Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          RVcSZq48dasJ+UeTfu9ux9+1MMSVcYIoAriUdwi3O3k=
Subject key identifier:   7F:DA:ED:A6:7A:A2:F0:22:34:32:A3:9C:69:85:AD:3B:F5:BD:7D:FA
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       01A0CFA47760B0187CAFE2A91F1BCCCBCFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          1AA5
Signing time:             Wed 23 Sep 2026 19:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:57 +0000
Files and hashes:         1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
                          2: 1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa (hash: n/+YCBqOHi+s8WDRWfFnh1a6xZcIZPTt7kJsJIwPfig=)
                          3: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
                          4: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
                          5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: py3a6TtjWrFPTXsNMC/RPt/noEITN4dAte6cJ8nDLgY=)
                          6: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
                          7: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
                          8: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
                          9: LPKqTSVzcP75Ir01n2Kg2_3KSWE.roa (hash: /6mufLc8RKFeF3dRaOjWVZlCvVQTejHdA5IcjJxuYHE=)
                          10: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=)
                          11: UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa (hash: VOWK04oeNwI2BvH04UyeeOn1Ap/fxbwci3E3SMPb4pg=)
                          12: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
                          13: Upw0V-SDT9Y_-WbmQx-I6zkEvMY.roa (hash: 52SxqdmLKtGpI63r4YyY3Mjoft2YtbOnX1aUlWH5kpE=)
                          14: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
                          15: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
                          16: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
                          17: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
                          18: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=)
                          19: jO7oDF04bPx0TQY6QGPjbRHTuhg.roa (hash: R8g37YojB+MM81yrSyDVisG5M/Y/Qas711OAISKe3eY=)
                          20: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
                          21: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
                          22: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
                          23: znZ9-PpEUCF0s_0ZbvQNPq1vxXU.roa (hash: iiZjOv+cR17NVqfjRFVC6YAKx+dYOIyRDtOVPnnsLmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:77:60:b0:18:7c:af:e2:a9:1f:1b:cc:cb:cf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Sep 23 19:00:57 2026 GMT
            Not After : Sep 24 19:00:57 2026 GMT
        Subject: CN=7fdaeda67aa2f0223432a39c6985ad3bf5bd7dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:20:98:5d:12:47:af:2f:83:ff:75:36:76:
                    a9:23:01:f6:1e:05:e8:d1:bc:0d:70:f9:c3:d0:7f:
                    6b:5f:19:19:d7:78:34:8b:1a:0d:65:c7:66:62:84:
                    e7:08:89:ab:1f:24:61:20:63:7f:05:59:e9:b4:24:
                    e6:30:b1:b9:e5:2b:b4:0e:d3:2f:c5:0f:32:32:5a:
                    91:aa:69:ca:69:c4:ec:1a:ca:bd:bc:13:f3:c2:02:
                    d3:6a:49:58:39:c9:61:e6:cc:ec:8b:d5:c7:fe:e3:
                    11:2e:ba:fc:73:72:cf:de:6b:83:d8:8a:b3:e6:ac:
                    3e:9a:0b:5f:fb:14:a2:df:9b:d1:a4:e2:53:49:11:
                    e7:f4:44:af:74:d3:d4:6d:ff:97:01:6a:be:f5:35:
                    1a:7a:84:dd:41:7f:10:6e:0d:f3:51:84:e3:c8:46:
                    1e:47:b5:dd:22:f2:74:8e:ed:9a:1a:c6:ca:8a:b2:
                    64:05:ca:6a:e9:63:f4:9e:88:85:ae:db:ea:b4:04:
                    2f:32:ad:54:27:59:30:d8:f9:15:45:7c:84:89:69:
                    2d:86:09:92:04:46:ff:28:12:22:31:e6:71:9d:ec:
                    45:f1:fb:69:1c:e9:e6:4d:7c:57:59:af:e6:43:60:
                    a4:85:1d:b6:01:1f:bc:33:e7:9b:7f:c1:5b:0e:d4:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:ED:A6:7A:A2:F0:22:34:32:A3:9C:69:85:AD:3B:F5:BD:7D:FA
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:bb:60:47:a8:01:19:af:ad:8e:6e:47:ff:c1:b9:98:52:
         39:21:a4:96:94:3c:b4:ed:43:5d:5d:68:35:7c:02:b0:29:82:
         91:c7:50:5f:7f:1e:88:86:f9:39:fe:4c:d6:8a:34:b9:5e:5a:
         73:4e:e3:8c:c2:22:46:b6:ed:5f:d5:25:fd:5b:c9:4f:94:40:
         46:8a:ab:ac:c2:6f:4e:05:0e:a1:67:35:da:98:b3:21:22:23:
         ee:f6:97:88:57:a1:24:c3:e7:cf:ce:c1:37:09:68:df:c3:d0:
         b5:96:4c:6d:bf:08:24:ae:48:0b:f4:60:d7:b4:cf:0a:6a:19:
         05:23:4a:3f:65:44:c2:05:16:57:d9:15:d0:53:2e:25:21:0e:
         1e:1c:f6:87:71:bc:ef:48:19:ff:9b:32:11:b5:ad:0e:42:e0:
         d7:78:b6:0b:fc:2e:2b:5e:ed:f8:27:71:98:13:bb:8d:4b:29:
         21:00:75:d1:48:ce:b7:f2:12:a0:15:29:73:51:18:de:b1:d9:
         bf:0c:4e:ca:14:81:0f:14:a7:aa:35:04:d0:38:35:ab:11:af:
         48:fe:bf:f0:f4:fe:f4:bf:e4:d2:e1:d0:92:34:a3:53:c5:ab:
         02:0c:5d:54:eb:18:e0:17:20:6f:84:78:7c:ea:3e:f6:94:45:
         0f:0e:fc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpHdgsBh8r+KpHxvMy8+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjYwOTIzMTkwMDU3WhcNMjYwOTI0MTkwMDU3WjAzMTEwLwYDVQQD
Eyg3ZmRhZWRhNjdhYTJmMDIyMzQzMmEzOWM2OTg1YWQzYmY1YmQ3ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23wgmF0SR68vg/91NnapIwH2HgXo
0bwNcPnD0H9rXxkZ13g0ixoNZcdmYoTnCImrHyRhIGN/BVnptCTmMLG55Su0DtMv
xQ8yMlqRqmnKacTsGsq9vBPzwgLTaklYOclh5szsi9XH/uMRLrr8c3LP3muD2Iqz
5qw+mgtf+xSi35vRpOJTSRHn9ESvdNPUbf+XAWq+9TUaeoTdQX8Qbg3zUYTjyEYe
R7XdIvJ0ju2aGsbKirJkBcpq6WP0noiFrtvqtAQvMq1UJ1kw2PkVRXyEiWkthgmS
BEb/KBIiMeZxnexF8ftpHOnmTXxXWa/mQ2CkhR22AR+8M+ebf8FbDtRGyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/a7aZ6ovAiNDKjnGmFrTv1vX36MB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXO7YEeo
ARmvrY5uR//BuZhSOSGklpQ8tO1DXV1oNXwCsCmCkcdQX38eiIb5Of5M1oo0uV5a
c07jjMIiRrbtX9Ul/VvJT5RARoqrrMJvTgUOoWc12pizISIj7vaXiFehJMPnz87B
Nwlo38PQtZZMbb8IJK5IC/Rg17TPCmoZBSNKP2VEwgUWV9kV0FMuJSEOHhz2h3G8
70gZ/5syEbWtDkLg13i2C/wuK17t+CdxmBO7jUspIQB10UjOt/ISoBUpc1EY3rHZ
vwxOyhSBDxSnqjUE0Dg1qxGvSP6/8PT+9L/k0uHQkjSjU8WrAgxdVOsY4Bcgb4R4
fOo+9pRFDw78aw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:59:32 2026 by rpki-client