Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          L7dMAI0haa+qLFSuFTpfZiSHo2Ppas4MnbW/D8wgxk4=
Subject key identifier:   FB:26:60:AF:25:16:5E:C4:4A:88:3C:86:A9:2F:65:B7:32:51:79:8C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       019E30721CE9D8145BE3B9B491FE75247E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          1917
Signing time:             Sat 16 May 2026 11:00:45 +0000
Manifest this update:     Sat 16 May 2026 11:00:45 +0000
Manifest next update:     Sun 17 May 2026 11:00:45 +0000
Files and hashes:         1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
                          2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=)
                          3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
                          4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
                          5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
                          6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
                          7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: 3W2oCcf8j4UhA/TsqyzBIEssxERBszAG6cjZRdHcW1c=)
                          8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
                          9: HdGHnGCkN60BBCoXO82KCD8KQP8.roa (hash: z19vVo7hZRhugrpovSRveacrmaNy4ZTI7h7Sd6ab6rY=)
                          10: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
                          11: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
                          12: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
                          13: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=)
                          14: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=)
                          15: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
                          16: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
                          17: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
                          18: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=)
                          19: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
                          20: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:1c:e9:d8:14:5b:e3:b9:b4:91:fe:75:24:7e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: May 16 11:00:45 2026 GMT
            Not After : May 17 11:00:45 2026 GMT
        Subject: CN=fb2660af25165ec44a883c86a92f65b73251798c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:7d:b6:be:4a:1f:a3:e6:32:06:f5:ff:ff:
                    23:94:84:f4:29:76:54:15:b2:60:fa:92:e7:c5:69:
                    d2:37:d9:3c:79:5c:11:10:68:30:3a:98:30:12:2f:
                    4b:d6:a3:22:39:45:da:25:2f:44:f4:a3:6b:75:27:
                    82:d9:75:a9:db:2f:3e:5c:b9:d6:8e:fe:a4:bf:6e:
                    92:26:8d:9b:87:61:d0:4e:d4:13:45:91:ab:f8:ac:
                    ce:69:0f:d6:18:8f:0b:d8:56:4d:b3:56:24:bb:0d:
                    db:7f:8d:48:09:2e:dc:ca:81:1a:c8:42:d0:d2:a2:
                    53:df:1b:a3:49:5c:1c:6a:79:a0:55:ce:0b:e3:c7:
                    b5:34:7c:fd:09:c3:99:76:2a:d2:fa:ed:7e:3b:34:
                    8e:04:d9:5a:c2:0c:22:a0:17:d2:f5:9a:a6:9c:1e:
                    0b:76:b6:d2:c8:25:e8:a3:57:57:60:c8:12:36:d8:
                    8f:20:7d:f8:6d:9a:c0:ea:73:0e:16:f9:ea:b9:1b:
                    78:cc:e6:d3:15:90:25:d9:87:cb:39:e0:c9:15:82:
                    16:55:32:4f:ca:ca:72:5a:be:6d:c8:d1:b0:5e:4a:
                    5c:a1:dd:05:40:68:0f:af:54:bc:fb:4d:bd:f1:e9:
                    69:ba:b8:61:c2:18:8f:1f:de:b5:46:69:4f:e3:a1:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:26:60:AF:25:16:5E:C4:4A:88:3C:86:A9:2F:65:B7:32:51:79:8C
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:03:ed:c7:0e:41:ec:85:e2:e1:e7:82:a6:9a:05:92:ce:
         dd:05:99:8e:25:b6:00:0f:94:2a:f8:c8:8b:db:df:d1:ee:0e:
         c1:b1:24:c9:74:58:6c:18:fe:28:9c:ab:f4:bd:e6:11:c0:bc:
         64:e4:c3:65:4a:b3:ea:b5:60:eb:29:52:82:4e:c0:8a:f9:f9:
         cd:cf:f3:df:5d:92:f6:8a:21:aa:41:07:41:f6:9d:76:0b:a3:
         57:2b:d9:b0:a8:cc:55:65:06:ae:e1:52:97:cc:9c:2e:db:15:
         52:5b:42:9c:27:3b:dc:53:4e:52:5a:7f:f7:26:93:52:5b:91:
         f5:0f:9a:bc:12:ee:15:ec:1d:d1:a5:c5:67:90:7a:2b:a9:60:
         8f:9f:5f:8d:b1:86:31:70:a0:ce:21:4d:db:4c:4b:f8:d3:1e:
         f6:4a:f3:d2:fb:80:7b:4f:69:19:eb:fc:b2:5a:6c:7a:28:2c:
         01:a1:23:b6:64:58:46:8f:e7:43:1b:b3:c9:9e:08:96:a0:4e:
         97:d1:17:ed:76:15:b2:3f:7f:9a:29:43:e4:00:3a:28:93:68:
         e9:53:02:bf:8e:3d:78:c9:73:6e:42:9c:f0:95:c0:49:0a:77:
         5e:88:5a:18:88:9e:d2:dd:97:7c:6e:ce:b8:a5:8f:07:da:f3:
         75:cd:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:20 2026 by rpki-client