Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          cS+mwsuQXOH0GvR+0pH0cB9BqccIJaxlydlrQb4EAnY=
Subject key identifier:   30:B1:8F:C8:51:A7:CF:6F:7D:27:F1:04:2B:25:81:76:5A:50:53:BE
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       01A116E1388EFD38BEE95B81E90A532F683C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          1682
Signing time:             Wed 07 Oct 2026 15:00:21 +0000
Manifest this update:     Wed 07 Oct 2026 15:00:21 +0000
Manifest next update:     Thu 08 Oct 2026 15:00:21 +0000
Files and hashes:         1: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (hash: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA=)
                          2: 5-GtKhoAa66dioBZrpVFfqRz7cI.roa (hash: 8StcYCEG4rjyFat3WS2Tv/dBrTZvUN2GO2Qno0+qmVg=)
                          3: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (hash: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0=)
                          4: 8Yljs2OB2UpeVswZlK2LB-4Uetw.roa (hash: NVd9oAXVs6ce0r2uP+rDjBurYnux6ov6QULX0bgTlCc=)
                          5: 8YzhnSN10hTauaidvQ9SJyu3qro.roa (hash: FtXj7rMNyFmmjhAHs+HHxN9MAe9qfrbQfR9dwyX4aqc=)
                          6: CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa (hash: xeqybNdNDUhTz+vqC7eFdYvvA3AqqR+6Az4dsTt8u+E=)
                          7: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (hash: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=)
                          8: ENi_6t4-opAr9_a4vxGzFuCBblk.roa (hash: PEdUz15lPm1QtLlqU3VVR9fWrexpCofmdV5wAzrfN5E=)
                          9: I664kINdQYZZixjAjFJ2wff1nBk.roa (hash: DFrf3nmCfO170wrqgfcGuszwxV4XEHBmrCGavXVsdUM=)
                          10: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (hash: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k=)
                          11: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (hash: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA=)
                          12: QEhSXcwXsu0G-eTWLTcEW4Ss3Kw.roa (hash: 3hazU/kPvVBI6tMsprnBgK/LziRES3Sxxtlr+bH5YbI=)
                          13: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (hash: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c=)
                          14: RNDz_4tH9L_gf3FZK7wHn9W5JTw.roa (hash: iV+7oOHFOY9zS0+jnxTaMolInYSGv9N0+a/6Pd3g5JQ=)
                          15: Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa (hash: ig9la0Fl/sbfAliXhYYjjCFuvHdOCtk7Nkqph1vk7qg=)
                          16: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (hash: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA=)
                          17: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (hash: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=)
                          18: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: kFBOebzIDZhR0V5+kXOy3CnZigoYPl3GSJrJxcA1sMw=)
                          19: cFW2f7mYQVMT0WQiKum-84YT7Tg.roa (hash: NYhMRFKPP2MvfbOtQ4xBGxpe8K5LETaIrUVLB8Q0RF0=)
                          20: iENB1Spx9V_JeHkY-UbptgejZiE.roa (hash: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=)
                          21: kgLefYWiNGknOidoKgqI74KkRkM.roa (hash: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps=)
                          22: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (hash: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE=)
                          23: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (hash: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc=)
                          24: rjAJbLG2Zw4o_Pjxfe1qJfc4HJE.roa (hash: PgUAFIkeOTWwErAjDkjVk0mJqFSxps5oqsCSRQBUIgw=)
                          25: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (hash: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:e1:38:8e:fd:38:be:e9:5b:81:e9:0a:53:2f:68:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Oct  7 15:00:21 2026 GMT
            Not After : Oct  8 15:00:21 2026 GMT
        Subject: CN=30b18fc851a7cf6f7d27f1042b2581765a5053be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:f3:4d:5f:d2:f3:e2:b1:9e:80:3a:40:00:
                    44:7d:7b:f8:97:cf:21:fa:c3:fd:e9:df:e6:c4:d2:
                    da:ab:bb:13:3f:3e:61:11:3a:74:0c:f9:47:37:5b:
                    73:18:c4:93:30:28:3c:71:ea:4b:91:cd:ca:58:f3:
                    a2:ee:02:f4:07:3b:e0:d3:ac:91:7e:4c:a2:b2:23:
                    f3:47:1e:ac:d9:e0:5a:da:60:d4:63:f5:9e:a7:20:
                    65:8f:e6:9d:32:ef:c2:aa:ae:e5:31:90:cb:b3:cc:
                    ad:42:34:f5:82:fe:b2:fb:7e:d1:23:3f:4a:c8:4a:
                    32:2a:0c:11:f6:9e:9f:fb:fe:51:43:fd:c4:e8:44:
                    11:6c:c7:2a:58:ca:b3:0c:dc:3e:b2:9e:f7:ac:e9:
                    9d:b7:67:56:f5:6b:70:13:38:c9:89:9a:1e:de:8b:
                    d4:3b:9a:82:1d:db:7e:55:f6:47:6d:ec:41:30:b4:
                    ae:b2:af:a8:c0:17:94:14:9f:06:f7:42:e9:12:00:
                    84:1b:40:81:2f:56:f9:0a:a2:a6:11:e6:c8:e6:23:
                    bf:95:16:c5:da:1b:51:a7:13:32:32:cd:6b:f5:eb:
                    c4:86:55:90:82:74:fb:b7:57:f0:dd:09:dc:a3:4d:
                    00:d8:f7:0e:11:3d:b3:9d:d4:cd:51:cb:5c:68:2c:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B1:8F:C8:51:A7:CF:6F:7D:27:F1:04:2B:25:81:76:5A:50:53:BE
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:51:db:06:10:d9:ca:98:83:36:fd:3f:8e:ee:db:69:a8:
         8f:72:4e:b1:58:a8:74:18:1f:41:49:44:86:6e:d6:5e:be:9c:
         1d:04:9d:d0:2b:bf:95:82:f0:56:d1:b3:76:44:90:be:14:e4:
         b4:41:e6:45:43:7c:e0:e6:30:40:36:fb:be:b3:34:b3:48:82:
         a0:ca:f3:a8:64:c3:8f:fc:cb:86:7e:66:90:3a:5d:df:87:e7:
         85:07:bf:2f:81:c4:ca:b4:b2:11:f6:f3:a6:ff:ad:4c:1f:3d:
         8b:80:87:cc:7a:40:07:35:56:8a:a9:cb:d0:73:97:2c:11:62:
         84:e3:06:9c:d2:ad:84:1f:be:d1:b3:1f:94:f2:65:f5:e5:ae:
         46:83:7d:cc:dd:ad:04:eb:92:fe:aa:e8:16:5e:96:8f:8d:ef:
         b5:4a:f4:87:86:6f:f9:be:5e:b1:88:de:a6:6d:6e:6d:74:12:
         54:f6:9f:98:36:37:7c:c8:63:72:b1:f0:7a:1e:ee:63:5b:fa:
         ae:de:db:a9:ba:e7:00:3f:01:11:3f:58:93:21:d9:0f:dc:ad:
         85:c5:e1:85:fb:dc:94:4a:01:79:43:49:45:87:89:7e:f6:3f:
         a6:5b:0b:35:33:75:db:c6:96:d0:97:45:5e:68:6f:37:c6:fe:
         8c:10:aa:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEW4TiO/Ti+6VuB6QpTL2g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjYxMDA3MTUwMDIxWhcNMjYxMDA4MTUwMDIxWjAzMTEwLwYDVQQD
EygzMGIxOGZjODUxYTdjZjZmN2QyN2YxMDQyYjI1ODE3NjVhNTA1M2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFjzTV/S8+KxnoA6QABEfXv4l88h
+sP96d/mxNLaq7sTPz5hETp0DPlHN1tzGMSTMCg8cepLkc3KWPOi7gL0Bzvg06yR
fkyisiPzRx6s2eBa2mDUY/WepyBlj+adMu/Cqq7lMZDLs8ytQjT1gv6y+37RIz9K
yEoyKgwR9p6f+/5RQ/3E6EQRbMcqWMqzDNw+sp73rOmdt2dW9WtwEzjJiZoe3ovU
O5qCHdt+VfZHbexBMLSusq+owBeUFJ8G90LpEgCEG0CBL1b5CqKmEebI5iO/lRbF
2htRpxMyMs1r9evEhlWQgnT7t1fw3Qnco00A2PcOET2zndTNUctcaCxpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCxj8hRp89vfSfxBCslgXZaUFO+MB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7ZR2wYQ
2cqYgzb9P47u22moj3JOsViodBgfQUlEhm7WXr6cHQSd0Cu/lYLwVtGzdkSQvhTk
tEHmRUN84OYwQDb7vrM0s0iCoMrzqGTDj/zLhn5mkDpd34fnhQe/L4HEyrSyEfbz
pv+tTB89i4CHzHpABzVWiqnL0HOXLBFihOMGnNKthB++0bMflPJl9eWuRoN9zN2t
BOuS/qroFl6Wj43vtUr0h4Zv+b5esYjepm1ubXQSVPafmDY3fMhjcrHweh7uY1v6
rt7bqbrnAD8BET9YkyHZD9ythcXhhfvclEoBeUNJRYeJfvY/plsLNTN128aW0JdF
XmhvN8b+jBCqIw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 20:46:58 2026 by rpki-client