Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          UqqX+5uecF8MHINyIK6KP3aGnoJ9npbI6JAI6xwCVtI=
Subject key identifier:   C8:3A:8C:84:19:DD:E5:6C:4A:1D:59:43:CD:3C:82:D0:D3:F6:63:AA
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       01A0DE0545F1310717F3FDC7C3C4D19D7F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          1AC0
Signing time:             Sat 26 Sep 2026 14:01:22 +0000
Manifest this update:     Sat 26 Sep 2026 14:01:22 +0000
Manifest next update:     Sun 27 Sep 2026 14:01:22 +0000
Files and hashes:         1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
                          2: 0yWvn9M6oy5fHhcusKTNYjRT7SM.roa (hash: WvQP0RNlRK2xc7fMdnNh9d+C2dzK7VsvYxKqHmxbO9Q=)
                          3: 2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa (hash: 3fPXfPBlzwSi3JHWyKN+vJkAotRs4RzEaoGJ/+xtt28=)
                          4: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
                          5: 4f1jJ8E82r0gR9Ab6Hidgqh2qrM.roa (hash: CFWlrERh/hwsr4YRxnJy0GcEb2F2O746xrdF/LZj6I8=)
                          6: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
                          7: 5MhKkkw8Qijd_355CWuE5w3kdNc.roa (hash: DXDSU8SEgCHnvy2y11y8ZxqKtbTq0+BFYZq55TmuO6k=)
                          8: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
                          9: 5W0-ra53TPlyrkH_8scYXGoQnSQ.roa (hash: 7mJWw5WXjc5SMaPTt7Tx+0uYg/99DmpGBOHkDsLBe2Q=)
                          10: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (hash: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=)
                          11: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
                          12: 88oBOIfcxO5C3viuNbKmbpyOp0g.roa (hash: 71bKpcg4fHr0KDnTVvLnsNbSOhrOX1niwtQJpClMRyo=)
                          13: 9PGqKuICSeWwf3zuAb1W9nW41BQ.roa (hash: O9+KrIurPHxxt2aVkqdjf+mpsaCM/665bM72vJuP/4o=)
                          14: Ah5FDNR1KAU8tBZp0ehaaMl4ISw.roa (hash: SA8yyQizIhWIxZvHuE+k7Unjkf8GgkqGQT4YRsl/esQ=)
                          15: BIG6nBuxQiXzo3A8VVUzmGCYUXg.roa (hash: fzvbtoojQe9O9HxvUDJgqzSsNS0LqxyijfXmKyO6zrU=)
                          16: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: sJlw5mPKFGcR57DRIXoDnRkxr+OwmZf5JcbtriL7PXM=)
                          17: D71o-jCvB_NKiAzZ6Jv4CVT--MI.roa (hash: m0XsKk0XGqpm16GVGQoepmbQBC8s6bQGdfOWZSfsdEc=)
                          18: DNfeT75YIWg_GiEYi0OXwXzVsCE.roa (hash: p373o+Uf7zsdGjZbtQi0QVhe/Loppcgzl4NraszftMQ=)
                          19: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
                          20: EcVCYTCFbfuctisOnGpTpzze87E.roa (hash: AvUy4CNenHZ3+B409HhzJ1fMxMdjTbDHUphzokd1e30=)
                          21: KBGbhFwNO64vnTgp2-lkSmeMc4g.roa (hash: PlnzFb30SW+W4qYSwa9V4CG4SOa/pxWCht+Uh9q1/RA=)
                          22: LaJR34WXnWTcaI-9LhjMEyhwweI.roa (hash: ppFMaEyyaI1nBO0GmKOzMtxwnZk5UIRNx7Q+g13bpwk=)
                          23: OdlIdhUi21fj5cczb-7WJINtysY.roa (hash: xZD9f0KAxGvn4NddjuJzY91yfkyxr9JttpLoWZK4sAA=)
                          24: PWCKCiM2n9d2HVQlz1epDmR9OLo.roa (hash: Ft2uNW2TtxrgggDgw6Rspf9etRjmqmAIRvpEQN2Kgms=)
                          25: QpztarK9bvpnWfXobrI7Q7qFhUI.roa (hash: N3nmNaw8DpeSVQsFSUX+b5d+hltwjL59HWcqiupjdsw=)
                          26: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
                          27: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
                          28: RwNKa_ogUqGBHRLaOKyBj32Gito.roa (hash: Vsdp7tNDT+ir+CZ/FE/LGXqFdol4dz9sVumfvHQ62gk=)
                          29: SYooDqCmdVk7J9G18v-PHkKmFSU.roa (hash: 1uqZUR2gy/ZNCyXiNt/AJMF3rBVB4YYfxO0Xy2cNDGk=)
                          30: U6dLDAejvUgnq5aOMEIUtrBzTBk.roa (hash: 2dgujFoVBvo9HpAJXnhdci16ozuiz9TD8/Uw/FW7qg0=)
                          31: YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa (hash: dMA7bJ3qBQAVvVANJ6N/cwoY5Mkkyuwl6eF8ht6OLk8=)
                          32: ZAORioOQSLrW0zfUYr-mwjKGOR8.roa (hash: /BIwedLN6Bs6oZ4U9lltNm3dX7rdFQEcz9tlQlLQj7k=)
                          33: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
                          34: eL3BOW3R9YF4NTYszpn-G4GicXE.roa (hash: eWdcg/wUnlcSSTHz0FoI6XetkTNSCLoEjSq0/aIE4N0=)
                          35: euUSuD1lZKlShMZyrQqymS3jUy8.roa (hash: +PD83dNVumxid1Tk8m31T6C/beJSa9fEboE2ESl2okE=)
                          36: ivesAc680JnUeWSUHDxuYowE9E0.roa (hash: s0QsxXI3vBZLCn/DcwEIEgrjWzwUsD0DkKEib67yuMM=)
                          37: jOw_auvAMHfQZA63CN2U9mBRMVc.roa (hash: xPvK5ttQn8QygiN6ftuMK506XQIyRGc1Bg84C5Jpu7Y=)
                          38: kPfgHSfk4FFttCCtHtRYkRCQXbk.roa (hash: 79gKRmZ1YiBm+4TSS/3DQ+xjB2kQxDrxYWPGlqWrvCQ=)
                          39: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
                          40: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
                          41: nIk5A6ErIwKHjIST0TKhFNzSFyo.roa (hash: xNKAVsziKdZ3bHdc3Ep9rpHR5222VpmJVGNLxIONyHU=)
                          42: njZofDQgidOuoUz8FhOg8HlCcO4.roa (hash: pmn04WuysaIGzuvE21AGaFY1j1JzftPrKe2jTGhY34o=)
                          43: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
                          44: oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa (hash: oCbELwtCCjp+HJZHCOxixxeMeDAIy5Gv5vPFtIqmCag=)
                          45: qEa_L8kGOi53ART3FlNq9TybX7c.roa (hash: rrw4ohnUKyXaDhZXFhCmFRaabw1fcbR6KeqCmrwhlsg=)
                          46: qkS5cYPFZrOfFEnw0kRphQHKbUM.roa (hash: HZjT/4z+H3kozgK8aLyCQfoXg5gGHmg7yVarvxbp30U=)
                          47: rby-7T6x71cqSYYHPc0qiCSdUhE.roa (hash: 1GDwq4DbLKxk7kZ1lvF4nxcYZWez0969XUelMmv2xlI=)
                          48: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
                          49: tJRBfkltOeEmMpBp0s_Fw82V_ZQ.roa (hash: 7IZRMnOIiolL9vb2qxe2gqgVq4yYweBOY6XfPJTUiy4=)
                          50: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
                          51: wfFnps6y7Cx1IJ7srFZcBtiVI7U.roa (hash: 8qWHpTIXAN+RHXRjlUBOoa2U19sKf49THpdACyzapSI=)
                          52: xKPCZLn5NBwKOnGfN6Jfm7bqVhI.roa (hash: MULPMSCgu1soomGcBhyo6KncDRQ60sADMNncZpDFSk0=)
                          53: xnLqP066QreDEuGoe4aceiuQnok.roa (hash: W2BBOQCtGCSZiC505GNr1hWCxfkVPLs9xYD8nvPcDSs=)
                          54: ywdB0EXOIH8dTf4pebYAPe9o-ug.roa (hash: K9k9XT6wttB9hDlyoRtQ3UfVyFDqPJWVjoonjIi01wg=)
                          55: zZgAiVF6YAvHOQAzpqnZj8pf21I.roa (hash: P6o0oNH6EXIbZ3NMCQ5NQ9rFVHOr+ieAKEm7U8TSUGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:05:45:f1:31:07:17:f3:fd:c7:c3:c4:d1:9d:7f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: Sep 26 14:01:22 2026 GMT
            Not After : Sep 27 14:01:22 2026 GMT
        Subject: CN=c83a8c8419dde56c4a1d5943cd3c82d0d3f663aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:c2:97:03:4c:30:b7:d1:42:88:9d:ac:e9:
                    80:e1:14:6e:4e:7d:96:06:69:f2:75:87:5c:27:1d:
                    f8:62:8b:19:8a:c4:ec:4e:3a:dd:f8:5f:e8:bb:66:
                    dc:e7:c8:d9:01:af:98:8b:b2:a5:c3:9d:06:77:07:
                    b5:61:65:d5:ac:61:d5:68:03:7e:cd:0c:f3:2c:0a:
                    aa:7e:c2:55:f1:89:60:a8:5b:3b:40:c3:58:12:b5:
                    b3:9c:f8:eb:69:a2:11:88:e9:e1:26:31:da:93:b1:
                    2b:86:fd:4a:9f:ce:9c:bf:01:2c:22:5d:6e:8c:45:
                    e1:90:9a:bc:5d:04:ef:9a:94:3e:45:95:39:76:cf:
                    63:84:69:c9:6a:1d:af:60:d6:cf:0e:9c:2d:eb:54:
                    a6:af:d1:d1:c2:49:83:f5:bd:4e:09:55:f9:7c:94:
                    aa:cd:20:04:5d:1b:80:14:c1:c6:55:b5:b0:47:42:
                    c1:ac:7d:fa:c4:53:f9:13:fd:f5:49:20:f9:49:37:
                    96:63:f9:2d:b5:eb:cd:16:a1:42:9f:93:cd:05:28:
                    3c:e3:1f:d3:e1:3b:a1:e0:8f:54:c3:dd:00:99:49:
                    76:12:02:0d:70:ce:55:66:68:85:59:54:9f:ed:98:
                    86:eb:15:1b:5d:b5:c2:5f:29:54:db:c7:3f:93:1e:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:8C:84:19:DD:E5:6C:4A:1D:59:43:CD:3C:82:D0:D3:F6:63:AA
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:59:f3:1a:16:9b:a2:dd:5a:62:81:b8:47:9d:1d:2a:9d:
         54:18:06:86:2f:c1:b7:79:d8:8c:63:47:38:f0:9c:ce:31:b9:
         cc:dc:86:c6:b3:44:b6:c4:62:19:89:0f:d5:31:2c:c1:5d:f7:
         d8:09:7c:08:a8:04:cc:0c:ce:fd:c7:75:56:5e:81:ad:4e:21:
         6e:d5:0e:b9:27:b0:60:5f:02:99:b9:b5:d4:a6:ce:b6:34:33:
         be:c3:44:34:bf:e0:ab:25:4c:1a:1f:0a:cf:59:8b:b7:79:68:
         4d:ce:e9:77:4b:c9:4f:c2:5e:04:3a:c5:2e:b4:fc:e5:b2:d3:
         6f:4b:59:69:89:ff:71:69:cd:53:cd:f9:fb:c9:e4:2b:37:65:
         d1:4d:f3:08:5f:f1:6e:a4:0a:f5:cf:b1:1f:f8:fa:50:b8:74:
         d9:80:3e:02:20:03:cd:d2:0f:89:a3:c5:84:5b:21:4e:4d:bc:
         c0:61:bb:53:c6:f4:43:47:a7:b5:55:2f:b2:a8:69:d6:be:9d:
         a9:08:9e:ae:ce:d1:fe:f8:bd:39:11:ba:f4:6d:8b:0b:c6:29:
         91:2c:ad:e3:63:62:4d:f5:13:8b:8f:61:fa:61:61:ba:8c:7e:
         de:73:a3:39:94:ee:a4:7d:50:22:d8:ea:b7:4f:de:7f:99:ee:
         8c:f6:0b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBUXxMQcX8/3Hw8TRnX9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTI2MTQwMTIyWhcNMjYwOTI3MTQwMTIyWjAzMTEwLwYDVQQD
EyhjODNhOGM4NDE5ZGRlNTZjNGExZDU5NDNjZDNjODJkMGQzZjY2M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KzClwNMMLfRQoidrOmA4RRuTn2W
BmnydYdcJx34YosZisTsTjrd+F/ou2bc58jZAa+Yi7Klw50Gdwe1YWXVrGHVaAN+
zQzzLAqqfsJV8YlgqFs7QMNYErWznPjraaIRiOnhJjHak7Erhv1Kn86cvwEsIl1u
jEXhkJq8XQTvmpQ+RZU5ds9jhGnJah2vYNbPDpwt61Smr9HRwkmD9b1OCVX5fJSq
zSAEXRuAFMHGVbWwR0LBrH36xFP5E/31SSD5STeWY/kttevNFqFCn5PNBSg84x/T
4Tuh4I9Uw90AmUl2EgINcM5VZmiFWVSf7ZiG6xUbXbXCXylU28c/kx6+dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg6jIQZ3eVsSh1ZQ808gtDT9mOqMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvFZ8xoW
m6LdWmKBuEedHSqdVBgGhi/Bt3nYjGNHOPCczjG5zNyGxrNEtsRiGYkP1TEswV33
2Al8CKgEzAzO/cd1Vl6BrU4hbtUOuSewYF8Cmbm11KbOtjQzvsNENL/gqyVMGh8K
z1mLt3loTc7pd0vJT8JeBDrFLrT85bLTb0tZaYn/cWnNU835+8nkKzdl0U3zCF/x
bqQK9c+xH/j6ULh02YA+AiADzdIPiaPFhFshTk28wGG7U8b0Q0entVUvsqhp1r6d
qQiers7R/vi9ORG69G2LC8YpkSyt42NiTfUTi49h+mFhuox+3nOjOZTupH1QItjq
t0/ef5nujPYL7Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:49:45 2026 by rpki-client