Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          UBtmCtJn60SpG4DCXRDm+R6dgHz5N/ZY9WLJNlC2lqk=
Subject key identifier:   8A:C3:47:F0:93:EE:D5:5A:67:A0:FF:8D:DB:8F:7D:3D:E7:08:1D:B8
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       019F91A3D0BE10E7297858C63D5C6832724A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          19E9
Signing time:             Fri 24 Jul 2026 01:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:59 +0000
Files and hashes:         1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
                          2: 0yWvn9M6oy5fHhcusKTNYjRT7SM.roa (hash: WvQP0RNlRK2xc7fMdnNh9d+C2dzK7VsvYxKqHmxbO9Q=)
                          3: 1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa (hash: 1M61p2hW3Z5J+kUgHhY13ljWHOQiC4BFBkjaF/siz74=)
                          4: 1jcNY5626hnNOCnMu1sTaGQ4WDA.roa (hash: c+tE0o6eIUl6HySh+TrLE9b5fSY7RiC/BC34enLyUb4=)
                          5: 2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa (hash: 3fPXfPBlzwSi3JHWyKN+vJkAotRs4RzEaoGJ/+xtt28=)
                          6: 2kLC5oc0wtFYxb-UoY1NN8AeYeA.roa (hash: WWHfYyQQ20grjWfdXp93pjE8sxqP9wBjYJdjjvSKaGw=)
                          7: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
                          8: 55IL_FMEYxN2_mPAwnBVd0YsSsk.roa (hash: 9BZLnY9FLmA7kfoZD8m1OasbRrEJ84cgrmKwWq2O/zo=)
                          9: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
                          10: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
                          11: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (hash: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=)
                          12: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
                          13: BIG6nBuxQiXzo3A8VVUzmGCYUXg.roa (hash: fzvbtoojQe9O9HxvUDJgqzSsNS0LqxyijfXmKyO6zrU=)
                          14: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: n6DbgWVrpri4TVJgFirw/ourhNOfPiNasHe4Gj4wlVw=)
                          15: DNfeT75YIWg_GiEYi0OXwXzVsCE.roa (hash: p373o+Uf7zsdGjZbtQi0QVhe/Loppcgzl4NraszftMQ=)
                          16: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
                          17: EcVCYTCFbfuctisOnGpTpzze87E.roa (hash: AvUy4CNenHZ3+B409HhzJ1fMxMdjTbDHUphzokd1e30=)
                          18: MRI12LDIfuxDk-RAsS5kzIsowbg.roa (hash: G51ODDOqrLhdbvBDKBaAFuDk7Db8dc3Q2aZnUmjS+3o=)
                          19: OdlIdhUi21fj5cczb-7WJINtysY.roa (hash: xZD9f0KAxGvn4NddjuJzY91yfkyxr9JttpLoWZK4sAA=)
                          20: PsXb9zE8YGzr8n_RkbH4pCrLI_E.roa (hash: DgmoxJI7MnT1BVWGbCdAqU6yxQ94JqRUW84m/NLaLZI=)
                          21: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
                          22: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
                          23: U58VFH0hC-bAfuIWx5-x-9JpLVI.roa (hash: Tg2jjCtMuE3tvyiCge6PHALgpdcv8xyRfITU6qGoLM4=)
                          24: U6dLDAejvUgnq5aOMEIUtrBzTBk.roa (hash: 2dgujFoVBvo9HpAJXnhdci16ozuiz9TD8/Uw/FW7qg0=)
                          25: VSDudfaR07Sid5nvsB2vmBNWEsk.roa (hash: Ow6ryTxzsItq5o8zstdyJ4oOnGY3z16hLDJu00wlEXU=)
                          26: YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa (hash: uHnqXRv4X7k9WzE3QaUtv9JAv+AdztfPp846F5lhQ3M=)
                          27: YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa (hash: dMA7bJ3qBQAVvVANJ6N/cwoY5Mkkyuwl6eF8ht6OLk8=)
                          28: Ycy5lGeS5U8PdIJhcsoT_8YB0SQ.roa (hash: Mmaht3Wpxz+xIyjudmJVkBM+i+FSVBTRr0ppt6Ph/go=)
                          29: YuWhtV_ooJKZDPzglq4aD3u0vNE.roa (hash: LlcMUITpEE6lj8f+Bxsc2+7fgunLPQiQ9Ebhj5Pflqc=)
                          30: a617PlLEN5nPKh03vNFZxBSxgh4.roa (hash: 6VG+uN+9CEFy4WZVrPFyDQaVY9yaJfKQhPjMm3IS2E0=)
                          31: bpliBHQf1srTQdHcoNbSYzum3iw.roa (hash: MnV3pxRWCN85TFBKQGOedJbS7vH1cW3AnKuxQi66K04=)
                          32: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
                          33: eL3BOW3R9YF4NTYszpn-G4GicXE.roa (hash: eWdcg/wUnlcSSTHz0FoI6XetkTNSCLoEjSq0/aIE4N0=)
                          34: fIfSfYc5asb6gBqe9eNVort2xs4.roa (hash: teEWsVV3XoZvsOLboWSSAZxkb697W0VTg9OJPaTVF5I=)
                          35: fNVqF5yDUil_SWA2BYZlXdeKNdo.roa (hash: HPbQ50A50C4FKQ88DRsMXuci3WFPEbfYN9SMITi22CQ=)
                          36: jHRwpwBbX-lEZAQUaNVhGoh4-38.roa (hash: 1wDI2XXXth808yD9Qxe5ic1fW+GBw0yvicdO69uEWKs=)
                          37: jOw_auvAMHfQZA63CN2U9mBRMVc.roa (hash: xPvK5ttQn8QygiN6ftuMK506XQIyRGc1Bg84C5Jpu7Y=)
                          38: kPfgHSfk4FFttCCtHtRYkRCQXbk.roa (hash: 79gKRmZ1YiBm+4TSS/3DQ+xjB2kQxDrxYWPGlqWrvCQ=)
                          39: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
                          40: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
                          41: nMrH_uxQ6QqKepPKOpY-UkQ1-Uo.roa (hash: wpe9wi16YZ9a51RzLRKPPmgKqDACtgLzri/EM9oc/os=)
                          42: njZofDQgidOuoUz8FhOg8HlCcO4.roa (hash: pmn04WuysaIGzuvE21AGaFY1j1JzftPrKe2jTGhY34o=)
                          43: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
                          44: oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa (hash: oCbELwtCCjp+HJZHCOxixxeMeDAIy5Gv5vPFtIqmCag=)
                          45: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
                          46: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
                          47: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
                          48: vJ7BACarktQZPbgtcKZRm0Tfb78.roa (hash: wC72pQDaNa5TsneYQqiJVvGl4X1LmKRupGx9AuzClbs=)
                          49: xKPCZLn5NBwKOnGfN6Jfm7bqVhI.roa (hash: MULPMSCgu1soomGcBhyo6KncDRQ60sADMNncZpDFSk0=)
                          50: xikanlTZ0v14vJNsgTM-bs_TrVo.roa (hash: k8yL0zUwcHmo1s0l7jrHP/AK6MnJoFmCKEGJzsiquWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:d0:be:10:e7:29:78:58:c6:3d:5c:68:32:72:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: Jul 24 01:00:59 2026 GMT
            Not After : Jul 25 01:00:59 2026 GMT
        Subject: CN=8ac347f093eed55a67a0ff8ddb8f7d3de7081db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:8c:3f:03:f8:e4:da:24:d9:df:c5:08:1a:
                    77:90:14:3c:f1:89:3e:11:96:98:16:44:3a:ac:4a:
                    c8:c0:bd:03:1e:f8:80:bb:f7:39:7f:c5:5a:f2:27:
                    fa:10:16:f5:25:80:30:a8:5c:f2:5a:70:4b:88:09:
                    4b:85:10:7e:c8:9d:c2:30:8f:af:4c:0e:35:9c:cf:
                    db:dd:27:6d:a3:34:e9:6e:f7:b7:69:10:3e:57:7c:
                    77:20:18:4a:1d:7b:f3:7a:f0:97:18:eb:f5:93:92:
                    10:93:d3:4c:ef:1c:8b:94:4f:a1:1a:0a:f3:1b:69:
                    e2:e9:97:0d:3a:a8:03:e7:93:fc:a2:48:bc:da:10:
                    f0:aa:fb:d8:76:0d:40:be:76:2c:5e:53:9c:91:4f:
                    00:08:89:bd:ef:5b:a8:ac:78:b1:96:94:93:70:6f:
                    18:52:e8:30:b5:f7:c8:1b:ad:52:a2:7c:3b:93:70:
                    32:79:24:5b:f2:c9:d6:01:68:cb:0f:b1:e9:b2:3c:
                    d0:96:f6:6c:03:15:9b:fa:be:6f:de:bf:53:b6:97:
                    08:ea:f6:d7:e5:3c:d7:a3:d6:0e:66:1e:58:cd:86:
                    14:88:57:93:b0:30:75:58:c8:bb:66:76:97:56:3d:
                    11:3d:ce:0d:03:59:7a:c8:17:c9:46:f3:b8:2d:09:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:47:F0:93:EE:D5:5A:67:A0:FF:8D:DB:8F:7D:3D:E7:08:1D:B8
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:39:13:f3:fd:c7:f9:68:7d:c6:b6:2d:08:a1:f0:7b:14:
         43:45:9b:4f:3b:af:64:a9:40:72:bd:b8:66:69:09:69:de:28:
         9a:e4:93:3d:02:5d:4f:43:e5:ce:ad:5e:69:85:a3:ba:10:47:
         17:1f:6d:cf:a2:82:0e:8b:8b:d4:a2:37:03:48:4f:d7:41:ab:
         fd:0c:d4:09:14:e4:72:bd:e2:03:f8:52:18:80:93:02:37:ce:
         b0:0c:8f:81:e9:c3:8f:25:82:d7:89:1b:f6:49:59:92:4f:ae:
         51:e1:7a:96:3e:36:04:d5:73:0f:9c:7f:35:1f:61:6e:f4:ac:
         38:f9:ed:f7:fc:c6:72:c5:31:0c:11:60:47:bf:e6:26:cb:5f:
         54:ff:55:4b:2d:f2:27:e4:ad:57:48:8e:02:12:cc:79:51:a0:
         fb:3a:fb:fa:6d:52:7c:88:04:5d:0f:23:a1:d4:0e:a5:c6:ad:
         9c:42:ee:55:88:5e:52:0b:da:e3:1e:de:02:84:40:43:02:6f:
         7b:7a:87:bb:d5:66:95:10:c4:68:50:8b:85:b4:e7:98:f9:45:
         5f:17:7e:55:5d:c1:59:43:27:42:a2:0b:6b:cd:f0:b1:9d:d6:
         fb:08:55:b6:ff:12:87:71:bf:3b:d0:18:bd:ae:0a:91:27:89:
         10:76:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----