Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File:                     YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier:          1M+JIf3qcpuVN+1cZH01BBqUJye3/3NJdA/4wIpA+YQ=
Subject key identifier:   7B:99:29:82:09:19:05:70:67:9B:BC:31:BB:55:78:7A:DA:3B:1D:D5
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       01A1833EAEDEAFD213CA3BF2E2FD1E849960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number:          1B40
Signing time:             Wed 28 Oct 2026 16:01:25 +0000
Manifest this update:     Wed 28 Oct 2026 16:01:25 +0000
Manifest next update:     Thu 29 Oct 2026 16:01:25 +0000
Files and hashes:         1: 0RGIqhUFEMWK2fXC9rV_tlkv4n4.roa (hash: NJUTFV3IxSRhyNkIEDIrFx6J1eUfUKf8sdUXb9DzEBI=)
                          2: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=)
                          3: 1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa (hash: OR0K6ja0+6tjObcYpglQ6VtaBnvWmTTk4GVSghcFZtk=)
                          4: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=)
                          5: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=)
                          6: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=)
                          7: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=)
                          8: CCWA5B2a_oMp64Bg-AlLu0oEfts.roa (hash: U/4rwicf/+irCQ70LxTWhlbr9E2uox59kr6nbx+fB+A=)
                          9: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=)
                          10: HDUXqeFC5mTa7lU_RmwELJjd7sg.roa (hash: U543lYj0wOYAaksGChXjX7Bufgd0My2VXcD17aAopUA=)
                          11: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=)
                          12: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=)
                          13: O8tXuxRFQOkLS2j-q3Ipz6rPTkc.roa (hash: djWARojZvpN74ddrIbbxdjeMO26ZjR0Y/nyLh/tJ4eY=)
                          14: S1obrMP08-kmGB7VLUhtFfd_rkk.roa (hash: BUfpEz9i0Kw5yTFcpK1oW0WW3YPJnb9EaktEtTRt6HA=)
                          15: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=)
                          16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=)
                          17: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: lahssfcRi77/jrlh6hRJz7hQgtyYD2utJexDhicp1Xg=)
                          18: YyXgRYelUkqnbHcSDbPfkd-7y90.roa (hash: j4N9+xItLptnrKceliWSsdLuIVM/2lJgdvftKn2AJ1I=)
                          19: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=)
                          20: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=)
                          21: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=)
                          22: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=)
                          23: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=)
                          24: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=)
                          25: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=)
                          26: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=)
                          27: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=)
                          28: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=)
                          29: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=)
                          30: xZxOuKR0uXiVWKrVzlUbQjBVoHU.roa (hash: lNIiO8vuA4+zEU8BhVfLso9H8Ds4E5XIcYTIl33DhRY=)
                          31: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:3e:ae:de:af:d2:13:ca:3b:f2:e2:fd:1e:84:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Oct 28 16:01:25 2026 GMT
            Not After : Oct 29 16:01:25 2026 GMT
        Subject: CN=7b99298209190570679bbc31bb55787ada3b1dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:5e:8f:56:16:97:f9:c3:74:56:59:6c:35:
                    13:99:54:15:cf:3d:f8:b1:2f:be:2d:d6:50:6f:0b:
                    21:3d:7a:12:5d:68:45:f0:50:70:b9:5f:bf:d9:0b:
                    67:0e:b1:b9:23:f0:33:fd:44:35:f0:74:cd:ba:4b:
                    58:36:d8:82:1e:8b:1d:17:d1:48:27:56:14:7a:5d:
                    b4:94:87:dd:05:2d:61:d5:20:81:4a:82:12:e5:cf:
                    33:45:7e:83:66:9f:ab:53:f7:86:a4:4c:45:67:e9:
                    84:64:1d:ad:dd:e9:44:86:93:12:50:00:ed:12:9e:
                    be:5a:eb:be:4d:e5:72:14:a7:ab:3b:7d:06:d4:95:
                    ad:b1:fa:5b:df:5f:8f:63:eb:9d:38:b5:88:0c:9f:
                    54:a5:0e:f4:c5:59:9b:02:53:e2:fc:f6:fe:be:3b:
                    29:81:39:71:af:87:d9:f8:0e:88:f4:4f:a8:88:d0:
                    d6:12:9e:5d:36:ff:29:70:5b:e8:c3:48:43:a0:ef:
                    82:02:2d:6c:63:9d:1a:1b:64:31:de:37:bf:2c:28:
                    d5:a9:55:10:ed:22:d3:d4:eb:63:77:4e:1f:b7:40:
                    11:78:c5:98:26:8c:5c:d1:5b:dc:e4:05:5b:a6:a3:
                    17:1a:66:e9:e3:61:29:65:1f:30:8e:12:1c:26:03:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:29:82:09:19:05:70:67:9B:BC:31:BB:55:78:7A:DA:3B:1D:D5
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:fe:1c:3b:be:cc:55:50:d3:09:c9:f2:76:5c:3c:f0:93:
         38:b0:ba:33:c3:cd:79:8e:48:e3:22:14:c0:d7:60:28:53:8f:
         7c:8a:aa:6f:74:c7:5f:59:4a:25:66:79:be:47:07:20:f5:e1:
         4a:37:47:34:28:a1:5f:37:b6:7c:dc:ab:09:8f:af:b6:f4:b8:
         dc:b6:23:cb:fb:4d:41:a4:c1:ae:87:ea:73:e8:16:14:a9:5c:
         33:6f:70:75:0c:b0:a4:aa:7c:9d:b2:f7:16:b1:2a:20:d1:af:
         b1:2f:6a:03:39:0a:90:7e:bd:a1:ae:fb:50:54:ec:6b:8a:20:
         97:d9:2f:4f:c2:01:a0:1c:ea:6d:70:44:5c:e1:a6:5a:2f:0d:
         3f:6f:2d:29:02:6c:11:24:dd:6d:9a:3d:73:94:b2:5a:02:d2:
         1e:c5:9b:72:20:aa:7a:cd:b3:53:63:23:40:b4:cd:47:ed:bd:
         e5:36:8c:32:b7:0c:39:b6:f7:6d:f0:ed:5e:dd:46:7f:7f:f8:
         b0:1c:72:62:2f:77:ba:8b:df:4f:4a:9c:ce:f0:a2:e0:46:9e:
         2c:c2:20:0f:72:92:f5:8f:3c:d1:88:16:f8:6a:99:0e:9e:bc:
         f5:d8:14:8c:d5:43:6a:9f:6c:d3:6c:e1:cf:d3:6e:21:d3:f9:
         18:b1:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:09 2026 by rpki-client