Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          HJ2B8MgbdrHjn3zeFArzRqP3QYqL3KApZT0DcPmivF0=
Subject key identifier:   4B:23:90:09:A1:19:57:02:F5:5E:B3:98:68:65:1F:14:8E:99:E1:5B
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       01A001382BDC2AD7EA518B4B7C08632782CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          15F2
Signing time:             Fri 14 Aug 2026 17:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:53 +0000
Files and hashes:         1: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (hash: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA=)
                          2: 5-GtKhoAa66dioBZrpVFfqRz7cI.roa (hash: 8StcYCEG4rjyFat3WS2Tv/dBrTZvUN2GO2Qno0+qmVg=)
                          3: 73GQds5O9lYETaz_JvZJg5MtNDc.roa (hash: 5CnDcaJnAh40dI/cXcg78sdklFt4ZI6jaj6cDvX3nbI=)
                          4: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (hash: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0=)
                          5: 8YzhnSN10hTauaidvQ9SJyu3qro.roa (hash: FtXj7rMNyFmmjhAHs+HHxN9MAe9qfrbQfR9dwyX4aqc=)
                          6: CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa (hash: xeqybNdNDUhTz+vqC7eFdYvvA3AqqR+6Az4dsTt8u+E=)
                          7: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (hash: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=)
                          8: ENi_6t4-opAr9_a4vxGzFuCBblk.roa (hash: PEdUz15lPm1QtLlqU3VVR9fWrexpCofmdV5wAzrfN5E=)
                          9: I664kINdQYZZixjAjFJ2wff1nBk.roa (hash: DFrf3nmCfO170wrqgfcGuszwxV4XEHBmrCGavXVsdUM=)
                          10: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (hash: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k=)
                          11: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (hash: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA=)
                          12: QEhSXcwXsu0G-eTWLTcEW4Ss3Kw.roa (hash: 3hazU/kPvVBI6tMsprnBgK/LziRES3Sxxtlr+bH5YbI=)
                          13: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (hash: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c=)
                          14: RNDz_4tH9L_gf3FZK7wHn9W5JTw.roa (hash: iV+7oOHFOY9zS0+jnxTaMolInYSGv9N0+a/6Pd3g5JQ=)
                          15: Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa (hash: ig9la0Fl/sbfAliXhYYjjCFuvHdOCtk7Nkqph1vk7qg=)
                          16: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (hash: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA=)
                          17: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (hash: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=)
                          18: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: sLlaAAkVTQ2IaW6gELvDwsNGtWUp7sjkrAFzBcG8XUI=)
                          19: cFW2f7mYQVMT0WQiKum-84YT7Tg.roa (hash: NYhMRFKPP2MvfbOtQ4xBGxpe8K5LETaIrUVLB8Q0RF0=)
                          20: iENB1Spx9V_JeHkY-UbptgejZiE.roa (hash: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=)
                          21: kgLefYWiNGknOidoKgqI74KkRkM.roa (hash: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps=)
                          22: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (hash: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE=)
                          23: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (hash: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc=)
                          24: rjAJbLG2Zw4o_Pjxfe1qJfc4HJE.roa (hash: PgUAFIkeOTWwErAjDkjVk0mJqFSxps5oqsCSRQBUIgw=)
                          25: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (hash: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:2b:dc:2a:d7:ea:51:8b:4b:7c:08:63:27:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Aug 14 17:00:53 2026 GMT
            Not After : Aug 15 17:00:53 2026 GMT
        Subject: CN=4b239009a1195702f55eb39868651f148e99e15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:9b:85:d2:fe:3b:d5:f1:c3:70:27:8e:ec:
                    13:f9:83:82:71:84:13:5f:e4:2f:da:26:3b:ec:a9:
                    44:2d:8e:dc:57:18:62:7f:88:ed:21:d2:80:ff:1a:
                    9c:30:29:38:86:5f:87:6b:f8:45:63:ed:53:c0:9d:
                    69:25:55:af:32:47:d7:da:60:31:f9:16:13:e4:f3:
                    ba:bd:0a:96:b0:a8:c4:72:94:a5:02:fc:87:cc:33:
                    cd:89:b1:34:12:3d:93:8b:ab:0b:94:6c:75:32:b1:
                    a3:56:27:fc:28:30:1f:b8:8e:a0:e4:9a:11:8c:9e:
                    97:ae:72:84:48:a7:16:7a:a5:7c:97:28:b9:62:17:
                    d4:3a:cd:a3:b2:71:f4:a8:0e:42:cd:54:28:25:3c:
                    ea:03:8c:d0:9a:50:54:cc:62:dc:10:22:30:5c:d5:
                    fc:72:b3:92:52:c8:5d:d2:90:c4:10:df:32:5d:f9:
                    cd:0c:9a:0b:02:1f:20:35:0f:8a:19:3d:8a:6e:32:
                    2d:51:2b:f9:07:12:ce:20:1b:04:32:6a:d1:ad:68:
                    ae:be:d5:b4:e2:ed:d3:aa:f4:29:a3:1d:3d:5f:b2:
                    01:6c:cf:3c:92:f5:80:7c:e8:cd:b7:4b:80:78:7d:
                    bd:ce:23:09:17:e5:9c:06:cc:ae:7f:22:4e:93:a0:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:23:90:09:A1:19:57:02:F5:5E:B3:98:68:65:1F:14:8E:99:E1:5B
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:46:6c:3c:eb:b5:3b:5d:49:6b:d9:6e:83:c5:21:cc:45:37:
         f3:f3:4f:11:e8:58:97:4c:6a:dd:c6:21:11:f0:2d:48:39:1b:
         b6:3b:60:05:12:1f:1f:4e:93:1a:96:7e:f3:43:25:6a:f1:4b:
         07:47:1d:5a:f6:4f:c3:bd:e5:7a:41:8e:2d:1c:96:18:f7:34:
         30:c2:00:04:34:38:65:87:b8:3e:8b:d2:de:b4:6c:f9:af:fe:
         23:25:e0:a0:30:8c:06:bb:df:5d:71:4b:74:45:c0:48:0c:d2:
         64:ba:3f:c0:b0:f6:00:40:f5:3d:27:10:68:53:87:57:3c:e5:
         ca:47:c4:90:a2:fa:e7:5f:0f:ce:05:d0:da:e9:cb:dd:0d:30:
         1c:93:5f:9e:19:c9:a1:f7:4a:ba:cd:ad:5d:8a:99:8f:cd:ed:
         c4:9e:04:87:46:bc:1b:f9:ab:ee:24:bf:1d:0b:20:5c:aa:a5:
         94:cb:77:75:0c:d5:90:45:4d:bf:3f:47:5a:6a:40:3c:29:05:
         5f:d5:a1:98:58:c4:44:e2:93:4e:2d:50:b5:b0:9c:c2:37:a6:
         48:5f:86:bc:8e:87:f1:d7:b0:40:12:f0:40:f7:30:5e:a8:a7:
         ae:c2:7b:cf:86:ca:f8:16:fb:04:2c:c1:e0:cd:a6:77:c5:48:
         95:34:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:11 2026 by rpki-client