Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          EtUr7WLKQMIeOVtYCehBubaBI5tIENVCDg7xgWSLcJY=
Subject key identifier:   86:FE:37:12:E7:B8:8B:A2:6B:5B:3A:3A:00:40:AD:16:D4:59:7A:BC
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       019EBF919478C05F614E8F4F9C89CB80FC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          0C9F
Signing time:             Sat 13 Jun 2026 06:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:49 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: dfoGozueykrJMxQJVlIP2APvLjnRZkFPEhG2DSUkt3k=)
                          2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
                          3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:94:78:c0:5f:61:4e:8f:4f:9c:89:cb:80:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Jun 13 06:00:49 2026 GMT
            Not After : Jun 14 06:00:49 2026 GMT
        Subject: CN=86fe3712e7b88ba26b5b3a3a0040ad16d4597abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:6f:be:08:d4:a6:8d:7e:6e:29:71:2b:f9:
                    da:33:8d:36:14:1f:4f:43:62:eb:a5:58:5e:d6:26:
                    60:fc:92:31:ce:fa:d5:1b:3f:8c:0b:cb:34:9a:1c:
                    a5:e8:45:48:ab:d6:ea:64:ba:5b:27:d6:3c:3c:91:
                    42:0b:19:2b:22:f6:46:84:d8:de:a8:30:2c:e7:1b:
                    06:af:9c:97:b1:fb:e9:8c:7f:6e:03:f3:32:d8:98:
                    84:52:8d:10:74:84:b4:e8:61:d4:f1:4a:41:9f:6c:
                    7b:fb:eb:03:73:c2:a0:f4:10:6c:87:85:4c:a5:45:
                    2c:a8:07:07:ae:4a:91:8a:99:96:0f:b4:69:20:20:
                    e7:68:98:07:e9:f2:ce:bb:b6:f9:b2:e5:e1:da:81:
                    4f:2e:26:d5:ff:8e:84:ba:09:15:c4:54:3f:9a:3a:
                    73:24:4e:70:a1:93:b2:14:6d:92:56:f2:52:d2:e7:
                    52:22:be:ee:a3:7a:77:e5:6b:87:f1:0b:1b:a4:b6:
                    5d:aa:a0:d7:52:4a:aa:d5:cf:ff:0f:5d:7f:e1:c9:
                    07:b8:cb:61:42:4a:61:cc:ad:88:0b:bc:0d:c0:8f:
                    30:4d:7e:99:03:96:7c:33:7b:2d:38:45:be:c6:76:
                    cd:46:2f:0d:6e:fa:39:15:68:c6:91:61:f1:67:57:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FE:37:12:E7:B8:8B:A2:6B:5B:3A:3A:00:40:AD:16:D4:59:7A:BC
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:61:a6:d8:1f:d1:03:c6:ea:2c:c4:3a:69:26:64:b9:d9:03:
         18:92:cc:2e:e5:c9:05:12:04:44:ea:d1:03:f5:a3:35:7d:8a:
         93:0b:cc:20:45:35:9a:22:39:06:b3:ab:c7:e1:a8:80:be:15:
         0a:3f:35:26:59:e1:d6:1a:af:c9:11:1a:16:6f:8d:54:9f:40:
         21:3a:55:e8:6d:77:82:e1:fe:34:f2:c9:e1:cc:d1:bb:85:62:
         6a:42:58:e1:af:d3:e4:dd:96:47:3c:b7:01:d5:8f:5a:18:c2:
         6c:96:49:4e:14:b9:8a:c7:f6:a8:7b:c8:c8:83:fe:4a:ad:31:
         71:7d:36:d0:54:43:1e:d8:ef:4c:32:8d:38:11:9a:0d:a1:8e:
         f3:7a:9c:35:74:d9:56:4b:6d:f7:27:39:73:52:cb:10:c9:0b:
         86:6b:83:90:bf:c3:59:9e:81:84:66:89:7a:38:65:1f:27:b3:
         ca:55:fa:a2:3c:29:8c:66:cf:8b:91:1f:0e:a4:72:25:98:28:
         cf:0e:ec:29:32:b8:cf:85:e0:ea:0b:22:c5:a0:9d:ef:7a:d6:
         2e:6b:3a:d0:38:be:60:e9:e7:c8:8b:36:2f:9c:02:fa:ac:53:
         ea:98:74:8a:67:ab:38:f4:c9:a6:2a:e5:2a:fb:f8:8d:61:1c:
         61:c5:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:18 2026 by rpki-client