Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          gjJBWpN0X603zb9vRrQoNiePF9x1Vt4sdSmw7AVjZ/k=
Subject key identifier:   12:6B:1F:14:DF:B7:A1:10:44:10:4C:F0:08:CC:0F:2B:30:B8:E7:A5
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019D259473CFEC920EB76B16D34B3F04F562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          04BA
Signing time:             Wed 25 Mar 2026 15:19:39 +0000
Manifest this update:     Wed 25 Mar 2026 15:19:39 +0000
Manifest next update:     Thu 26 Mar 2026 15:19:39 +0000
Files and hashes:         1: 1-TF_DNYPytFCDM9ob70FwezU19M.roa (hash: d02a+8r6UEOH7tUcT4ldHX7Qn837ccWleqSz8aMVP1Y=)
                          2: 1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa (hash: JGYkH4jrc0W9U8ZV3mJqPcgKRn06DtzcgGerdHLNLUc=)
                          3: 5efjrUYRokXCOvT4J2mHomdLJXU.roa (hash: kCs0w342k8pWszMUssxco1fg/yQA+DYYLLu22hu4Kp8=)
                          4: 5n2b9maD-WKBvGsJL4HCi6NMYJI.roa (hash: Nn5OtfAxQwpd29OmMbi7586ulW0AdmiqrnApRdvkbGg=)
                          5: 9EjUnibhEJq5bLfdbGt92aCmGYY.roa (hash: DnS2jnsGqE15sINmHwk3fDd3mcW2MTDLdlWaO67YF34=)
                          6: 9LQRctI2YftbEKVnyItaOOy3d_M.roa (hash: pgk2Inrux/7lL/EYb6kKY+A+qh5ghGB3qij7g35sOh8=)
                          7: A1bQAOXZNhA4xD0DYsbXMY1DEE4.roa (hash: eGOJmOh8umGTdfiUy3BddRThCQh7xj1QJBNZ6Dmw0So=)
                          8: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: /dHJuZE4hyjhT19kvTgjbGbpO7LQOMYq27j1LH3u4lU=)
                          9: FS2smUh78VcAx1pJo864e-lr3gI.roa (hash: mixZibFB0hFz56z+JYqSccSF9Jdi9meBEB5gjBMrGmw=)
                          10: HUfPguDLv61FjwhE83RjHvo6SG0.roa (hash: TVSqZsAvt2m9gNwVr8IK6jrYRpSQJdNbVnyELUQDzIY=)
                          11: HvvYce2lyVlZo0K5qONasUupbiM.roa (hash: kk/JmVvld/s18l7uimHCEPJ58RJkP9Sl4O6TUSKa5vQ=)
                          12: HyAI8oS_M9RrtnBFX4mgVsfZ3EI.roa (hash: tOuIfCuuSHHG5cx/angD7pz9vkeVH3Nbhnif6O6zKS8=)
                          13: LEC1offLjwJrFzx8Dpv7xkLNEyg.roa (hash: dFznU7yxG8+kgv1O/dEk2D3HMFQlxv6V3RwD+q16duc=)
                          14: LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa (hash: V2v+4vi1fkAuP3HFSTiQqZk5Ych9yvJZ2q3KENPbMwg=)
                          15: MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa (hash: jJ9eXrKVZallfBng8qzQIoukBNtwZT2XORL8UeAPSWU=)
                          16: ON_ctMOAUZaapm2VNE4MUGlm5s0.roa (hash: 4OAfdVogeIliIwtkxx+7QSj3X/gCNixWQKVjGlrxtEc=)
                          17: OoSGRjrHBphJN2JOMMOGmztsf0c.roa (hash: e+6frP73UQ10M6Kn5frXhfNKMsxMaXLrAjBVlYHUnQI=)
                          18: PGmJMw7v2srp34c2MWaM7Sl7S-8.roa (hash: cNcf4e832Zowk/7Wxq5VwsFfaNNsCFcyx18A+DfXRUQ=)
                          19: QKCRwXV0KlqGb8GAJmYwpUO-0EA.roa (hash: Rr+NwshtCQpa7LHQuWVgydY+wZTnKwGAZ6E2PxjHpcw=)
                          20: SVPLS2ubDGmz996fszQp7r_8WjM.roa (hash: zb6o8Pz5mahpV7VTvHHDSV5gjebzFr1Ex6x7GDwi1/I=)
                          21: SX2yfivC2Mb3ex4bB6P0yhlsJEo.roa (hash: C6JVJhycJzCawG6LBIDQyT/VYXWc1YKRdSeg1TGaCT0=)
                          22: TA96EluuK9hYtFKHPh9w57H26w8.roa (hash: Rr7s9I5Bo7KScSJwkfbGRNqNcD/eMP2Gsvt7bqHcZaQ=)
                          23: VkW9wv564hDafmgem7iN4Pq0eg0.roa (hash: rHiCzFG5HzMXM3bkuQnCSkoGdPunuITBDMRZQXzh+hU=)
                          24: Xb1Ypft5Y54bcYQ8b79qIwrScbE.roa (hash: Ptw9WulLvCzzd5LJ241CpZZU4h4IU0B2dm9/idnoGHM=)
                          25: apcs4_oanmR8NCDusffG9AvEfsM.roa (hash: sHeaDVArieWiT+UWIxgi2mojPq8GGVCZyBNdboptcLo=)
                          26: ci0ptYRrl3soT0-X9BF8_u2tuDM.roa (hash: JO6OUsm1lQx/mMSgHEn0FT4Fg0+OMrrpuHf6e9wSXno=)
                          27: eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa (hash: DE4ibWon9YTdJq0az/Rzpdn4yRH/8+IxBFpWlTJrvso=)
                          28: fay_KIPQYeRk21dJN7RLGfTf3ig.roa (hash: rgA8dGwQgdG2uChHAnDIz4pqzfnVDZx8vl1RsRoyjNc=)
                          29: fq4Ew_A_fioISiNqHSgmJitAwlY.roa (hash: I1TA5DBYGE2CE9MFt2QJJ+Lh1L2n39xQZ1WwsXssVQ0=)
                          30: gpt4tsVlr92QGxcr1kp4hk9GZLk.roa (hash: ynZtdfE+YEDV/1HH49Virb4Hc0ZG8v+eXOdK/wc+KcU=)
                          31: kqwgQwpaGv-qjbJtnBbAhvql_1M.roa (hash: IaMnuVL7JGmrqGqpSLQSd14hY/SD7WineiRtNHWYaGI=)
                          32: oK-l_3d_vcNuFOm12ibmb0cbNHs.roa (hash: lVkSdNlZrQRcuVVCpchBeA9OcY08H6oNlvysY5acQSI=)
                          33: ogG7djAUZ8yRMRdAyuw_W5nzzh8.roa (hash: 1t+gbYROFrlM9v5CjlELwyTvLHT7IFgBhc/IPtaYyfY=)
                          34: wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa (hash: PlqJyT9jtqG0tUJWI/AH+Gyp3H4OOPzXZR3URdxEA3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:94:73:cf:ec:92:0e:b7:6b:16:d3:4b:3f:04:f5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Mar 25 15:19:39 2026 GMT
            Not After : Mar 26 15:19:39 2026 GMT
        Subject: CN=126b1f14dfb7a11044104cf008cc0f2b30b8e7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:7c:11:4b:3a:16:1a:88:2e:47:75:f4:6f:
                    fd:51:69:39:a2:29:46:b4:68:4e:59:29:4a:64:e0:
                    1d:a2:a6:f9:65:60:08:29:1a:1f:58:be:b2:37:71:
                    bb:d3:30:e2:42:c0:2f:70:d5:a1:a4:21:e6:b8:1e:
                    b1:72:a8:24:3b:42:c8:fc:3a:66:9a:fe:03:e1:56:
                    4b:24:3d:a4:5e:9b:58:ee:b4:86:12:87:3f:96:68:
                    51:12:b4:7c:2b:32:10:4a:72:84:49:93:75:78:88:
                    90:a1:31:13:18:41:31:8d:b0:9a:7e:44:e8:fc:77:
                    ee:a6:58:68:52:88:b8:00:e5:2b:8e:60:57:30:fd:
                    70:84:b9:06:2f:c1:11:e1:59:13:33:ad:96:93:79:
                    fa:6e:d2:70:b1:a5:7a:91:c9:46:ec:4e:2d:45:07:
                    89:3e:9d:21:36:b4:06:e5:8d:ee:70:07:91:df:78:
                    af:8a:ac:e6:05:bd:ab:98:0d:11:e4:90:96:c2:60:
                    99:bb:47:69:70:33:89:1a:c2:16:b8:ac:04:13:0c:
                    fb:28:cb:91:9f:7e:ea:67:23:f7:8f:ea:b5:43:34:
                    9c:10:f0:c1:a5:8c:f7:26:6c:7e:c1:c9:ac:12:4e:
                    93:0e:02:7d:0c:9b:27:ed:8a:03:a8:44:95:be:3c:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6B:1F:14:DF:B7:A1:10:44:10:4C:F0:08:CC:0F:2B:30:B8:E7:A5
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:af:83:60:e6:9c:dc:e3:e2:eb:57:2b:28:7e:32:6c:72:b1:
         61:93:fc:e2:ce:58:08:55:8f:00:8f:0b:6c:51:b4:68:18:18:
         fd:65:f2:9a:17:24:fa:7f:c2:91:63:40:63:54:4d:2e:c5:a9:
         25:95:60:28:30:0a:61:8a:98:55:54:df:0a:b0:54:90:34:98:
         10:b0:c9:d4:56:0b:79:62:7f:9f:a3:31:30:cf:85:34:2c:e1:
         88:9a:eb:1f:38:c7:f4:83:74:33:33:23:af:5c:bf:f1:e0:ef:
         a4:3d:d2:6d:ea:0f:49:64:8a:e5:47:f0:de:5d:65:0e:2d:bd:
         22:7b:e7:41:0c:0b:df:4c:5a:9a:9d:4f:60:b2:79:81:76:67:
         fa:d3:54:31:27:80:2c:92:66:ec:e2:cf:b5:f5:c7:bc:df:6e:
         20:b1:a8:14:0c:a9:c7:f2:07:fc:9a:29:f9:6f:b6:e1:6d:c4:
         3b:6c:fc:cf:71:89:3f:a2:06:56:1f:d1:0e:9b:40:ce:b9:be:
         76:8b:70:ab:c5:7c:dd:80:12:82:01:1e:ae:e0:89:f3:09:b0:
         6c:73:6e:b6:ce:2c:76:df:23:52:c8:37:82:86:2f:57:ef:1e:
         15:01:e7:b5:44:b0:d2:0e:ee:b2:23:6b:fb:cd:a0:06:58:18:
         06:ac:98:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0llHPP7JIOt2sW00s/BPViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjYwMzI1MTUxOTM5WhcNMjYwMzI2MTUxOTM5WjAzMTEwLwYDVQQD
EygxMjZiMWYxNGRmYjdhMTEwNDQxMDRjZjAwOGNjMGYyYjMwYjhlN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxN8EUs6FhqILkd19G/9UWk5oilG
tGhOWSlKZOAdoqb5ZWAIKRofWL6yN3G70zDiQsAvcNWhpCHmuB6xcqgkO0LI/Dpm
mv4D4VZLJD2kXptY7rSGEoc/lmhRErR8KzIQSnKESZN1eIiQoTETGEExjbCafkTo
/HfuplhoUoi4AOUrjmBXMP1whLkGL8ER4VkTM62Wk3n6btJwsaV6kclG7E4tRQeJ
Pp0hNrQG5Y3ucAeR33iviqzmBb2rmA0R5JCWwmCZu0dpcDOJGsIWuKwEEwz7KMuR
n37qZyP3j+q1QzScEPDBpYz3Jmx+wcmsEk6TDgJ9DJsn7YoDqESVvjwy9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJrHxTft6EQRBBM8AjMDyswuOelMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq+DYOac
3OPi61crKH4ybHKxYZP84s5YCFWPAI8LbFG0aBgY/WXymhck+n/CkWNAY1RNLsWp
JZVgKDAKYYqYVVTfCrBUkDSYELDJ1FYLeWJ/n6MxMM+FNCzhiJrrHzjH9IN0MzMj
r1y/8eDvpD3SbeoPSWSK5Ufw3l1lDi29InvnQQwL30xamp1PYLJ5gXZn+tNUMSeA
LJJm7OLPtfXHvN9uILGoFAypx/IH/Jop+W+24W3EO2z8z3GJP6IGVh/RDptAzrm+
dotwq8V83YASggEeruCJ8wmwbHNuts4sdt8jUsg3goYvV+8eFQHntUSw0g7usiNr
+82gBlgYBqyYZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:25 2026 by rpki-client