Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File:                     BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier:          WIumEtCZEtDY55iKlSuIBb96MC1LDRvhF3FRwy64qhk=
Subject key identifier:   D3:7F:0D:36:A2:20:73:22:68:95:BD:02:D0:56:51:73:40:DB:37:83
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       01A17B1641E970BD6763F4F2286AF211517F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number:          1925
Signing time:             Tue 27 Oct 2026 02:00:18 +0000
Manifest this update:     Tue 27 Oct 2026 02:00:18 +0000
Manifest next update:     Wed 28 Oct 2026 02:00:18 +0000
Files and hashes:         1: 10dcNCG_-MDba38nWmOg4-lXn6k.roa (hash: qCJHM+Bc84ondhlGxroPFWE37OgXYxlzfthfFUOO7WQ=)
                          2: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (hash: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=)
                          3: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
                          4: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
                          5: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
                          6: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
                          7: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=)
                          8: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
                          9: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
                          10: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: FFDEwDtDRCRGOXe4KXVJc/7eTnW9XeUvJH7ixEuqaY4=)
                          11: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (hash: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=)
                          12: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
                          13: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
                          14: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
                          15: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=)
                          16: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
                          17: JdeaeLKAu5GEjINGKfvIKWcq3o4.roa (hash: a/heKXP0NtGbMelLoYKvGg/fN+ZyDqH56Dk+P1/eR2g=)
                          18: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
                          19: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=)
                          20: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
                          21: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
                          22: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
                          23: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
                          24: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
                          25: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
                          26: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
                          27: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
                          28: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
                          29: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
                          30: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
                          31: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (hash: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=)
                          32: zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa (hash: pb1m9M8yHzsPn9L4wFpH1jeHHft9SKcGVcBcOUgBDEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:16:41:e9:70:bd:67:63:f4:f2:28:6a:f2:11:51:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Oct 27 02:00:18 2026 GMT
            Not After : Oct 28 02:00:18 2026 GMT
        Subject: CN=d37f0d36a22073226895bd02d056517340db3783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:2c:be:9a:92:d2:1d:4e:c9:f1:3b:29:7b:
                    f2:ee:9d:85:f6:35:3f:01:65:5f:c9:6c:02:db:5d:
                    e5:17:bc:21:92:2a:33:59:ec:7f:94:4b:c3:55:d8:
                    a3:cc:fb:c4:55:aa:f4:69:3e:80:43:e3:9d:73:9d:
                    c4:68:bd:98:bf:2e:f0:02:35:07:c2:2d:5c:bd:2f:
                    70:8f:72:ff:9d:50:88:17:2a:6b:07:83:56:38:ca:
                    80:1a:59:14:0f:0c:12:5e:56:87:88:3b:25:b6:af:
                    9c:8c:af:3b:40:4f:03:80:d6:fc:84:df:2f:6c:0d:
                    ed:16:0a:ab:a8:52:f1:df:aa:d2:50:55:b8:7d:27:
                    45:3c:73:fe:5e:e6:54:1c:89:1b:62:fd:80:28:0d:
                    b8:40:6b:e4:b2:c4:ee:ca:d4:f2:b1:a8:db:bf:4b:
                    06:e4:44:37:d6:20:bf:00:a3:18:6f:71:28:6e:21:
                    c1:01:06:10:3a:02:27:95:37:37:35:45:aa:97:65:
                    39:f5:87:5c:9d:79:39:a6:45:3f:d4:b3:17:67:55:
                    5c:c5:36:60:31:a5:42:a5:8c:c4:3a:4b:48:e5:0b:
                    d8:04:21:6f:a9:38:8d:13:db:0b:b2:34:0b:2e:e7:
                    22:be:ee:0c:21:df:30:d6:87:c8:f8:94:cf:76:13:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7F:0D:36:A2:20:73:22:68:95:BD:02:D0:56:51:73:40:DB:37:83
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:4d:a2:df:1b:fd:d0:c3:86:62:cf:64:70:b4:8c:29:4e:
         49:de:30:99:f7:8a:16:32:54:dc:81:58:af:f3:2f:72:f2:43:
         97:14:42:eb:e3:05:aa:0d:0f:eb:a9:9b:43:59:8b:d7:e8:7d:
         21:a8:2a:eb:36:24:20:50:77:7f:53:1c:c7:36:bb:0b:9f:90:
         30:0a:63:85:ff:ff:22:b9:d7:72:3e:5c:a4:07:1b:a6:c2:50:
         aa:08:45:75:43:92:42:86:3e:2b:ce:3f:4e:ee:4f:fc:36:31:
         a6:d7:03:a4:cf:57:e8:7e:6c:ab:60:8b:9e:7b:1d:ac:02:a0:
         a1:c8:26:97:78:2c:d8:21:be:70:60:ed:54:6d:46:da:59:c8:
         52:49:9a:58:12:97:ff:75:4a:8f:d4:25:87:ea:ce:54:4a:22:
         64:89:85:11:e0:8e:88:a8:24:72:aa:1d:88:63:12:29:05:03:
         f9:05:22:f1:8b:00:a6:7e:28:58:0f:05:aa:da:4a:ae:e8:f7:
         ea:c2:9f:57:85:5f:4c:dd:b3:d3:db:53:09:ae:d7:19:c4:63:
         b4:76:85:64:7e:73:49:2d:e3:10:08:4f:28:e6:37:07:9f:52:
         b7:34:2a:4c:a1:2c:48:ab:d9:18:cb:5c:59:97:68:c4:c0:c3:
         e9:64:cc:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7FkHpcL1nY/TyKGryEVF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjYxMDI3MDIwMDE4WhcNMjYxMDI4MDIwMDE4WjAzMTEwLwYDVQQD
EyhkMzdmMGQzNmEyMjA3MzIyNjg5NWJkMDJkMDU2NTE3MzQwZGIzNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJgsvpqS0h1OyfE7KXvy7p2F9jU/
AWVfyWwC213lF7whkiozWex/lEvDVdijzPvEVar0aT6AQ+Odc53EaL2Yvy7wAjUH
wi1cvS9wj3L/nVCIFyprB4NWOMqAGlkUDwwSXlaHiDsltq+cjK87QE8DgNb8hN8v
bA3tFgqrqFLx36rSUFW4fSdFPHP+XuZUHIkbYv2AKA24QGvkssTuytTysajbv0sG
5EQ31iC/AKMYb3EobiHBAQYQOgInlTc3NUWql2U59YdcnXk5pkU/1LMXZ1VcxTZg
MaVCpYzEOktI5QvYBCFvqTiNE9sLsjQLLucivu4MId8w1ofI+JTPdhOp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNN/DTaiIHMiaJW9AtBWUXNA2zeDMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUpNot8b
/dDDhmLPZHC0jClOSd4wmfeKFjJU3IFYr/MvcvJDlxRC6+MFqg0P66mbQ1mL1+h9
Iagq6zYkIFB3f1Mcxza7C5+QMApjhf//IrnXcj5cpAcbpsJQqghFdUOSQoY+K84/
Tu5P/DYxptcDpM9X6H5sq2CLnnsdrAKgocgml3gs2CG+cGDtVG1G2lnIUkmaWBKX
/3VKj9Qlh+rOVEoiZImFEeCOiKgkcqodiGMSKQUD+QUi8YsApn4oWA8FqtpKruj3
6sKfV4VfTN2z09tTCa7XGcRjtHaFZH5zSS3jEAhPKOY3B59StzQqTKEsSKvZGMtc
WZdoxMDD6WTMvw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:18:47 2026 by rpki-client