Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          P/wUHEACkWXxWfpL1yA1c9qlgQCLzuq7+IKZ0QqFM3A=
Subject key identifier:   C6:7C:EB:61:21:95:B1:86:B7:D1:B4:0E:4D:8D:AC:71:1B:DC:D1:E4
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       01A19C592FA97849C35CE903648797591D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          1B0F
Signing time:             Mon 02 Nov 2026 13:00:52 +0000
Manifest this update:     Mon 02 Nov 2026 13:00:52 +0000
Manifest next update:     Tue 03 Nov 2026 13:00:52 +0000
Files and hashes:         1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
                          2: 1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa (hash: n/+YCBqOHi+s8WDRWfFnh1a6xZcIZPTt7kJsJIwPfig=)
                          3: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
                          4: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
                          5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: 2w2Dm/VEda0nxgF2Lr/0V1XLJMIENj48qByC1gDaXUQ=)
                          6: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
                          7: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
                          8: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
                          9: LPKqTSVzcP75Ir01n2Kg2_3KSWE.roa (hash: /6mufLc8RKFeF3dRaOjWVZlCvVQTejHdA5IcjJxuYHE=)
                          10: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=)
                          11: UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa (hash: VOWK04oeNwI2BvH04UyeeOn1Ap/fxbwci3E3SMPb4pg=)
                          12: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
                          13: Upw0V-SDT9Y_-WbmQx-I6zkEvMY.roa (hash: 52SxqdmLKtGpI63r4YyY3Mjoft2YtbOnX1aUlWH5kpE=)
                          14: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
                          15: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
                          16: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
                          17: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
                          18: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=)
                          19: jO7oDF04bPx0TQY6QGPjbRHTuhg.roa (hash: R8g37YojB+MM81yrSyDVisG5M/Y/Qas711OAISKe3eY=)
                          20: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
                          21: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
                          22: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
                          23: znZ9-PpEUCF0s_0ZbvQNPq1vxXU.roa (hash: iiZjOv+cR17NVqfjRFVC6YAKx+dYOIyRDtOVPnnsLmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9c:59:2f:a9:78:49:c3:5c:e9:03:64:87:97:59:1d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Nov  2 13:00:52 2026 GMT
            Not After : Nov  3 13:00:52 2026 GMT
        Subject: CN=c67ceb612195b186b7d1b40e4d8dac711bdcd1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:0d:2c:9b:9a:b7:d0:f4:57:3d:0f:8a:7e:
                    6a:d5:5d:68:68:d5:35:68:c9:ab:09:b8:50:af:65:
                    7c:1e:12:24:e3:15:81:0f:87:ab:92:0b:df:55:33:
                    12:db:db:7b:89:3f:c5:cb:47:b3:4c:76:9e:7c:3c:
                    c1:97:67:ff:ed:b7:26:76:64:b7:f8:25:c5:4c:c7:
                    d5:85:32:d2:87:fd:71:c7:a6:e5:8e:00:ac:92:92:
                    85:44:c7:00:b1:63:0a:78:4b:98:e6:82:e6:a5:b1:
                    d9:3d:52:0e:c8:10:59:1b:3f:d0:57:0b:8f:26:3e:
                    65:85:2d:f2:7e:4e:48:63:82:48:ec:2e:aa:99:1f:
                    76:85:cf:35:14:7a:71:b2:e4:58:bc:fc:07:f5:05:
                    e1:1f:6c:f3:25:5b:82:08:64:1a:92:54:d9:cf:09:
                    52:8e:45:c4:c1:04:4e:1c:02:58:1e:f7:80:c2:a3:
                    18:90:74:ce:f9:6d:37:fe:8d:d8:b1:62:1a:bc:be:
                    31:f2:75:2b:0b:df:28:18:e3:f3:77:41:ba:83:2a:
                    cf:01:7f:7e:3d:a0:52:3a:72:9e:af:21:0a:95:bd:
                    03:77:f3:c8:75:30:74:9a:a9:21:d8:79:c3:52:c0:
                    5d:e9:bd:4e:73:63:d2:e4:78:af:66:b4:9a:b0:38:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:EB:61:21:95:B1:86:B7:D1:B4:0E:4D:8D:AC:71:1B:DC:D1:E4
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b7:0b:63:df:e1:ef:86:9a:6e:2f:7a:c8:dd:dd:53:99:c5:
         5b:3e:04:52:25:05:b3:72:92:0b:d3:09:34:01:67:04:e1:c6:
         fa:91:b7:a3:21:64:24:1e:fa:7f:2c:02:63:9e:6a:9f:ff:40:
         2f:9a:c9:b9:88:b1:f0:24:4b:ae:6d:78:23:3f:f5:a9:23:e2:
         cf:00:b1:76:7f:f5:d7:ff:f2:7d:83:a1:b7:13:94:38:79:ce:
         66:33:b5:83:ac:41:3b:21:df:9c:94:10:97:24:f3:7f:ca:39:
         e7:72:87:5d:78:3b:88:39:57:88:0b:94:d4:72:53:6d:52:88:
         f5:ff:0d:96:95:80:d1:e8:82:17:a6:65:10:08:7a:40:65:c5:
         da:f8:c0:5b:60:a4:91:2e:4a:28:e6:58:d7:87:44:d6:e7:19:
         02:d6:48:1e:79:b6:50:07:79:a1:8d:b7:0b:2d:3d:d5:76:c3:
         e8:6a:77:e0:39:c6:a9:e9:72:37:e0:9d:a5:05:15:10:ea:93:
         88:ee:d4:d4:00:f2:ef:9a:99:33:a5:66:16:fc:d8:36:0a:cc:
         5c:d1:72:f6:9d:2d:4d:57:34:c9:21:7f:43:08:c9:4f:dc:27:
         9a:30:c3:90:cd:b2:75:93:12:3f:80:77:eb:7d:bc:47:a6:c4:
         8b:24:8a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGcWS+peEnDXOkDZIeXWR2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjYxMTAyMTMwMDUyWhcNMjYxMTAzMTMwMDUyWjAzMTEwLwYDVQQD
EyhjNjdjZWI2MTIxOTViMTg2YjdkMWI0MGU0ZDhkYWM3MTFiZGNkMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApskNLJuat9D0Vz0Pin5q1V1oaNU1
aMmrCbhQr2V8HhIk4xWBD4erkgvfVTMS29t7iT/Fy0ezTHaefDzBl2f/7bcmdmS3
+CXFTMfVhTLSh/1xx6bljgCskpKFRMcAsWMKeEuY5oLmpbHZPVIOyBBZGz/QVwuP
Jj5lhS3yfk5IY4JI7C6qmR92hc81FHpxsuRYvPwH9QXhH2zzJVuCCGQaklTZzwlS
jkXEwQROHAJYHveAwqMYkHTO+W03/o3YsWIavL4x8nUrC98oGOPzd0G6gyrPAX9+
PaBSOnKeryEKlb0Dd/PIdTB0mqkh2HnDUsBd6b1Oc2PS5HivZrSasDiZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ862EhlbGGt9G0Dk2NrHEb3NHkMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLcLY9/h
74aabi96yN3dU5nFWz4EUiUFs3KSC9MJNAFnBOHG+pG3oyFkJB76fywCY55qn/9A
L5rJuYix8CRLrm14Iz/1qSPizwCxdn/11//yfYOhtxOUOHnOZjO1g6xBOyHfnJQQ
lyTzf8o553KHXXg7iDlXiAuU1HJTbVKI9f8NlpWA0eiCF6ZlEAh6QGXF2vjAW2Ck
kS5KKOZY14dE1ucZAtZIHnm2UAd5oY23Cy091XbD6Gp34DnGqelyN+CdpQUVEOqT
iO7U1ADy75qZM6VmFvzYNgrMXNFy9p0tTVc0ySF/QwjJT9wnmjDDkM2ydZMSP4B3
6328R6bEiySKeQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 14:59:58 2026 by rpki-client