Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File:                     BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier:          ZQG57FQOOyxO53lv9iluFC4+fEuQc9VD9RwTyTb14lI=
Subject key identifier:   F2:95:77:F9:0E:25:07:F8:D7:9A:E6:71:34:BB:10:8D:18:2C:5C:F9
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer:       /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial:       019EBEEC6346E95AC8F8F97AD1C37488ABF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number:          16BF
Signing time:             Sat 13 Jun 2026 03:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:23 +0000
Files and hashes:         1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=)
                          2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=)
                          3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=)
                          4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=)
                          5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: BV2oWr3wCZxmvUwfHPQ6r8MTbFC/uH74nDQXbIqPtrU=)
                          6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=)
                          7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=)
                          8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=)
                          9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=)
                          10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=)
                          11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=)
                          12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=)
                          13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=)
                          14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=)
                          15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=)
                          16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=)
                          17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=)
                          18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=)
                          19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=)
                          20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=)
                          21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:63:46:e9:5a:c8:f8:f9:7a:d1:c3:74:88:ab:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
        Validity
            Not Before: Jun 13 03:00:23 2026 GMT
            Not After : Jun 14 03:00:23 2026 GMT
        Subject: CN=f29577f90e2507f8d79ae67134bb108d182c5cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:85:88:ff:5d:ee:b4:75:2c:28:c4:11:e2:
                    ae:55:5b:30:51:c8:2b:d5:f0:06:51:0e:33:03:79:
                    0d:a3:bd:45:26:d6:14:8c:09:37:56:25:e3:8d:e5:
                    1d:cd:da:f6:b1:4b:7e:ab:37:e8:e9:20:9d:33:93:
                    5e:43:8e:85:ff:80:e9:51:54:3f:c2:8c:b3:cc:9c:
                    f2:87:ce:13:1c:f8:69:17:44:f1:73:54:79:56:42:
                    5e:6c:4d:9e:a8:40:af:5a:21:1b:0a:d3:69:b0:f9:
                    50:be:47:71:c2:37:f8:48:df:9a:6e:9b:14:1b:62:
                    94:61:d1:9a:f1:51:41:0a:1e:d4:3c:5e:30:4a:1e:
                    62:d3:c1:e4:c8:99:3d:bc:60:28:4f:01:80:85:a7:
                    77:6d:fa:4e:f6:5b:75:d8:f3:6b:3d:5f:f9:5f:76:
                    f2:a2:e4:a7:a7:42:9a:f7:ac:a1:90:4c:1c:5f:6e:
                    a4:f3:9c:70:00:ac:71:76:5e:52:ae:54:c2:cc:f0:
                    b8:98:8e:d8:51:32:85:33:9a:09:16:af:51:65:7a:
                    6c:21:30:d9:c5:41:99:dd:43:3b:dd:71:8d:f3:fb:
                    dd:1a:75:da:de:c2:82:d8:ab:de:e9:da:14:45:a7:
                    eb:f4:89:33:63:c6:d0:1f:59:4e:50:9c:45:a3:27:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:77:F9:0E:25:07:F8:D7:9A:E6:71:34:BB:10:8D:18:2C:5C:F9
            X509v3 Authority Key Identifier:
                keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:21:68:91:71:ed:b6:5c:3c:4b:88:a8:27:b7:43:44:09:
         b1:32:0a:0f:1b:50:4c:34:b6:30:4b:dc:8f:53:b4:eb:f3:04:
         0b:17:99:06:e5:e6:14:09:85:20:cf:c9:c8:c2:29:e2:a1:98:
         ba:83:27:41:1a:36:d4:cb:0c:f1:81:57:4b:1f:a7:bf:b1:b0:
         1d:34:09:b8:0c:48:f9:59:d3:1c:6a:d1:52:68:f6:75:17:43:
         71:83:00:0f:c0:ca:60:4a:54:be:b7:b8:9b:fe:96:33:e1:05:
         0e:3a:58:99:39:e3:cb:fa:56:8c:93:e0:24:ca:78:26:9c:b9:
         80:b7:dc:8c:64:cd:7e:97:1f:fa:f9:5c:ca:3d:dc:ce:82:60:
         35:71:51:a5:cd:6d:1a:62:d1:4c:f3:ad:4b:bb:fe:09:32:a0:
         3e:5b:9d:01:39:aa:e3:26:11:b5:89:a8:a6:d4:98:41:15:66:
         cc:4a:24:e3:d0:24:62:2a:8d:b1:3e:49:fb:51:e3:67:23:09:
         35:f6:eb:9b:74:4c:29:d4:a1:36:69:92:08:98:d0:d0:06:dd:
         7f:a2:01:e5:ad:2e:e8:da:b2:5a:d3:c1:5a:1e:69:4e:43:14:
         85:5b:ea:31:df:1e:d9:59:67:85:3b:63:90:be:65:10:db:15:
         49:97:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:52 2026 by rpki-client