Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File:                     1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier:          b0KXrmdjpbpwtZbZHlRaB8Ns0jVjVthAZ0ohMI5vr5E=
Subject key identifier:   E9:DA:05:A0:81:3E:62:F8:F8:D8:DC:9D:81:DE:AC:80:0A:AB:31:18
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer:       /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial:       019FAD52520338161A8D681C18A6D60AD545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number:          031B
Signing time:             Wed 29 Jul 2026 10:01:20 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:20 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:20 +0000
Files and hashes:         1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: oRG6q6f764Uc5skR/kdS+/2DOUwGwet7aYePHhBX/KQ=)
                          2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:52:03:38:16:1a:8d:68:1c:18:a6:d6:0a:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
        Validity
            Not Before: Jul 29 10:01:20 2026 GMT
            Not After : Jul 30 10:01:20 2026 GMT
        Subject: CN=e9da05a0813e62f8f8d8dc9d81deac800aab3118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:9c:ab:57:77:60:ff:c7:54:63:46:b7:7b:
                    f5:99:b1:98:c4:63:5b:cb:78:8d:ae:24:08:c7:3c:
                    5e:1d:e3:41:ca:57:45:45:0d:63:1d:29:fa:21:20:
                    a7:35:36:9a:17:ff:3b:f2:c9:9d:b7:4a:9e:a2:ce:
                    86:fb:f8:96:73:14:1e:6c:28:ac:08:7f:62:e1:45:
                    32:12:09:33:a3:e8:b2:8d:7f:22:e6:16:31:5b:e9:
                    18:e6:1f:93:6c:1c:78:6e:2b:db:92:0b:a9:c3:19:
                    62:60:33:f8:ac:3d:aa:53:be:ec:d2:ea:b8:dd:a0:
                    67:49:b4:19:e0:57:67:6b:b8:2f:25:b6:da:c6:5c:
                    17:bf:db:4c:cd:56:b9:61:cf:99:03:f0:23:85:dd:
                    f4:24:b1:b5:66:b6:66:4d:a4:a2:58:c8:4c:80:84:
                    98:08:16:2f:e5:cc:fc:1b:d6:28:19:a8:74:aa:13:
                    75:19:4a:2e:24:e5:c7:78:81:b6:87:0b:18:e9:3f:
                    2c:2e:f4:d1:cd:46:df:d6:67:d5:cb:aa:47:ce:21:
                    09:86:a0:4b:83:be:cc:1f:03:7d:13:f5:98:3b:03:
                    99:0d:c2:f9:8a:de:ef:a8:e0:46:73:1a:59:f1:c7:
                    57:65:6f:43:52:c1:63:da:0d:6e:88:14:8e:86:83:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:05:A0:81:3E:62:F8:F8:D8:DC:9D:81:DE:AC:80:0A:AB:31:18
            X509v3 Authority Key Identifier:
                keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:16:47:9a:3f:cb:8a:7f:39:cd:ea:34:80:b8:fa:38:dd:
         41:e5:32:83:eb:77:1d:cb:b3:cd:c0:33:4a:7c:53:f2:da:71:
         e6:b1:8d:17:45:31:5b:32:91:d3:12:3a:9d:94:42:88:de:da:
         bd:22:0b:e0:4d:61:26:22:f9:cb:12:e0:5d:32:22:97:98:31:
         38:64:91:d4:90:0d:3e:70:f2:f9:e8:ad:5c:27:19:74:d2:e6:
         89:12:58:72:2e:12:69:ab:ef:d3:b4:35:0a:51:cf:73:db:1f:
         89:e4:79:47:b2:50:6f:ee:97:29:37:a1:81:d1:9a:b3:39:33:
         f2:06:2a:18:78:f6:94:fc:fc:b4:15:8f:1e:21:ea:74:7f:f1:
         9c:88:d2:85:06:cf:eb:c2:b2:d9:6f:04:6e:98:13:9f:bd:4e:
         85:15:31:43:92:97:c6:11:97:77:58:62:ce:15:c7:52:88:43:
         bd:5c:1b:cb:c4:57:a1:16:ba:be:e2:0f:5a:fa:9b:0a:c7:69:
         7d:4e:b3:3b:83:de:47:05:c5:18:56:c0:f5:b3:39:9c:bf:05:
         ac:57:52:0c:3e:a5:bd:b7:07:68:aa:6b:f0:52:a7:f1:a8:ab:
         2c:76:4b:49:c0:51:a3:4a:55:65:dd:2a:d5:f1:f3:65:85:bb:
         cd:eb:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:31 2026 by rpki-client