMDUzWjAzMTEwLwYDVQQD
EyhmNzQ4MGEyYzY3NWU1NjQwNDliYTM4NjMxNzk3NDEyYTk2YzE3ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknpU4YzCtKlisfm4CPETlUfjonoy
cATyTBAe/UZ32Df5tfiRn2Em4WBXTm4HSXIlUbTkY25qDXuaWlsLjQhqQ6lwmraR
BTZgr3Otun/8LaJQLnwjI1MsO3MQ3lZgOWnBJv/1OgddP1zjNvso12jOX824jjwv
WPmv+U3rhLONLunvtuoj9HTJCTywA/2J66eUisX8Yp8eMB0eob+dcVd2an1Ko0a7
MJ7Oc49qokiNOgN3fTmZrEtHF29q5jTWjzhaiGZfQWPT0AjdMX81bQmu9YZ7VRAq
GZK+Azposb0lyFcM+RfYvBWlei2gDdkon+8Oebygp0vuu+rVXNFF6YQCiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdICixnXlZASbo4YxeXQSqWwX5JMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMau1IIYp
9AjqhiZ/CsKQHo57n6jvCZxY/Cd4fGRod/qVFfceGRIi91e9sq/4bCx9TfbFjpg4
dY1RTjBPs6PGi/Z2LTpIbnOiEL3+Mji/nS3igTvR/mJU/CvHsrjHJho7SwRW+eHu
BrX7n4Kb8JzuyGygeT6LfX13fZBWerNhwfKetSWWAXgefRWPot6CKI68vUCciviJ
n6zCC9YQYsahBAuF2cF30Km9NfrBALr5s14eE8Ue7kYBhh7/iz0OFWEQ43tsjD8j
eXU7nlpv1nZGXCvCKiUmkDgBkFN1XskS5W8k5A+zuAfILUfmi/hsOR8vrNMCW7oE
u36MHTzSEbkqVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:09 2026 by rpki-client