Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File:                     BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier:          0kSgNKLEnubrzVZijIEYXC0mepZgw+MGaUlru0CN4Yg=
Subject key identifier:   9A:95:9C:AC:63:B1:C9:AD:0A:90:0D:90:06:1F:AE:CF:7C:05:2B:1A
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       01A0D5DEB4EEA5B62E35045117D7D7B035B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number:          18CD
Signing time:             Fri 25 Sep 2026 00:02:17 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:17 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:17 +0000
Files and hashes:         1: 10dcNCG_-MDba38nWmOg4-lXn6k.roa (hash: qCJHM+Bc84ondhlGxroPFWE37OgXYxlzfthfFUOO7WQ=)
                          2: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (hash: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=)
                          3: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
                          4: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
                          5: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
                          6: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
                          7: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=)
                          8: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=)
                          9: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
                          10: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
                          11: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: KcE14d7jeoXI58lss46u3+EHWjqF9lH2gBImEvjGwSw=)
                          12: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (hash: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=)
                          13: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
                          14: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
                          15: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
                          16: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=)
                          17: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
                          18: JdeaeLKAu5GEjINGKfvIKWcq3o4.roa (hash: a/heKXP0NtGbMelLoYKvGg/fN+ZyDqH56Dk+P1/eR2g=)
                          19: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
                          20: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=)
                          21: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
                          22: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
                          23: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
                          24: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
                          25: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
                          26: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
                          27: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
                          28: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
                          29: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
                          30: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
                          31: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
                          32: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (hash: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:b4:ee:a5:b6:2e:35:04:51:17:d7:d7:b0:35:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Sep 25 00:02:17 2026 GMT
            Not After : Sep 26 00:02:17 2026 GMT
        Subject: CN=9a959cac63b1c9ad0a900d90061faecf7c052b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:e5:b0:98:fa:83:fc:5d:f7:44:ed:08:7e:
                    2b:47:6d:71:c1:9e:f8:1f:1f:a0:dc:81:b6:85:ed:
                    bb:5e:62:24:82:6a:42:73:b9:54:02:d5:53:fb:97:
                    11:21:85:ac:6b:78:d1:09:7a:e3:76:16:8e:be:45:
                    00:86:0c:e8:3e:01:9b:47:d7:12:f1:e3:bb:4c:f3:
                    4f:0f:ef:e6:3e:a1:37:96:2b:54:a8:b3:92:e2:83:
                    04:08:43:20:01:09:06:19:bc:92:fa:3c:d3:43:0b:
                    f0:6a:d4:51:92:e4:32:11:25:a6:39:3f:66:4e:ed:
                    be:b5:7a:85:cc:2e:28:81:91:1e:62:50:1c:19:56:
                    1e:8d:da:4f:f2:89:7e:34:ae:16:bb:cb:1f:b7:94:
                    c6:96:3b:57:1d:51:ad:b5:56:23:b4:28:7a:b5:e2:
                    7b:53:26:dd:56:7f:06:5f:6b:84:bc:2b:74:59:fe:
                    ee:b2:ea:88:9b:a2:42:87:b4:fd:9a:40:84:6e:ba:
                    37:ac:63:4f:bd:28:af:94:07:08:f6:9d:4a:16:d1:
                    54:cc:41:99:cd:e9:2d:e0:a5:5d:24:b2:15:68:79:
                    7f:c7:d7:4b:26:a8:a6:48:f1:6c:b5:ae:7f:56:4e:
                    f4:18:e1:fa:93:a8:57:f3:2c:a7:9b:8e:a2:d6:9d:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:9C:AC:63:B1:C9:AD:0A:90:0D:90:06:1F:AE:CF:7C:05:2B:1A
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:38:9d:97:8e:33:09:95:7b:1d:ae:05:86:c8:b4:3a:61:95:
         95:c2:0e:31:6d:2e:13:2b:bd:3b:b3:1a:49:cf:c8:07:26:e6:
         53:cd:87:30:26:d5:8b:ec:73:ff:2f:f0:69:8a:b3:b7:66:4f:
         ab:fb:44:1f:e1:32:7f:ff:4f:15:d7:6b:02:2f:20:9a:8a:2c:
         ef:7e:fe:94:04:c7:14:02:d8:33:82:ae:0a:bc:bf:f9:52:22:
         83:c0:ed:23:c8:d8:95:c0:3c:ab:02:8b:69:48:a7:87:fc:e8:
         77:d1:b0:fb:f7:f8:f3:8d:41:0c:f5:d8:7b:8b:ee:87:87:c3:
         59:78:1d:19:2c:4e:5e:26:9e:ff:82:38:86:18:bd:8c:7d:45:
         81:86:d7:78:03:d3:eb:ac:e3:55:b5:18:62:d1:22:fd:e6:49:
         86:bd:f3:ca:ab:1b:c7:3f:6c:63:7e:a8:25:9e:86:17:ce:8d:
         19:c5:11:42:30:ee:df:84:55:44:0b:e9:36:06:9d:7b:7f:38:
         19:ab:93:5a:8f:c9:b2:60:be:b8:53:56:bf:06:fb:b7:6a:1d:
         be:b4:05:eb:39:3a:b5:4b:a9:07:a7:41:16:6a:c1:f3:f8:2d:
         14:ea:ac:01:2f:61:69:7f:f2:a8:d0:65:f7:b7:e2:e8:b7:7b:
         a7:47:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:06:17 2026 by rpki-client