Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          gXfOOwgi489aWvzlLjZfcsS2s0hiCzXmA55kDamU91I=
Subject key identifier:   FF:AB:43:F0:9D:90:D4:DB:63:D2:00:E4:A5:19:1B:3B:FC:D1:17:B0
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019F837AC3E1A6B25B3530C2F688DAC4A5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          1746
Signing time:             Tue 21 Jul 2026 07:01:28 +0000
Manifest this update:     Tue 21 Jul 2026 07:01:28 +0000
Manifest next update:     Wed 22 Jul 2026 07:01:28 +0000
Files and hashes:         1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
                          2: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
                          3: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
                          4: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
                          5: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
                          6: BBHTjw15NAF2rxWNcQdysv45Lss.roa (hash: Lous+sIenMIAO4lBR3nlDw+F0FCln0Ka+oVIfjt59kM=)
                          7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
                          8: KPzLPauPpQiWYae418r6m1gMbQ8.roa (hash: bMOA8c/Peua3MiHOsLdKNKZDG/6LBfAeWjPvZ8O4vDE=)
                          9: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
                          10: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
                          11: RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa (hash: 9bAWFuzWHv7cpnjzkHad1zJjL6nxP74Kh6dQAZysh0A=)
                          12: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
                          13: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
                          14: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
                          15: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
                          16: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
                          17: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
                          18: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=)
                          19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
                          20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
                          21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: ESeaJ3uHXz4vtl9JbUDJ4/cq9EQWiD+gTBHSAfZT+k0=)
                          22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:7a:c3:e1:a6:b2:5b:35:30:c2:f6:88:da:c4:a5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Jul 21 07:01:28 2026 GMT
            Not After : Jul 22 07:01:28 2026 GMT
        Subject: CN=ffab43f09d90d4db63d200e4a5191b3bfcd117b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:5d:ab:5a:92:4b:67:ce:b5:c0:f3:fd:25:
                    aa:2b:f3:29:1f:2e:ac:8c:55:34:f1:a8:99:5f:fb:
                    59:69:df:7b:a1:9c:37:58:9c:0a:7f:31:05:d5:36:
                    ba:51:0c:b3:93:d2:35:f9:44:a6:9d:5a:65:94:6f:
                    47:51:c4:d9:57:28:dc:e1:7d:a8:ed:55:46:27:61:
                    88:68:bc:7d:c3:67:e5:68:22:2d:b3:42:b7:15:96:
                    a6:6e:4f:13:10:39:cc:11:27:10:dd:bd:6a:f6:61:
                    e4:5b:79:6c:1a:b3:24:5f:85:db:05:50:14:a0:48:
                    68:46:22:0e:0b:50:aa:82:90:19:3b:f2:bf:ab:25:
                    a2:49:d5:ce:be:46:94:4e:9e:6a:a6:00:8c:05:78:
                    b2:d5:7a:ad:fa:a7:dc:6d:f9:68:69:1f:43:9b:e8:
                    fc:81:d4:1c:32:fc:59:27:c3:11:5f:4f:59:3e:a7:
                    d7:61:32:75:3b:f4:c7:9a:da:31:75:d7:6c:81:ac:
                    40:91:fc:f6:1f:e3:a2:8b:28:53:73:08:ab:d2:c0:
                    1e:91:b6:c5:91:ec:eb:ea:11:31:ee:e5:a8:f0:bd:
                    98:e1:ed:e0:61:dd:11:8a:bf:7e:59:17:2b:06:4f:
                    40:97:21:99:58:a8:42:d8:ea:1e:28:fc:47:34:4c:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:43:F0:9D:90:D4:DB:63:D2:00:E4:A5:19:1B:3B:FC:D1:17:B0
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:77:88:ad:11:03:9a:af:bb:56:12:49:ae:55:e4:72:4a:
         79:80:a8:08:68:18:46:31:7f:76:01:41:f9:56:72:ae:f1:f3:
         a5:68:f7:dc:67:32:7c:1d:a3:22:f4:59:29:4a:d0:fc:c7:95:
         03:a5:08:90:2d:8d:e9:df:c1:1f:58:51:bf:38:e9:9c:2a:09:
         44:f9:72:bc:f5:f5:54:c0:94:1d:f4:b1:fa:89:f2:67:80:93:
         27:ec:25:03:58:f9:36:83:1f:59:f9:ac:cd:a9:9a:d5:b7:a6:
         52:6e:e5:5b:3a:a9:b5:7d:e3:fd:bb:30:6a:20:2b:b0:55:03:
         1a:33:55:ed:c6:86:2a:0b:f0:c4:61:af:e8:55:ff:bf:7a:84:
         74:f7:0c:8b:c3:82:b7:12:e6:50:c3:b0:04:80:6c:56:44:07:
         d9:08:00:8b:52:12:48:bc:db:23:b4:17:42:13:7a:31:b1:37:
         ab:5f:59:c5:93:38:f8:78:f8:b0:85:b7:19:26:4d:91:cc:98:
         61:0a:23:c8:25:38:7b:81:38:50:c2:11:0e:05:36:f5:4c:6d:
         04:03:0d:ed:22:36:e9:71:f3:f6:b7:d2:9d:ea:aa:01:32:13:
         73:3c:ba:9e:be:75:7a:71:fe:6d:f2:18:00:c7:5d:37:ec:be:
         34:d5:ed:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DesPhprJbNTDC9ojaxKXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjYwNzIxMDcwMTI4WhcNMjYwNzIyMDcwMTI4WjAzMTEwLwYDVQQD
EyhmZmFiNDNmMDlkOTBkNGRiNjNkMjAwZTRhNTE5MWIzYmZjZDExN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB5dq1qSS2fOtcDz/SWqK/MpHy6s
jFU08aiZX/tZad97oZw3WJwKfzEF1Ta6UQyzk9I1+USmnVpllG9HUcTZVyjc4X2o
7VVGJ2GIaLx9w2flaCIts0K3FZambk8TEDnMEScQ3b1q9mHkW3lsGrMkX4XbBVAU
oEhoRiIOC1CqgpAZO/K/qyWiSdXOvkaUTp5qpgCMBXiy1Xqt+qfcbfloaR9Dm+j8
gdQcMvxZJ8MRX09ZPqfXYTJ1O/THmtoxdddsgaxAkfz2H+OiiyhTcwir0sAekbbF
kezr6hEx7uWo8L2Y4e3gYd0Rir9+WRcrBk9AlyGZWKhC2OoeKPxHNEwGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+rQ/CdkNTbY9IA5KUZGzv80RewMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvV3iK0R
A5qvu1YSSa5V5HJKeYCoCGgYRjF/dgFB+VZyrvHzpWj33GcyfB2jIvRZKUrQ/MeV
A6UIkC2N6d/BH1hRvzjpnCoJRPlyvPX1VMCUHfSx+onyZ4CTJ+wlA1j5NoMfWfms
zama1bemUm7lWzqptX3j/bswaiArsFUDGjNV7caGKgvwxGGv6FX/v3qEdPcMi8OC
txLmUMOwBIBsVkQH2QgAi1ISSLzbI7QXQhN6MbE3q19ZxZM4+Hj4sIW3GSZNkcyY
YQojyCU4e4E4UMIRDgU29UxtBAMN7SI26XHz9rfSneqqATITczy6nr51enH+bfIY
AMddN+y+NNXtDg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:11 2026 by rpki-client