Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File:                     BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier:          XE4z955nKX4Cayo6TcXGvQLjUAZZqZtPAzZGP4UrXUQ=
Subject key identifier:   FF:85:3A:40:E5:1B:89:FE:02:20:DB:A3:88:19:AD:A2:93:11:B8:27
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019FA0E0C0D02F1387358CE5B059BFFC38EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number:          1828
Signing time:             Mon 27 Jul 2026 00:01:51 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:51 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:51 +0000
Files and hashes:         1: 10dcNCG_-MDba38nWmOg4-lXn6k.roa (hash: qCJHM+Bc84ondhlGxroPFWE37OgXYxlzfthfFUOO7WQ=)
                          2: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
                          3: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
                          4: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
                          5: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
                          6: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=)
                          7: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=)
                          8: 7IDWuY26T4UCJ4M5vwbNefIa4Ds.roa (hash: 2aXs1iZiP1C/zRertFgP1ov5IhcFnyEWbQzgQUvTZx0=)
                          9: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
                          10: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
                          11: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: 7yazrnmHGbx6LswAOdgZ2fny7HPqk8c8prsepkCYB2E=)
                          12: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
                          13: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
                          14: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
                          15: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=)
                          16: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=)
                          17: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
                          18: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
                          19: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=)
                          20: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
                          21: OpM0aacv3cDgllARtK5OJ_U41oY.roa (hash: GrTrg7WpkImpssaiQfCv+xpnuR02J5FW93xe9u7+0Qw=)
                          22: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
                          23: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=)
                          24: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
                          25: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
                          26: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
                          27: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
                          28: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
                          29: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
                          30: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
                          31: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
                          32: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
                          33: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (hash: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:c0:d0:2f:13:87:35:8c:e5:b0:59:bf:fc:38:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jul 27 00:01:51 2026 GMT
            Not After : Jul 28 00:01:51 2026 GMT
        Subject: CN=ff853a40e51b89fe0220dba38819ada29311b827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:18:db:09:0d:51:7c:07:b9:ff:d9:c2:eb:
                    c2:f3:9f:79:38:2b:2d:8d:06:fc:90:46:32:5d:da:
                    b0:4e:20:26:ba:3e:ea:48:59:69:fd:7c:39:2b:7c:
                    f3:9e:88:9d:47:a9:fb:12:78:fc:64:ad:e3:d6:a5:
                    61:9d:92:b3:13:e9:b3:a5:36:4c:81:4a:4f:ce:a9:
                    22:80:f4:ea:e6:a9:fb:45:c9:2d:c7:55:10:8e:51:
                    d6:1c:aa:2a:3a:6a:64:53:bc:8b:e5:e9:6d:ae:44:
                    b2:aa:a3:32:f9:cb:5d:13:59:35:77:ae:f9:4b:c2:
                    b7:39:d7:71:eb:31:4c:db:b9:69:48:e9:18:ff:8e:
                    b7:96:22:38:e8:36:ef:cf:04:9d:54:51:cb:17:18:
                    c2:5a:4c:61:54:e1:47:85:5d:a8:09:9c:ad:44:10:
                    9c:d9:f7:d5:82:7a:ef:f1:98:7f:bf:14:c4:24:61:
                    c8:9f:7c:e1:7f:ba:5d:8b:ee:6c:f6:ff:cc:87:c9:
                    73:bf:29:e2:5c:08:e8:b2:65:5f:cd:be:d3:e2:ad:
                    a2:4a:34:cf:06:36:42:c0:27:3b:9b:9b:92:9b:0f:
                    c1:f7:b7:7f:46:24:04:12:49:a2:5c:8b:0d:a3:14:
                    fb:a7:25:2e:2b:1f:97:b8:c9:45:b4:af:aa:02:89:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:3A:40:E5:1B:89:FE:02:20:DB:A3:88:19:AD:A2:93:11:B8:27
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:db:4d:47:be:98:4d:1c:69:ef:1b:cf:8f:4b:25:82:de:59:
         5b:61:95:67:87:da:ab:12:50:c6:36:5a:cd:94:bf:11:90:0c:
         b6:fe:d6:72:44:2b:4a:55:d5:4d:13:a6:5a:f4:0e:be:02:85:
         3f:3f:4f:77:a8:7e:5a:c1:28:3b:91:bc:f5:b4:89:6a:41:75:
         6a:d3:8c:97:fb:14:83:76:92:53:81:20:b4:7e:15:3d:31:8b:
         82:41:81:3c:3c:aa:2d:88:98:15:33:c4:e0:eb:5a:8e:7c:8a:
         a6:45:25:82:01:64:d0:6b:36:80:f5:2c:3b:b3:dd:2d:ab:7b:
         1f:d6:c8:69:90:3f:4a:7d:6c:09:87:6c:09:2b:0f:a1:33:9d:
         37:22:2b:05:3b:13:97:e7:04:b6:d9:fa:d6:0f:b3:42:b7:43:
         0e:11:99:fb:73:ea:e3:66:74:c8:8d:11:21:24:44:07:d3:d8:
         b0:fe:f4:ff:ea:8f:60:b2:4d:27:d0:3c:26:20:cf:1e:a1:87:
         66:b4:d4:ba:ae:85:de:c3:41:08:e7:34:af:ca:32:b0:4f:db:
         2a:16:38:56:e6:09:57:c5:66:ce:ca:20:8c:64:56:4d:12:c1:
         8b:37:b2:e7:6c:ab:b2:fe:2e:a4:e4:57:24:24:4c:77:e5:8f:
         59:ea:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:44 2026 by rpki-client