Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          HQuT+tB9TCOwH8v92MF8SIPqgAYJKpV2qrNkNVebZ3s=
Subject key identifier:   1C:19:03:4B:FC:80:DF:DF:C4:E6:B7:E2:4D:A5:9B:CA:CA:2A:88:F9
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       019FA71919D948ECCFFB410C833AD515CFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          1A0B
Signing time:             Tue 28 Jul 2026 05:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 05:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 05:01:07 +0000
Files and hashes:         1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
                          2: 1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa (hash: n/+YCBqOHi+s8WDRWfFnh1a6xZcIZPTt7kJsJIwPfig=)
                          3: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
                          4: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
                          5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: n4zuiUM7l8Szl6zO7IesJCoMXyhquL9/bGn0qM4v5PQ=)
                          6: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
                          7: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
                          8: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
                          9: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=)
                          10: UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa (hash: VOWK04oeNwI2BvH04UyeeOn1Ap/fxbwci3E3SMPb4pg=)
                          11: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
                          12: Upw0V-SDT9Y_-WbmQx-I6zkEvMY.roa (hash: 52SxqdmLKtGpI63r4YyY3Mjoft2YtbOnX1aUlWH5kpE=)
                          13: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
                          14: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
                          15: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
                          16: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
                          17: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=)
                          18: jO7oDF04bPx0TQY6QGPjbRHTuhg.roa (hash: R8g37YojB+MM81yrSyDVisG5M/Y/Qas711OAISKe3eY=)
                          19: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
                          20: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
                          21: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
                          22: znZ9-PpEUCF0s_0ZbvQNPq1vxXU.roa (hash: iiZjOv+cR17NVqfjRFVC6YAKx+dYOIyRDtOVPnnsLmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:19:19:d9:48:ec:cf:fb:41:0c:83:3a:d5:15:cf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jul 28 05:01:07 2026 GMT
            Not After : Jul 29 05:01:07 2026 GMT
        Subject: CN=1c19034bfc80dfdfc4e6b7e24da59bcaca2a88f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:e8:52:42:f1:f1:27:01:5f:7b:54:e2:f5:
                    45:e1:7a:17:7f:24:5c:0c:35:44:46:d3:e1:bf:e8:
                    cf:08:d6:7b:da:a7:5f:e8:d0:8a:61:72:a0:7e:a2:
                    1c:54:bf:0c:6b:84:51:ca:ad:b9:ef:87:80:7e:e9:
                    cd:8f:46:63:29:f6:d3:91:2b:12:01:13:04:20:fd:
                    c5:b9:cc:d3:e1:08:6f:cc:d6:bc:50:71:62:c0:bd:
                    cf:01:81:90:78:46:e5:d7:99:4e:aa:bf:91:a9:4e:
                    c6:7e:49:16:d6:12:23:39:02:16:e1:a8:2f:30:b6:
                    16:9b:86:16:b9:77:7b:be:75:4d:1f:42:9f:9e:fd:
                    de:bf:50:f2:f6:bb:ee:3e:b8:69:41:64:af:f5:8e:
                    e9:d0:63:a8:5c:e4:8b:cc:ec:45:b4:b9:68:e9:6b:
                    c9:42:e6:3b:01:ae:96:c7:4f:e8:b9:59:79:58:19:
                    1d:14:0d:b9:23:99:0d:5e:60:e0:71:4d:f7:fd:83:
                    fd:db:80:0e:52:b1:a5:62:99:65:cb:6c:48:ba:97:
                    00:fd:43:49:4b:1e:82:34:3d:9d:b2:73:8c:d2:e3:
                    06:5d:84:d2:a8:52:15:d3:35:02:09:f0:f7:33:83:
                    fd:c2:a9:78:46:fd:f0:74:bf:66:e0:8b:0d:8d:c2:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:19:03:4B:FC:80:DF:DF:C4:E6:B7:E2:4D:A5:9B:CA:CA:2A:88:F9
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b0:53:db:fd:f1:1d:aa:e4:24:ff:d5:5f:a6:34:7a:70:37:
         ea:fc:44:21:44:a4:d9:b6:9f:38:f4:7f:dc:a6:a3:b5:96:6d:
         b0:61:ca:cd:ed:9a:d8:7a:b0:12:da:16:88:fa:ce:5d:99:7b:
         07:36:93:99:99:c5:6e:fb:7b:b3:e8:1e:bc:59:bf:e4:f4:f5:
         04:8c:ee:eb:7d:f9:88:9c:7f:03:f8:70:09:33:a3:6a:c5:03:
         02:59:ba:9d:ed:5c:39:69:2f:ac:77:cf:5f:4d:97:23:cd:0e:
         ac:7f:6a:e6:d4:c6:9c:e8:f7:48:d8:4d:b8:d5:eb:97:69:16:
         29:c6:68:6b:17:fb:ef:47:98:9f:22:cd:35:b7:5e:7e:f5:be:
         22:6a:64:b2:01:1c:6e:4f:aa:d9:8e:3d:0e:22:d2:20:9f:bb:
         ab:5e:14:d7:7e:77:aa:7b:91:30:33:cd:56:1b:3b:59:f5:ed:
         ef:e9:61:fa:c8:f0:32:c6:43:21:1c:0c:aa:64:7e:8f:ab:83:
         ea:e5:0f:ff:ba:21:85:86:5f:0b:54:9e:a3:1e:cb:66:95:fb:
         74:b3:68:11:2a:da:46:50:d8:2d:37:40:4c:70:8c:70:67:7f:
         5e:97:84:74:71:e8:5d:80:5f:3a:31:6b:cd:3f:a5:dd:71:02:
         61:6e:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:42 2026 by rpki-client