Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          CPCi9pyjG/X9IMMkeDfsmxGt3OL1qzLVzBBcwTzWIYE=
Subject key identifier:   1C:BB:BA:CE:91:C4:0D:07:A5:F7:F0:45:DB:BD:0E:63:DA:C4:E5:42
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       019FA91BBAABECFF4CBC5EB6CDF1C42AFB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          19F7
Signing time:             Tue 28 Jul 2026 14:23:14 +0000
Manifest this update:     Tue 28 Jul 2026 14:23:14 +0000
Manifest next update:     Wed 29 Jul 2026 14:23:14 +0000
Files and hashes:         1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
                          2: 0yWvn9M6oy5fHhcusKTNYjRT7SM.roa (hash: WvQP0RNlRK2xc7fMdnNh9d+C2dzK7VsvYxKqHmxbO9Q=)
                          3: 1-Xo9FBNnt6IQf3DHY6l6FVVs9Io.roa (hash: 1M61p2hW3Z5J+kUgHhY13ljWHOQiC4BFBkjaF/siz74=)
                          4: 1jcNY5626hnNOCnMu1sTaGQ4WDA.roa (hash: c+tE0o6eIUl6HySh+TrLE9b5fSY7RiC/BC34enLyUb4=)
                          5: 1qTeFFDnwzOP4q5In34k3pMq72A.roa (hash: p26U7tW0kqH3pUQQavxcsj3met7vL7YCOjNmeoEtPow=)
                          6: 2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa (hash: 3fPXfPBlzwSi3JHWyKN+vJkAotRs4RzEaoGJ/+xtt28=)
                          7: 2kLC5oc0wtFYxb-UoY1NN8AeYeA.roa (hash: WWHfYyQQ20grjWfdXp93pjE8sxqP9wBjYJdjjvSKaGw=)
                          8: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
                          9: 55IL_FMEYxN2_mPAwnBVd0YsSsk.roa (hash: 9BZLnY9FLmA7kfoZD8m1OasbRrEJ84cgrmKwWq2O/zo=)
                          10: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
                          11: 5MhKkkw8Qijd_355CWuE5w3kdNc.roa (hash: DXDSU8SEgCHnvy2y11y8ZxqKtbTq0+BFYZq55TmuO6k=)
                          12: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
                          13: 5W0-ra53TPlyrkH_8scYXGoQnSQ.roa (hash: 7mJWw5WXjc5SMaPTt7Tx+0uYg/99DmpGBOHkDsLBe2Q=)
                          14: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (hash: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=)
                          15: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
                          16: BIG6nBuxQiXzo3A8VVUzmGCYUXg.roa (hash: fzvbtoojQe9O9HxvUDJgqzSsNS0LqxyijfXmKyO6zrU=)
                          17: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: +yG1jgUKXMUO1QPDQXUCTouxRoDxBbX1dDpfokRlnG0=)
                          18: DNfeT75YIWg_GiEYi0OXwXzVsCE.roa (hash: p373o+Uf7zsdGjZbtQi0QVhe/Loppcgzl4NraszftMQ=)
                          19: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
                          20: EcVCYTCFbfuctisOnGpTpzze87E.roa (hash: AvUy4CNenHZ3+B409HhzJ1fMxMdjTbDHUphzokd1e30=)
                          21: MRI12LDIfuxDk-RAsS5kzIsowbg.roa (hash: G51ODDOqrLhdbvBDKBaAFuDk7Db8dc3Q2aZnUmjS+3o=)
                          22: OdlIdhUi21fj5cczb-7WJINtysY.roa (hash: xZD9f0KAxGvn4NddjuJzY91yfkyxr9JttpLoWZK4sAA=)
                          23: PsXb9zE8YGzr8n_RkbH4pCrLI_E.roa (hash: DgmoxJI7MnT1BVWGbCdAqU6yxQ94JqRUW84m/NLaLZI=)
                          24: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
                          25: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
                          26: U58VFH0hC-bAfuIWx5-x-9JpLVI.roa (hash: Tg2jjCtMuE3tvyiCge6PHALgpdcv8xyRfITU6qGoLM4=)
                          27: U6dLDAejvUgnq5aOMEIUtrBzTBk.roa (hash: 2dgujFoVBvo9HpAJXnhdci16ozuiz9TD8/Uw/FW7qg0=)
                          28: VSDudfaR07Sid5nvsB2vmBNWEsk.roa (hash: Ow6ryTxzsItq5o8zstdyJ4oOnGY3z16hLDJu00wlEXU=)
                          29: YEhHyM9Ex_KKekH5VjBr3VxK3LI.roa (hash: uHnqXRv4X7k9WzE3QaUtv9JAv+AdztfPp846F5lhQ3M=)
                          30: YGXdTPgw2SvlW3uvIh-3WtuhmsA.roa (hash: dMA7bJ3qBQAVvVANJ6N/cwoY5Mkkyuwl6eF8ht6OLk8=)
                          31: Ycy5lGeS5U8PdIJhcsoT_8YB0SQ.roa (hash: Mmaht3Wpxz+xIyjudmJVkBM+i+FSVBTRr0ppt6Ph/go=)
                          32: YuWhtV_ooJKZDPzglq4aD3u0vNE.roa (hash: LlcMUITpEE6lj8f+Bxsc2+7fgunLPQiQ9Ebhj5Pflqc=)
                          33: a617PlLEN5nPKh03vNFZxBSxgh4.roa (hash: 6VG+uN+9CEFy4WZVrPFyDQaVY9yaJfKQhPjMm3IS2E0=)
                          34: bpliBHQf1srTQdHcoNbSYzum3iw.roa (hash: MnV3pxRWCN85TFBKQGOedJbS7vH1cW3AnKuxQi66K04=)
                          35: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
                          36: eL3BOW3R9YF4NTYszpn-G4GicXE.roa (hash: eWdcg/wUnlcSSTHz0FoI6XetkTNSCLoEjSq0/aIE4N0=)
                          37: fIfSfYc5asb6gBqe9eNVort2xs4.roa (hash: teEWsVV3XoZvsOLboWSSAZxkb697W0VTg9OJPaTVF5I=)
                          38: fNVqF5yDUil_SWA2BYZlXdeKNdo.roa (hash: HPbQ50A50C4FKQ88DRsMXuci3WFPEbfYN9SMITi22CQ=)
                          39: htnHuYEBV2cW71pkM1NKFin1a5s.roa (hash: P4d0ho3JlvW2P0vDWLTu75LeEZuLHKNjYQ/yf6cI7Y0=)
                          40: jOw_auvAMHfQZA63CN2U9mBRMVc.roa (hash: xPvK5ttQn8QygiN6ftuMK506XQIyRGc1Bg84C5Jpu7Y=)
                          41: kPfgHSfk4FFttCCtHtRYkRCQXbk.roa (hash: 79gKRmZ1YiBm+4TSS/3DQ+xjB2kQxDrxYWPGlqWrvCQ=)
                          42: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
                          43: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
                          44: njZofDQgidOuoUz8FhOg8HlCcO4.roa (hash: pmn04WuysaIGzuvE21AGaFY1j1JzftPrKe2jTGhY34o=)
                          45: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
                          46: oGw3OpRoGZfTyjJR-z_r2Dy-Y8A.roa (hash: oCbELwtCCjp+HJZHCOxixxeMeDAIy5Gv5vPFtIqmCag=)
                          47: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
                          48: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
                          49: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
                          50: vJ7BACarktQZPbgtcKZRm0Tfb78.roa (hash: wC72pQDaNa5TsneYQqiJVvGl4X1LmKRupGx9AuzClbs=)
                          51: xKPCZLn5NBwKOnGfN6Jfm7bqVhI.roa (hash: MULPMSCgu1soomGcBhyo6KncDRQ60sADMNncZpDFSk0=)
                          52: xikanlTZ0v14vJNsgTM-bs_TrVo.roa (hash: k8yL0zUwcHmo1s0l7jrHP/AK6MnJoFmCKEGJzsiquWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:1b:ba:ab:ec:ff:4c:bc:5e:b6:cd:f1:c4:2a:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: Jul 28 14:23:14 2026 GMT
            Not After : Jul 29 14:23:14 2026 GMT
        Subject: CN=1cbbbace91c40d07a5f7f045dbbd0e63dac4e542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:42:ee:4d:49:36:92:c9:e9:ef:a9:84:61:
                    06:7b:7e:9c:3e:0a:c7:20:f1:01:9d:30:ea:de:ad:
                    b9:7a:f6:49:7d:36:b5:63:d0:93:79:8c:28:26:ff:
                    bb:68:f7:22:74:c3:94:ea:8d:b4:21:24:21:ee:80:
                    8b:8d:ba:39:61:e0:55:fb:e3:1b:40:4a:72:96:d9:
                    4b:e1:26:a2:46:a4:07:99:8d:c9:85:7c:23:5c:66:
                    84:9d:94:c0:5e:41:ca:3c:d6:3b:86:cc:f2:8b:a4:
                    cf:d0:64:62:14:ef:24:62:6c:68:52:7c:63:96:d4:
                    5d:d1:de:6d:de:c8:66:6f:7e:60:88:7b:a3:ea:c9:
                    e3:8b:94:75:2a:e2:3b:7b:45:2f:42:a9:6c:f6:a0:
                    36:ec:6f:24:73:79:c7:f3:1d:28:df:16:cb:ba:9a:
                    ed:de:f7:cc:cf:79:35:66:dd:b2:31:a3:fc:af:bb:
                    09:a0:bc:28:4e:67:cb:c6:ff:29:c5:aa:c4:df:d3:
                    46:db:9a:af:e1:ba:64:66:64:8f:0d:df:7d:4b:87:
                    da:45:c1:3d:80:1d:51:be:f0:cc:be:70:14:61:21:
                    71:b3:a8:8d:4e:16:89:d6:c7:ad:d0:43:64:c7:4e:
                    7e:2e:53:52:c5:33:d1:c2:8b:b7:22:df:7d:7f:fd:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:BA:CE:91:C4:0D:07:A5:F7:F0:45:DB:BD:0E:63:DA:C4:E5:42
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:0a:d9:9d:9b:5d:8d:0c:dc:85:c3:96:b8:7a:60:a5:f1:
         92:e3:1e:0e:e7:9f:2b:6b:41:9e:7c:07:7b:1b:8e:29:5d:e2:
         3d:ef:03:f6:ea:58:f1:80:87:c4:72:8d:c5:5d:70:9a:62:4d:
         88:c1:50:5c:da:1b:2d:a8:7a:fa:db:79:9c:3a:9b:75:8a:f4:
         98:9b:3b:63:75:cc:91:ed:e7:db:e7:81:7a:28:f1:5a:e6:bc:
         60:36:05:42:11:83:21:21:df:94:a0:b8:cb:be:8d:c9:e0:a4:
         33:97:be:5f:ae:d6:eb:47:8f:1d:8e:84:49:50:17:27:3e:3b:
         38:28:62:c7:f9:f6:9c:fe:ad:84:5d:63:73:fb:f6:94:85:46:
         ca:f5:7c:3c:55:ca:73:22:00:dc:16:2d:81:36:aa:4c:04:36:
         97:36:ab:88:b2:be:9c:54:55:75:9e:1e:32:db:cd:9e:7f:0f:
         a1:b4:f3:6e:14:86:52:92:c9:e7:9f:28:83:bf:02:a3:46:71:
         a2:3e:d1:95:33:0c:9b:c2:3b:93:59:8f:e2:eb:53:d8:68:59:
         ad:1a:86:34:0a:0c:a5:80:d6:7e:8d:ad:df:70:8e:fe:74:44:
         42:df:5c:08:d9:7b:12:d9:44:96:39:bd:6b:91:d1:ea:48:01:
         e1:59:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----