Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File:                     BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier:          WRjnkEceM1sW6H1TTVIMoxV6h5t5NO24VYDG0QuG1ho=
Subject key identifier:   B4:E7:24:C3:D6:A8:07:0C:A4:6B:2B:F0:37:B7:39:9D:EB:AC:55:BD
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer:       /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial:       01A175F07AEC06C472BB074CBC4ACEC89AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number:          1827
Signing time:             Mon 26 Oct 2026 02:00:56 +0000
Manifest this update:     Mon 26 Oct 2026 02:00:56 +0000
Manifest next update:     Tue 27 Oct 2026 02:00:56 +0000
Files and hashes:         1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=)
                          2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=)
                          3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=)
                          4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=)
                          5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: uRosmHEY81bUcuHzLYMt+7cB0DSv5kVPtpgTdvgUCsE=)
                          6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=)
                          7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=)
                          8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=)
                          9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=)
                          10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=)
                          11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=)
                          12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=)
                          13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=)
                          14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=)
                          15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=)
                          16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=)
                          17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=)
                          18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=)
                          19: srboMmwqKHPhkNbkM6WH4OcVY48.roa (hash: QTHUB96thFjrx3rv4+7lC/X2cBokeJcDuu0PFdqOJcA=)
                          20: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=)
                          21: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=)
                          22: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:f0:7a:ec:06:c4:72:bb:07:4c:bc:4a:ce:c8:9a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
        Validity
            Not Before: Oct 26 02:00:56 2026 GMT
            Not After : Oct 27 02:00:56 2026 GMT
        Subject: CN=b4e724c3d6a8070ca46b2bf037b7399debac55bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:fb:19:2e:c3:2c:69:61:37:f1:99:3e:56:
                    b0:75:32:d9:f8:bb:14:de:27:b9:3b:57:5c:10:5f:
                    5b:c3:8b:f3:d8:d5:d3:b2:fb:ae:9f:c9:bf:a1:e5:
                    5f:5e:f9:bd:ad:20:14:65:09:1e:55:3a:54:60:cb:
                    d5:a6:98:af:32:b9:87:8b:f8:8b:ea:a1:02:79:5e:
                    2b:89:25:ce:87:f4:24:bf:db:e1:06:ab:7d:5d:a6:
                    c9:5c:b2:93:7c:4d:85:7c:2d:de:ec:79:ea:b7:e0:
                    54:3a:ab:04:42:2d:6f:94:fe:68:7f:df:8d:a2:02:
                    42:7d:4e:5f:dd:36:3c:50:48:11:93:af:a9:3c:18:
                    51:eb:07:50:d7:13:36:f4:7b:37:d7:77:0f:19:eb:
                    2c:b3:26:66:ad:28:ea:1d:79:fe:67:07:3c:5a:40:
                    aa:bb:fb:c3:f2:43:4a:9c:06:a8:45:07:60:71:65:
                    9e:38:e0:02:f8:aa:c8:08:d6:a6:31:a8:aa:74:3c:
                    d1:3e:e7:e7:4d:c8:2e:c8:48:11:0c:71:2f:57:cc:
                    d2:79:3a:be:6e:e3:a5:95:86:a8:79:41:08:d4:1c:
                    74:51:b5:ff:15:4e:e5:d3:34:0f:0d:79:4e:4d:15:
                    77:e7:b0:74:31:5e:40:2e:80:fc:49:3d:d3:5c:ae:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E7:24:C3:D6:A8:07:0C:A4:6B:2B:F0:37:B7:39:9D:EB:AC:55:BD
            X509v3 Authority Key Identifier:
                keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:18:14:f1:f6:20:71:d7:42:ee:6e:0e:85:d6:f8:14:2d:03:
         f9:aa:52:c0:92:31:db:98:a4:f6:be:8e:54:71:f5:ff:93:5d:
         c4:da:3f:d9:26:16:2e:c4:dd:ed:35:92:41:bb:e0:42:83:5a:
         41:12:83:5e:92:4c:6e:95:0a:78:70:8d:47:77:e0:59:3f:80:
         a5:fd:3a:c7:57:c4:78:3f:fd:9f:69:2f:82:a0:bf:86:fa:dc:
         1e:8a:69:6d:84:f8:4e:a7:46:dd:d5:e9:f9:a6:80:ff:87:9f:
         db:a2:43:67:50:c0:f9:e3:8a:34:57:d6:8b:c3:60:56:26:ea:
         a6:04:f6:a0:82:d5:03:58:ab:41:da:a0:f2:cb:54:5e:a1:ba:
         3b:09:04:66:89:3f:54:52:11:d4:1c:72:d9:74:46:56:3c:ae:
         37:a6:e8:d6:8e:47:fe:ce:27:c4:d2:5e:a4:96:dc:8c:f3:da:
         b7:08:65:b5:96:57:d5:4c:92:97:95:ea:9a:63:bf:fb:84:1a:
         aa:05:57:58:59:ae:50:db:82:83:ed:29:66:07:fc:20:d2:b4:
         97:db:b3:4a:ba:46:c4:8d:71:94:90:5b:a7:ed:8c:00:3f:ba:
         25:b3:9c:93:2f:49:63:5b:5a:7e:1e:bc:90:fe:ab:10:39:4d:
         88:f2:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:03:51 2026 by rpki-client