Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          pUJA4plUbRFoR7za0EldyCc8XgyFsZoj0qhaR+SJZSk=
Subject key identifier:   D4:ED:CF:7F:CC:5A:1A:31:0C:EC:4C:BE:DF:D3:D2:9B:B3:9D:16:74
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       01A179CCB03FC4692369F5BC9848325B1A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          04BF
Signing time:             Mon 26 Oct 2026 20:00:19 +0000
Manifest this update:     Mon 26 Oct 2026 20:00:19 +0000
Manifest next update:     Tue 27 Oct 2026 20:00:19 +0000
Files and hashes:         1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
                          2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
                          3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
                          4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
                          5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
                          6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
                          7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
                          8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
                          9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
                          10: BzYrqoWzq2UjpYzNUeYZ2Chi4-k.roa (hash: tFHL2cY9PeULi8ZDCk/uw0VBy3o/s60co/X817DhH08=)
                          11: DUpqLBhqsTuNWOSPz3TaZSuYFj4.roa (hash: cca2GKj1tVA6hqsbUxPMRa/fbRF5E0RpsW7TWM8d7gc=)
                          12: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
                          13: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
                          14: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
                          15: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
                          16: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
                          17: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
                          18: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
                          19: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
                          20: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
                          21: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
                          22: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
                          23: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: uRXTGd6f40sWvFmuE3KpDnz3JpJg/PsBkdp3P97BoP0=)
                          24: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:cc:b0:3f:c4:69:23:69:f5:bc:98:48:32:5b:1a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Oct 26 20:00:19 2026 GMT
            Not After : Oct 27 20:00:19 2026 GMT
        Subject: CN=d4edcf7fcc5a1a310cec4cbedfd3d29bb39d1674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:54:24:b2:f3:91:56:12:3e:df:d9:da:40:
                    8a:01:57:80:b5:52:50:d1:4a:42:3c:8e:5d:27:eb:
                    a0:be:32:c3:25:94:e8:d6:cc:d3:df:fd:51:10:89:
                    80:14:36:8e:24:9b:e8:1a:cf:27:de:1c:fd:5c:83:
                    51:f8:e2:f0:e5:80:10:58:fa:aa:c8:35:8b:63:70:
                    63:f7:32:54:a5:82:24:ae:63:d9:e7:f8:fb:c0:9f:
                    70:c5:04:4c:9c:28:d2:3a:94:26:21:19:20:ca:40:
                    4f:16:bc:c2:aa:fb:98:d2:58:de:84:16:11:ef:56:
                    07:b6:d1:40:cd:14:a9:51:41:5b:70:34:0f:35:a0:
                    8d:13:8d:8e:3b:35:00:21:4d:79:1e:a6:96:c9:00:
                    2a:5c:54:af:63:e3:c9:10:07:33:c0:e9:d5:64:7a:
                    b4:69:56:c0:6c:88:c6:2a:ac:27:9c:b7:e7:ad:6c:
                    54:b7:55:0b:11:26:5a:65:6f:83:e4:40:08:84:c6:
                    54:e4:e2:6c:a9:e1:b9:8a:b5:86:b4:7e:53:8b:b3:
                    c7:ab:33:9f:8d:b6:55:47:3e:4b:43:a5:ee:fb:ff:
                    8a:47:48:75:c7:49:a4:68:39:a8:4e:9e:6d:3a:45:
                    a4:49:89:17:31:f2:8c:61:cb:68:f9:44:a1:5e:32:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:ED:CF:7F:CC:5A:1A:31:0C:EC:4C:BE:DF:D3:D2:9B:B3:9D:16:74
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:26:da:60:51:b4:5f:be:5a:1d:c9:1d:cf:e0:58:1b:2e:ee:
         a2:fd:49:6a:95:2c:d8:d5:44:23:15:8d:69:ac:d0:b2:da:d7:
         5f:22:1b:b6:15:6a:a7:c0:13:55:06:10:85:ad:e0:00:77:3e:
         06:43:0d:a9:3a:30:9d:f7:59:4d:d9:98:3c:b4:8a:b0:01:9c:
         15:4d:37:f5:00:6c:11:df:d8:6a:9b:ce:27:04:15:00:17:a6:
         28:bd:ff:42:fe:49:cb:3a:e7:62:97:b0:f0:f9:ee:0e:a5:25:
         0b:b5:e3:de:7e:7a:78:93:52:d3:c5:0b:64:18:8b:73:2c:15:
         4d:fb:79:43:23:99:81:a3:1a:df:72:3e:5b:bf:a7:c5:2a:d7:
         0e:19:5e:e2:bd:f5:f1:89:c0:6a:e7:f1:e0:fd:65:be:a4:c0:
         07:be:9e:f8:a3:08:e1:c1:08:f1:ff:ca:0f:4b:67:20:d5:54:
         36:90:c0:19:86:f8:fb:4f:ce:75:3b:0c:5d:e0:a5:16:cc:c2:
         74:22:93:1e:83:c4:e6:f0:83:9c:41:89:db:67:73:52:03:03:
         1a:91:0e:81:56:30:2d:01:b3:b7:34:9a:12:a7:9f:49:69:56:
         1e:04:82:bf:24:2e:82:85:b5:02:c5:fd:3d:83:9b:a5:aa:a3:
         40:2e:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:25:45 2026 by rpki-client