Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          y+GgfoDi/xcRdWrdWMgwrYuGHCHW96wwIi6+L7S7EoY=
Subject key identifier:   94:6B:EE:5A:86:62:F6:57:A4:64:95:75:E1:8F:E8:46:1F:58:EC:11
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       019EBFFF469E2D700B1B73F9E248209F621F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          1993
Signing time:             Sat 13 Jun 2026 08:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:38 +0000
Files and hashes:         1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
                          2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
                          3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
                          4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: lYsvSbyGzMNOrA0DBa58H5SsLpdEV1ikzi+uaTZ3Mew=)
                          5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
                          6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
                          7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
                          8: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=)
                          9: UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa (hash: VOWK04oeNwI2BvH04UyeeOn1Ap/fxbwci3E3SMPb4pg=)
                          10: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
                          11: Upw0V-SDT9Y_-WbmQx-I6zkEvMY.roa (hash: 52SxqdmLKtGpI63r4YyY3Mjoft2YtbOnX1aUlWH5kpE=)
                          12: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
                          13: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
                          14: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
                          15: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
                          16: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=)
                          17: jO7oDF04bPx0TQY6QGPjbRHTuhg.roa (hash: R8g37YojB+MM81yrSyDVisG5M/Y/Qas711OAISKe3eY=)
                          18: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
                          19: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
                          20: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
                          21: znZ9-PpEUCF0s_0ZbvQNPq1vxXU.roa (hash: iiZjOv+cR17NVqfjRFVC6YAKx+dYOIyRDtOVPnnsLmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:46:9e:2d:70:0b:1b:73:f9:e2:48:20:9f:62:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jun 13 08:00:38 2026 GMT
            Not After : Jun 14 08:00:38 2026 GMT
        Subject: CN=946bee5a8662f657a4649575e18fe8461f58ec11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:89:12:a7:6d:6e:6c:1d:b0:e2:5d:e5:d7:
                    4a:85:df:2c:17:e3:2d:5c:c9:62:33:6c:e1:91:c8:
                    87:d5:fe:19:7f:5d:d3:b5:de:7a:85:e1:12:80:fc:
                    c0:11:26:44:f6:da:a0:a2:a9:18:0d:a0:35:64:c7:
                    af:9c:9f:a6:74:95:03:29:a8:0c:6d:9a:fd:a2:88:
                    4e:42:7a:e5:ac:7b:f1:91:f3:15:c5:33:6a:15:fa:
                    66:50:6b:4f:4c:e5:7c:fc:be:8e:e6:a9:d3:9f:d1:
                    3a:1f:f6:b2:32:83:3f:a5:1a:12:4f:c0:12:71:2d:
                    c7:ba:cf:9a:4b:ea:57:41:ad:c5:4a:47:b9:b9:65:
                    a3:93:c4:0d:97:17:a1:9a:5a:80:eb:88:c7:94:35:
                    c3:63:a9:e5:57:43:21:f4:22:09:5a:eb:37:a4:44:
                    41:a8:04:26:95:a5:50:1d:d7:2e:95:d0:4c:13:51:
                    1a:08:59:6f:ff:f4:3e:ff:f8:e6:22:ad:a8:f2:0c:
                    08:19:e5:ad:ff:fa:ca:59:f5:94:3a:26:67:14:e2:
                    43:b0:94:9c:5f:ba:3f:e3:c2:a1:36:d9:b1:a7:24:
                    e0:51:70:54:ed:2e:94:ec:96:f6:06:a6:1b:43:bf:
                    ee:cb:f1:47:b0:c8:7a:92:ab:f9:6e:31:25:c8:68:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:EE:5A:86:62:F6:57:A4:64:95:75:E1:8F:E8:46:1F:58:EC:11
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:6d:3e:7d:44:95:1b:02:7b:da:35:4a:07:1b:4b:32:54:
         db:44:68:f9:de:08:21:f6:77:47:bd:00:01:a1:08:7c:2d:9a:
         0d:4b:6e:ef:ce:19:f9:2e:62:58:de:67:05:8f:97:aa:74:fb:
         20:47:14:dc:33:51:0e:1a:56:31:f8:f7:b5:47:92:69:14:5a:
         f4:8c:e6:75:32:7c:ba:34:43:2f:6b:3a:7b:92:a2:ac:9f:f9:
         4d:1b:fb:19:df:fd:9e:d0:56:a4:0d:47:69:fc:b5:8e:ab:c4:
         10:02:ff:e7:5c:f9:f0:ef:e5:1c:ec:26:84:75:80:d2:6f:03:
         6a:af:d1:7c:ea:a5:7d:a7:77:61:c3:85:df:b7:7d:50:9e:a5:
         0b:10:09:07:6e:93:63:38:49:1b:ba:57:4d:d9:9a:ee:78:8f:
         7e:f1:57:ba:86:b2:d4:d5:ac:b2:bb:4d:ce:c0:d8:92:bb:38:
         53:a8:53:d7:cd:16:31:4e:d9:42:ef:84:8d:1c:ca:7a:21:b6:
         d1:43:2f:2a:72:ca:08:48:aa:0f:40:03:7a:6a:3c:6d:9e:43:
         17:91:9c:6b:7a:07:1d:42:b2:94:6c:77:90:01:6d:75:f5:bb:
         6a:1c:c2:53:ef:1b:a5:ee:54:8b:0a:4e:2d:e4:07:4c:ec:e7:
         4e:33:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:38 2026 by rpki-client