Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          BiXSPWxEnQPjNWkcEOJ4mYFtXI9yi81IiKcQ5l34iMM=
Subject key identifier:   5E:65:65:4F:93:26:71:88:58:8A:DF:05:1C:A2:E5:AB:D2:36:39:4A
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       019EBE484AF9B8ABAEF538832ACD83AE036A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 00:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:09 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: MITW/Sz2bSEtZ/lYgnb+PQk4rATlkAMKMGrVMiRYpmc=)
                          2: RY-r8degIdRULqk_qmxjFefq8O0.roa (hash: lLpPZuz/t5Yw8zlJe7ERdvGB1DRM1TuO1Rrg7Us/30Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:4a:f9:b8:ab:ae:f5:38:83:2a:cd:83:ae:03:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Jun 13 00:01:09 2026 GMT
            Not After : Jun 14 00:01:09 2026 GMT
        Subject: CN=5e65654f93267188588adf051ca2e5abd236394a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:ee:ac:80:ce:95:95:6f:42:1a:ce:e6:84:
                    12:a6:c3:95:62:92:2e:c5:84:53:70:ab:22:ec:0d:
                    38:fd:8a:dd:42:d2:20:c3:85:5a:69:e5:29:71:6e:
                    69:20:25:19:ec:ac:03:f6:7c:df:81:10:b6:5f:9b:
                    ca:54:ba:e1:7e:88:1c:47:f0:33:e4:99:48:3b:22:
                    07:d3:5d:12:dc:ee:04:1e:4b:ab:9c:d1:52:bf:67:
                    90:f9:86:d9:6e:ca:c1:fd:d6:5f:b3:24:e1:e5:50:
                    c1:a5:3b:b8:da:82:07:4f:0c:0b:ca:dc:b0:1c:93:
                    1b:28:ba:c5:77:d7:25:af:67:fa:65:75:3c:3c:ad:
                    f6:64:2b:bb:ae:dc:df:a7:50:ba:6e:51:aa:5d:1f:
                    ff:fd:bf:c2:a9:76:e4:f4:b2:a6:ba:b1:72:ab:01:
                    7b:4f:d7:f5:1f:f3:41:08:99:97:4f:55:61:7d:ed:
                    15:0b:db:80:4b:35:ed:f8:4d:47:08:d8:53:44:a4:
                    ec:69:25:2c:ee:45:45:95:0c:13:84:57:e5:e9:35:
                    c4:62:ca:01:fc:d5:38:ac:81:30:1e:aa:1b:22:e4:
                    55:cf:0a:32:6d:a7:bc:e3:af:d1:c1:7c:5d:e0:00:
                    3b:d7:01:1c:84:89:88:66:95:43:ec:f5:61:82:f5:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:65:65:4F:93:26:71:88:58:8A:DF:05:1C:A2:E5:AB:D2:36:39:4A
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a4:99:b7:10:bb:d3:ad:7d:fd:1f:3e:82:24:6e:ef:f8:ad:
         1b:d3:17:8e:c9:16:0a:4c:19:ff:74:9e:ca:a9:4f:e5:75:f5:
         94:fb:8e:88:0b:0d:11:3e:c9:fc:06:4f:76:42:8e:9f:87:e2:
         42:8d:3c:e0:c6:29:30:03:91:db:2d:b7:c2:fb:14:66:9d:7e:
         53:bb:0e:51:21:29:00:59:d6:b9:30:bc:79:f4:61:23:ad:d7:
         ea:51:66:4c:ab:d9:88:95:9e:a4:6a:f1:46:59:e7:48:74:92:
         70:93:d7:06:5e:0d:73:ac:29:77:de:a7:9d:c4:f7:d8:ce:2c:
         66:ed:81:c4:9a:2b:5e:5b:db:6d:13:09:1c:84:e9:41:24:b3:
         ae:9d:07:6a:e7:93:7f:10:57:3d:ee:bd:40:a3:50:56:50:79:
         00:d0:a4:4a:4e:ab:9e:7c:27:36:a5:f1:eb:0c:c1:cc:39:43:
         b2:e5:fb:94:4c:2d:d5:e0:62:cf:4f:e0:92:7d:78:f9:73:46:
         e7:ac:53:76:ed:da:0d:33:8a:de:3c:21:7a:fa:2d:4f:0e:88:
         7f:10:78:0b:51:e6:1f:08:c7:14:e8:49:fc:5d:bc:19:1c:f5:
         5c:eb:ba:74:6a:74:ef:3b:29:84:db:57:b0:87:ce:06:6b:22:
         df:6d:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:07 2026 by rpki-client