Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          LEpZ/WKbsAgGMjjqmOXjixktjPFkCeKi9eNMgCIkmpc=
Subject key identifier:   15:29:FF:79:60:78:9C:A2:E7:75:8C:83:C6:AF:5C:23:A5:EA:56:2F
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       019FA93E097697F1AF14B25FD647BE51DA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          0D18
Signing time:             Tue 28 Jul 2026 15:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:42 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: MwxkhrTAXQ5WmbhcEqWnUdGl7AeH0hpQkjbtIFH/xs8=)
                          2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
                          3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:09:76:97:f1:af:14:b2:5f:d6:47:be:51:da:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Jul 28 15:00:42 2026 GMT
            Not After : Jul 29 15:00:42 2026 GMT
        Subject: CN=1529ff7960789ca2e7758c83c6af5c23a5ea562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:e8:45:62:0c:dd:19:e4:2f:4c:0b:d5:1a:
                    48:23:52:19:85:02:60:e2:fd:26:d3:e5:9f:ac:4d:
                    92:a1:b0:9c:32:65:44:ae:4c:8e:a5:b7:ec:66:d5:
                    14:f4:1b:b2:74:21:8d:91:7c:01:7f:ab:9a:f6:ab:
                    ad:2d:8c:02:93:7c:8d:e8:22:70:eb:96:c6:69:ad:
                    fe:b0:13:4e:30:73:4d:ea:a8:4f:ca:71:02:b1:d5:
                    a9:8c:98:a6:77:8b:7d:ad:3b:dd:69:81:26:f4:23:
                    01:f0:b0:74:b9:4d:6d:c2:67:17:58:c2:50:31:96:
                    d3:ed:45:c2:3d:c5:63:3e:36:33:bd:33:a8:34:1f:
                    21:6c:bc:b0:11:39:1c:b0:4b:11:d2:b5:d5:5e:28:
                    c2:b6:d6:e4:22:fd:b0:e1:30:b5:4c:34:e8:c8:24:
                    9e:a5:05:ba:57:dd:ae:d7:ad:37:fa:20:10:ce:42:
                    c7:c2:be:99:da:91:03:40:29:a8:84:b7:84:40:07:
                    c7:a3:cd:cd:9c:62:28:c8:33:a3:da:f7:c3:72:89:
                    c1:52:2b:46:96:84:53:55:89:82:bf:29:69:d2:d0:
                    c5:2d:95:ec:c7:08:ff:59:71:df:09:bb:45:bb:95:
                    0b:57:be:bf:eb:2b:96:b1:ca:7a:98:bb:a3:af:d2:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:29:FF:79:60:78:9C:A2:E7:75:8C:83:C6:AF:5C:23:A5:EA:56:2F
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:44:27:2e:78:e9:24:06:7b:d1:0e:93:28:70:07:2d:6f:
         07:8d:4e:d6:e5:45:24:3b:65:23:85:b0:9b:8f:e5:a0:b9:af:
         26:d7:3a:e8:f9:36:d6:48:ce:cd:f4:29:6f:96:ba:61:18:34:
         7d:bc:33:14:d7:b0:96:f4:be:20:0a:cd:7a:74:6c:5b:b8:ec:
         91:97:04:4b:03:27:ae:c4:ca:fe:44:c5:96:d2:9c:e9:4e:d3:
         79:93:a3:2c:c9:24:b7:cc:c7:f6:da:a8:31:91:c4:a6:49:62:
         40:d2:a8:e8:d7:fe:57:c5:e4:1f:b8:60:e8:06:1d:e6:66:e4:
         5e:3c:64:c3:2d:ae:84:a2:5a:40:26:37:fb:bc:db:85:9c:95:
         0d:c4:b4:49:ac:db:49:57:c2:24:cc:20:25:20:76:36:b2:01:
         b7:72:a3:08:70:5e:63:b9:67:e1:44:f8:55:a1:51:b7:45:98:
         30:0c:c1:5e:af:c9:af:3a:c9:f0:f0:c8:66:de:b7:d9:da:27:
         6b:26:31:de:19:cf:ba:cd:02:bb:16:a6:41:b3:b7:3b:44:26:
         3f:98:36:56:ea:71:7e:17:79:c6:fc:f9:f4:fa:3c:96:64:30:
         e5:b2:d0:33:9a:81:c9:7c:59:fa:93:eb:a5:af:9c:33:37:ed:
         90:b7:b9:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPgl2l/GvFLJf1ke+Udp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj
YjRmMmIwHhcNMjYwNzI4MTUwMDQyWhcNMjYwNzI5MTUwMDQyWjAzMTEwLwYDVQQD
EygxNTI5ZmY3OTYwNzg5Y2EyZTc3NThjODNjNmFmNWMyM2E1ZWE1NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IXoRWIM3RnkL0wL1RpII1IZhQJg
4v0m0+WfrE2SobCcMmVErkyOpbfsZtUU9BuydCGNkXwBf6ua9qutLYwCk3yN6CJw
65bGaa3+sBNOMHNN6qhPynECsdWpjJimd4t9rTvdaYEm9CMB8LB0uU1twmcXWMJQ
MZbT7UXCPcVjPjYzvTOoNB8hbLywETkcsEsR0rXVXijCttbkIv2w4TC1TDToyCSe
pQW6V92u1603+iAQzkLHwr6Z2pEDQCmohLeEQAfHo83NnGIoyDOj2vfDconBUitG
loRTVYmCvylp0tDFLZXsxwj/WXHfCbtFu5ULV76/6yuWscp6mLujr9JvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUp/3lgeJyi53WMg8avXCOl6lYvMB8GA1UdIwQY
MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt
Zjc1MzFhMmI2MjQ3LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3
LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro5EJy54
6SQGe9EOkyhwBy1vB41O1uVFJDtlI4Wwm4/loLmvJtc66Pk21kjOzfQpb5a6YRg0
fbwzFNewlvS+IArNenRsW7jskZcESwMnrsTK/kTFltKc6U7TeZOjLMkkt8zH9tqo
MZHEpkliQNKo6Nf+V8XkH7hg6AYd5mbkXjxkwy2uhKJaQCY3+7zbhZyVDcS0Sazb
SVfCJMwgJSB2NrIBt3KjCHBeY7ln4UT4VaFRt0WYMAzBXq/JrzrJ8PDIZt632don
ayYx3hnPus0CuxamQbO3O0QmP5g2Vupxfhd5xvz59Po8lmQw5bLQM5qByXxZ+pPr
pa+cMzftkLe5rg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:19 2026 by rpki-client