Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          Es2dVYrlzIcEKZkyPSYK7FiLb3vjJ4ua112OOs/UHqA=
Subject key identifier:   79:D2:F6:16:D8:5E:C9:1C:50:AC:A2:6C:3A:C5:B8:67:DC:C9:50:40
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       01A0D64BC67ED65AE13C2C019B388623A524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          1ABC
Signing time:             Fri 25 Sep 2026 02:01:25 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:25 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:25 +0000
Files and hashes:         1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
                          2: 0yWvn9M6oy5fHhcusKTNYjRT7SM.roa (hash: WvQP0RNlRK2xc7fMdnNh9d+C2dzK7VsvYxKqHmxbO9Q=)
                          3: 2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa (hash: 3fPXfPBlzwSi3JHWyKN+vJkAotRs4RzEaoGJ/+xtt28=)
                          4: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
                          5: 4f1jJ8E82r0gR9Ab6Hidgqh2qrM.roa (hash: CFWlrERh/hwsr4YRxnJy0GcEb2F2O746xrdF/LZj6I8=)
                          6: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
                          7: 5MhKkkw8Qijd_355CWuE5w3kdNc.roa (hash: DXDSU8SEgCHnvy2y11y8ZxqKtbTq0+BFYZq55TmuO6k=)
                          8: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
                          9: 5W0-ra53TPlyrkH_8scYXGoQnSQ.roa (hash: 7mJWw5WXjc5SMaPTt7Tx+0uYg/99DmpGBOHkDsLBe2Q=)
                          10: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (hash: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=)
                          11: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
                          12: 88oBOIfcxO5C3viuNbKmbpyOp0g.roa (hash: 71bKpcg4fHr0KDnTVvLnsNbSOhrOX1niwtQJpClMRyo=)
                          13: 9PGqKuICSeWwf3zuAb1W9nW41BQ.roa (hash: O9+KrIurPHxxt2aVkqdjf+mpsaCM/665bM72vJuP/4o=)
                          14: Ah5FDNR1KAU8tBZp0ehaaMl4ISw.roa (hash: SA8yyQizIhWIxZvHuE+k7Unjkf8GgkqGQT4YRsl/esQ=)
                          15: BIG6nBuxQiXzo3A8VVUzmGCYUXg.roa (hash: fzvbtoojQe9O9HxvUDJgqzSsNS0LqxyijfXmKyO6zrU=)
                          16: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: qLrAUhh4BNUnXgX8Eio8PYoFlznHFlg3Ynkjki+VrW4=)
                          17: D71o-jCvB_NKiAzZ6Jv4CVT--MI.roa (hash: m0XsKk0XGqpm16GVGQoepmbQBC8s6bQGdfOWZSfsdEc=)
                          18: DNfeT75YIWg_GiEYi0OXwXzVsCE.roa (hash: p373o+Uf7zsdGjZbtQi0QVhe/Loppcgzl4NraszftMQ=)
                          19: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
                          20: EcVCYTCFbfuctisOnGpTpzze87E.roa (hash: AvUy4CNenHZ3+B409HhzJ1fMxMdjTbDHUphzokd1e30=)
                          21: KBGbhFwNO64vnTgp2-lkSmeMc4g.roa (hash: PlnzFb30SW+W4qYSwa9V4CG4SOa/pxWCht+Uh9q1/RA=)
                          22: LaJR34WXnWTcaI-9LhjMEyhwweI.roa (hash: ppFMaEyyaI1nBO0GmKOzMtxwnZk5UIRNx7Q+g13bpwk=)
                          23: OdlIdhUi21fj5cczb-7WJINtysY.roa (hash: xZD9f0KAxGvn4NddjuJzY91yfkyxr9JttpLoWZK4sAA=)
                          24: PWCKCiM2n9d2HVQlz1epDmR9OLo.roa (hash: Ft2uNW2TtxrgggDgw6Rspf9etRjmqmAIRvpEQN2Kgms=)
                          25: QpztarK9bvpnWfXobrI7Q7qFhUI.roa (hash: N3nmNaw8DpeSVQsFSUX+b5d+hltwjL59HWcqiupjdsw=)
                          26: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
                          27: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
                          28: RwNKa_ogUqGBHRLaOKyBj32Gito.roa (hash: Vsdp7tNDT+ir+CZ/FE/LGXqFdol4dz9sVumfvHQ62gk=)
                          29: SYooDqCmdVk7J9G18v-PHkKmFSU.roa (hash: 1uqZUR2gy/ZNCyXiNt/AJMF3rBVB4YYfxO0Xy2cNDGk=)
                          30: U6dLDAejvUgnq5aOMEIUtrBzTBk.roa (hash: 2dgujFoVBvo9HpAJXnhdci16ozuiz9TD8/Uw/FW7qg0=)
                          31: YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa (hash: dMA7bJ3qBQAVvVANJ6N/cwoY5Mkkyuwl6eF8ht6OLk8=)
                          32: ZAORioOQSLrW0zfUYr-mwjKGOR8.roa (hash: /BIwedLN6Bs6oZ4U9lltNm3dX7rdFQEcz9tlQlLQj7k=)
                          33: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
                          34: eL3BOW3R9YF4NTYszpn-G4GicXE.roa (hash: eWdcg/wUnlcSSTHz0FoI6XetkTNSCLoEjSq0/aIE4N0=)
                          35: euUSuD1lZKlShMZyrQqymS3jUy8.roa (hash: +PD83dNVumxid1Tk8m31T6C/beJSa9fEboE2ESl2okE=)
                          36: ivesAc680JnUeWSUHDxuYowE9E0.roa (hash: s0QsxXI3vBZLCn/DcwEIEgrjWzwUsD0DkKEib67yuMM=)
                          37: jOw_auvAMHfQZA63CN2U9mBRMVc.roa (hash: xPvK5ttQn8QygiN6ftuMK506XQIyRGc1Bg84C5Jpu7Y=)
                          38: kPfgHSfk4FFttCCtHtRYkRCQXbk.roa (hash: 79gKRmZ1YiBm+4TSS/3DQ+xjB2kQxDrxYWPGlqWrvCQ=)
                          39: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
                          40: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
                          41: nIk5A6ErIwKHjIST0TKhFNzSFyo.roa (hash: xNKAVsziKdZ3bHdc3Ep9rpHR5222VpmJVGNLxIONyHU=)
                          42: njZofDQgidOuoUz8FhOg8HlCcO4.roa (hash: pmn04WuysaIGzuvE21AGaFY1j1JzftPrKe2jTGhY34o=)
                          43: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
                          44: oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa (hash: oCbELwtCCjp+HJZHCOxixxeMeDAIy5Gv5vPFtIqmCag=)
                          45: qEa_L8kGOi53ART3FlNq9TybX7c.roa (hash: rrw4ohnUKyXaDhZXFhCmFRaabw1fcbR6KeqCmrwhlsg=)
                          46: qkS5cYPFZrOfFEnw0kRphQHKbUM.roa (hash: HZjT/4z+H3kozgK8aLyCQfoXg5gGHmg7yVarvxbp30U=)
                          47: rby-7T6x71cqSYYHPc0qiCSdUhE.roa (hash: 1GDwq4DbLKxk7kZ1lvF4nxcYZWez0969XUelMmv2xlI=)
                          48: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
                          49: tJRBfkltOeEmMpBp0s_Fw82V_ZQ.roa (hash: 7IZRMnOIiolL9vb2qxe2gqgVq4yYweBOY6XfPJTUiy4=)
                          50: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
                          51: wfFnps6y7Cx1IJ7srFZcBtiVI7U.roa (hash: 8qWHpTIXAN+RHXRjlUBOoa2U19sKf49THpdACyzapSI=)
                          52: xKPCZLn5NBwKOnGfN6Jfm7bqVhI.roa (hash: MULPMSCgu1soomGcBhyo6KncDRQ60sADMNncZpDFSk0=)
                          53: xnLqP066QreDEuGoe4aceiuQnok.roa (hash: W2BBOQCtGCSZiC505GNr1hWCxfkVPLs9xYD8nvPcDSs=)
                          54: ywdB0EXOIH8dTf4pebYAPe9o-ug.roa (hash: K9k9XT6wttB9hDlyoRtQ3UfVyFDqPJWVjoonjIi01wg=)
                          55: zZgAiVF6YAvHOQAzpqnZj8pf21I.roa (hash: P6o0oNH6EXIbZ3NMCQ5NQ9rFVHOr+ieAKEm7U8TSUGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:c6:7e:d6:5a:e1:3c:2c:01:9b:38:86:23:a5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: Sep 25 02:01:25 2026 GMT
            Not After : Sep 26 02:01:25 2026 GMT
        Subject: CN=79d2f616d85ec91c50aca26c3ac5b867dcc95040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:66:7d:24:94:75:dc:02:31:e3:95:14:3d:
                    3b:ba:54:47:91:80:fd:2a:9b:be:93:86:f8:61:84:
                    4d:6f:09:c4:fc:02:e0:92:35:ad:cd:0c:90:bd:ca:
                    ee:fb:43:1e:af:97:3e:ce:f8:ce:b1:35:ca:08:57:
                    f7:1a:2a:87:e3:ce:f8:b9:0e:32:50:24:a3:a7:15:
                    e3:8c:28:b4:fc:ea:1d:79:c4:25:3d:6e:a2:15:7c:
                    f3:2b:bd:41:e4:ec:55:11:80:90:89:fd:5d:82:65:
                    5c:92:79:f0:4a:a1:9c:b7:2f:a5:50:aa:33:06:fb:
                    65:76:19:1c:86:bf:3b:d4:16:6d:4e:b0:15:64:7d:
                    83:ce:52:bf:69:a4:35:6b:19:51:08:0f:82:2c:b4:
                    90:f6:f7:0b:cd:49:8b:bc:c4:17:f0:4e:00:9b:b6:
                    09:94:b8:e3:69:e9:8a:e2:c3:86:29:98:fa:b2:4e:
                    23:d3:8c:46:65:9a:f3:8c:0e:06:ae:ad:fd:bf:c1:
                    e9:42:70:07:93:40:a0:86:90:3b:28:1a:85:5d:d6:
                    28:47:d5:3b:09:2b:c4:be:76:b9:0f:20:64:4b:b0:
                    02:2c:4d:b1:43:23:ac:76:3d:d0:bf:03:37:29:f9:
                    8d:2a:94:a6:ec:13:30:fd:66:8a:4a:59:1d:69:f7:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:F6:16:D8:5E:C9:1C:50:AC:A2:6C:3A:C5:B8:67:DC:C9:50:40
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:7e:7a:82:69:b9:41:5a:58:83:de:f1:0b:e7:c5:0a:80:
         72:35:6d:fc:77:19:26:f6:35:43:c5:c1:76:25:3e:55:cd:c2:
         45:2c:3a:88:c6:95:7a:cd:bf:b8:63:3e:a9:ed:5f:b1:ca:a9:
         3d:b4:69:91:de:7d:8c:3f:06:12:de:4f:22:15:4f:fc:70:74:
         dd:0f:8b:5d:e1:52:0f:86:b1:11:b7:07:06:09:85:21:e3:a7:
         d6:05:6c:21:ec:24:45:75:21:e1:e0:4e:5a:51:ab:b1:f3:60:
         12:1b:21:d4:5e:1e:c9:0c:a6:8d:94:53:0b:4f:c3:8e:14:0a:
         d6:86:e6:47:6e:1e:f1:9d:17:da:16:39:61:ed:b0:6d:8d:16:
         71:d7:ce:af:af:b8:65:14:8f:64:7c:84:20:c6:ad:3f:83:93:
         5f:71:f4:bb:13:9d:17:01:aa:47:20:8e:e4:69:ac:a7:b1:f0:
         88:e4:8a:bf:93:57:11:e4:30:bf:0d:74:42:9b:f9:37:6d:b0:
         5d:82:90:b8:ae:bc:dc:be:e1:33:47:45:8c:74:7f:38:38:f6:
         5a:e8:6e:48:3b:49:40:1c:8d:a8:5a:b0:2d:cb:ef:82:84:62:
         55:1d:d7:f4:2c:52:a5:4d:4a:4e:76:e1:5d:13:cc:67:4f:5d:
         00:7d:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:52:24 2026 by rpki-client