Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File:                     Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier:          Hs8texsvflexg8pkrPFenfyWzqWIi7F2OpMO8wQGvVw=
Subject key identifier:   FC:73:9D:12:57:17:95:42:C9:56:7E:9F:D8:6B:7E:98:1A:6D:0F:2F
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer:       /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial:       01A16FEEBB9A995281E90756CDE32D6F1A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number:          1473
Signing time:             Sat 24 Oct 2026 22:01:18 +0000
Manifest this update:     Sat 24 Oct 2026 22:01:18 +0000
Manifest next update:     Sun 25 Oct 2026 22:01:18 +0000
Files and hashes:         1: 1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa (hash: 4EkSHJe3HHgvn/GmwogeggDvlFUsX8hwMgws3SiRAfs=)
                          2: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
                          3: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
                          4: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
                          5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
                          6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
                          7: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
                          8: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
                          9: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
                          10: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
                          11: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
                          12: LDS1YWjD86IXDHwiDyYizlLQQJ0.roa (hash: p58RlPZiCl5HhwC1+r2kH86yb/BlzYcWhfxWQdG7jog=)
                          13: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
                          14: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
                          15: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
                          16: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
                          17: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
                          18: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
                          19: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
                          20: WiMfA99SsOV0pwFy7JsEyWnrdm8.roa (hash: 5NqNzQWytqF+oyfW/l4tHkkMYWiUXHJ7o1g4dGmCkkM=)
                          21: X39u8-9nKBEShz-NMa6JOcIhFuQ.roa (hash: YQ/B8p3fFHa4y5b+f+S7RWE/AGybnxVLW5r+tC2DXw8=)
                          22: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
                          23: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
                          24: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: nMgVGPdjIKCIJoLTBxe9/06NCbn1596pfEurQB7rj44=)
                          25: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
                          26: gXToFCTUuvuYMIEdmvS6O56XgPo.roa (hash: pR1vScVxKAcrSeb8XWNSFRHsHQo7yVXqwsICeVIj3hg=)
                          27: jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa (hash: WEJrQ+xJek+2Absm0J+C3VpL2xmTd9FmmDu0jKWpyi0=)
                          28: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
                          29: oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa (hash: I1u3TRoo6Y+BB7n1CDMuA9kawRp5ZHIK/39fhQ2i9Yo=)
                          30: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
                          31: trHxVfnichbSHm59zOzfyrvJyAY.roa (hash: 4xymR1Veq6eKricZ81/4LeFEs5UWx7qOZ493cSlDlSE=)
                          32: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
                          33: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
                          34: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
                          35: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
                          36: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
                          37: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:ee:bb:9a:99:52:81:e9:07:56:cd:e3:2d:6f:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
        Validity
            Not Before: Oct 24 22:01:18 2026 GMT
            Not After : Oct 25 22:01:18 2026 GMT
        Subject: CN=fc739d1257179542c9567e9fd86b7e981a6d0f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c4:72:92:ec:a8:3e:38:2e:1b:80:0b:3e:45:
                    e4:79:49:82:b3:59:8f:91:9a:69:e8:0a:37:a6:68:
                    83:df:b3:26:41:c6:c5:0c:97:3d:56:c9:3e:69:1a:
                    67:38:4a:e4:f8:86:5e:8a:26:0b:08:bf:4b:cf:6b:
                    12:d0:34:97:c7:b1:e2:b8:4d:df:a1:54:78:a7:28:
                    23:e3:c7:0c:80:81:2d:ae:e3:12:e4:2c:e4:03:3b:
                    f9:df:43:77:ac:d9:a0:16:e9:32:53:38:8b:32:00:
                    92:fa:fe:f2:e2:f8:c1:8c:0f:40:30:4a:7f:cf:b3:
                    68:71:67:57:be:be:1f:02:5b:09:61:38:63:56:d2:
                    b9:ed:5a:53:32:86:49:8e:00:13:9d:70:a3:32:64:
                    9b:cd:73:06:c6:10:e0:32:38:fa:78:ce:41:b9:c0:
                    7c:cc:9e:8e:5f:e5:19:af:bd:8d:70:59:3c:1e:39:
                    fb:de:48:9f:19:d5:d7:e8:9f:07:3c:b4:1f:32:d7:
                    98:eb:0f:be:e6:c8:fc:6f:9e:0f:94:6d:56:f0:57:
                    98:9b:1c:23:93:ad:ac:1a:cc:9f:20:f1:29:b6:80:
                    0f:87:7a:44:bb:67:b8:09:42:08:2b:75:e7:d7:f3:
                    a3:25:81:7e:77:f8:2c:ee:e3:c0:df:84:59:97:09:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:73:9D:12:57:17:95:42:C9:56:7E:9F:D8:6B:7E:98:1A:6D:0F:2F
            X509v3 Authority Key Identifier:
                keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:29:bf:81:df:90:85:7a:c3:13:c3:24:25:d6:3c:1b:fc:
         54:e9:45:f2:88:8c:9a:9e:26:6b:b6:37:fa:12:9a:90:88:0b:
         d1:d2:81:c9:d7:dd:3a:d5:92:94:98:07:bb:11:da:e5:42:ce:
         5e:24:19:52:24:1b:52:3c:b7:87:04:22:56:f0:7e:b7:ea:52:
         85:b1:40:54:ce:55:ae:a1:c6:c9:4c:b7:2b:1b:32:e3:a3:51:
         0a:f2:ca:1c:81:20:1c:cc:a6:b5:81:fd:fa:f9:d7:62:88:b2:
         2c:86:63:5c:db:e3:7e:53:ff:57:4e:c2:8b:9a:6a:12:9b:8c:
         ac:85:0d:58:39:a1:8a:ff:1c:aa:d1:02:40:b1:59:cd:f8:ae:
         5c:63:76:33:41:e2:01:d6:fd:df:32:ed:16:2e:7f:6f:cf:ba:
         41:12:01:a0:77:22:6f:b4:e8:5c:67:cf:3a:45:c5:95:9d:28:
         31:81:1c:35:7f:80:90:d7:ee:e7:57:a7:63:99:5e:d5:f8:b9:
         a9:5d:be:71:77:40:39:63:35:87:b8:58:63:b1:eb:97:a1:03:
         f7:31:d3:0b:aa:25:40:e5:cf:82:49:9e:6c:34:c3:3b:e3:10:
         59:99:85:51:3c:ef:a2:89:77:95:63:1a:78:b5:f3:5f:fe:95:
         cd:97:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:07 2026 by rpki-client