Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File:                     BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier:          RXPHQpqu8+8TI9bqByI8l5942dwlUaY8qyd8Z4PNJv4=
Subject key identifier:   99:9C:9B:10:ED:3C:0C:D6:AB:6A:12:41:6D:F5:AF:F9:1D:AA:8D:B0
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019D273B0B7D6E4C315B41FF5DCA346A3D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number:          16DD
Signing time:             Wed 25 Mar 2026 23:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:13 +0000
Files and hashes:         1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
                          2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
                          3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
                          4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
                          5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=)
                          6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=)
                          7: 7IDWuY26T4UCJ4M5vwbNefIa4Ds.roa (hash: 2aXs1iZiP1C/zRertFgP1ov5IhcFnyEWbQzgQUvTZx0=)
                          8: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
                          9: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
                          10: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: wesYEXKGfUXiIjYGc7hcCRPwO/KJOgPMeb6PMEEkDO0=)
                          11: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
                          12: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
                          13: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
                          14: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=)
                          15: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
                          16: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
                          17: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=)
                          18: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
                          19: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
                          20: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=)
                          21: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (hash: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=)
                          22: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=)
                          23: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
                          24: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
                          25: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
                          26: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
                          27: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
                          28: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
                          29: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
                          30: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
                          31: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=)
                          32: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:0b:7d:6e:4c:31:5b:41:ff:5d:ca:34:6a:3d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Mar 25 23:01:13 2026 GMT
            Not After : Mar 26 23:01:13 2026 GMT
        Subject: CN=999c9b10ed3c0cd6ab6a12416df5aff91daa8db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:4d:c1:c9:b7:b6:92:d3:16:4a:69:ff:cf:
                    47:a4:ab:5d:ae:16:53:38:fe:b8:2e:6b:33:58:b5:
                    e1:6d:c6:30:62:29:9d:d4:49:ee:ce:c6:b1:78:ed:
                    f5:11:3e:c2:84:6c:58:f3:b0:cd:8f:e2:19:42:18:
                    1f:cd:e2:67:08:55:9a:28:dd:bd:c1:4f:94:53:9e:
                    22:8c:41:f5:78:83:32:6f:b7:2d:c9:35:b8:b8:79:
                    e5:bd:f0:3c:a9:18:d5:2c:bd:ee:51:af:b5:4b:bb:
                    54:5f:83:e2:b6:96:64:5c:39:2a:1e:bd:cc:c5:ff:
                    74:2b:02:0c:85:0f:b5:d6:90:1c:31:6c:07:d9:44:
                    3d:d9:ee:79:c1:41:66:d5:4f:15:ac:6a:44:c8:df:
                    a9:ee:bc:b7:60:34:6d:80:eb:8f:9a:a9:2b:85:5c:
                    c3:b8:f7:e5:9b:35:83:03:51:02:6c:da:52:e3:f3:
                    48:9a:d2:c7:4a:a8:db:90:3a:a1:26:63:15:1d:02:
                    46:dd:c9:49:3e:9d:fe:44:26:16:79:49:18:1b:33:
                    0c:3e:6d:0b:5d:b8:27:e0:3e:a1:ce:3a:c7:26:bf:
                    0d:bb:be:77:41:41:d6:0d:34:7a:6c:ee:4e:5b:05:
                    01:a0:5d:fb:95:8e:cb:84:e1:6a:f0:2c:bc:59:cd:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9C:9B:10:ED:3C:0C:D6:AB:6A:12:41:6D:F5:AF:F9:1D:AA:8D:B0
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:b2:1c:34:63:74:d9:7d:17:45:5c:33:29:a4:b3:c9:12:
         3e:a5:59:6d:5e:85:44:11:e8:7a:b6:66:85:87:c6:89:18:98:
         20:43:99:27:ba:b4:ca:01:7e:ca:69:1b:87:86:8d:21:4a:0b:
         85:e2:53:69:0d:f1:03:8d:84:33:29:07:60:03:88:97:70:1f:
         83:7a:21:6c:e8:cc:a4:19:60:3d:fd:3b:c3:e5:96:04:1e:e4:
         7c:3c:62:b1:cf:8f:4f:06:15:33:65:6a:98:a6:87:ca:27:51:
         15:d4:44:d9:d0:57:75:5e:67:c1:57:f6:6d:20:a2:1d:7c:ba:
         59:d8:3d:6e:bf:61:05:7e:9e:ef:9d:18:f4:a9:b8:91:4f:3f:
         3c:50:82:05:e7:02:1b:c7:cd:d1:00:ea:ea:7f:f7:88:3f:db:
         b9:78:1b:77:70:ef:13:87:29:07:6a:7b:ae:7e:45:23:2a:7a:
         9a:c3:1d:a9:66:7e:fd:f5:ff:2c:f9:e5:47:3d:92:2e:6c:c3:
         f0:79:7f:a7:a6:31:69:d4:6e:65:32:e5:08:0b:9a:ec:8d:1a:
         98:b0:20:65:96:f1:4f:a6:1e:3b:bc:10:f7:b9:34:7c:48:62:
         93:e8:bf:0e:fa:7e:66:6b:1d:a7:f6:00:21:ca:e1:67:aa:67:
         1b:36:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:30 2026 by rpki-client