Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          ULb13G/lQM3rmmrWhXMC3S3aEFeBQsM0bs9yZIYcgr4=
Subject key identifier:   3F:B2:46:EC:8D:39:63:A1:0E:E6:CF:B7:37:D8:3E:F9:11:17:FA:0E
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019FA8D06271DC2F389653810BD3FAA680D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          15FC
Signing time:             Tue 28 Jul 2026 13:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:56 +0000
Files and hashes:         1: 4o4L_7_xd96NsgGKsiURLa7lMNQ.roa (hash: HafbA3v0Vsbqb/QGRzwxXfYkVjmE1FlzpPoVskuxJxs=)
                          2: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: m3wh/yU0QbZrqDj89tE10s+rsTZDn6l9VEPIBunX6tk=)
                          3: O4lfIFI5neBXzLMxaV02jkeMzgc.roa (hash: ko9jy9JwVheYnkpwrtUCdOV69SgxGZD9WIsq1tTyulI=)
                          4: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
                          5: gw4BPb4uAJDOzJ_Kafu7dXfPcw4.roa (hash: MfusxviaX8fqxiMBAVkmOufZsFOf9Mn6gCko9leOsUY=)
                          6: rKGQ7poojETPp4y6kBV03CAX_QU.roa (hash: MFAKwx/30b1lSDbBv7QTFqnX5FoVInm26iYIXMltgCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:62:71:dc:2f:38:96:53:81:0b:d3:fa:a6:80:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Jul 28 13:00:56 2026 GMT
            Not After : Jul 29 13:00:56 2026 GMT
        Subject: CN=3fb246ec8d3963a10ee6cfb737d83ef91117fa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:26:20:20:f2:82:52:56:cc:03:3c:8a:d9:
                    a1:c2:d3:6f:e4:49:0c:d1:0b:3e:45:07:69:dc:be:
                    1d:3a:ed:96:34:a5:6c:2c:77:27:9d:12:0e:61:bd:
                    23:ea:c5:e1:95:40:72:8e:bc:77:e3:13:e4:be:50:
                    59:9e:6e:85:ca:5d:c7:c0:dc:3b:0a:c2:c2:20:0e:
                    f7:8c:5f:ec:45:83:65:6c:9c:43:65:ee:d2:b5:11:
                    8d:0f:1c:43:49:da:a5:bd:f7:bd:0b:94:54:3c:7b:
                    90:a7:62:36:54:5a:e0:a0:fa:18:8e:d1:24:81:fa:
                    d6:95:c0:4b:ca:43:73:84:ca:d5:6f:bd:e4:0f:fd:
                    ed:6c:07:e3:a0:6d:4e:3c:5b:b3:d9:9f:65:90:56:
                    a9:7b:f0:51:7f:7e:ec:78:d0:98:7d:ce:74:d1:15:
                    b8:3f:6c:45:c6:9a:13:4a:0b:eb:56:a6:44:5a:97:
                    5a:33:d2:d8:4e:b5:6a:9a:8e:59:a4:2a:07:30:29:
                    c9:49:db:5f:4e:f5:ff:5a:49:a7:d1:ab:1e:84:53:
                    6f:70:09:ca:ab:d3:25:14:4c:5a:59:56:15:63:f2:
                    37:7e:60:f9:e2:65:2d:7e:f3:c5:da:cd:18:1c:f1:
                    bb:38:2b:2d:60:a6:20:c1:88:39:aa:02:28:6c:a2:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B2:46:EC:8D:39:63:A1:0E:E6:CF:B7:37:D8:3E:F9:11:17:FA:0E
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b0:a7:ae:15:e3:ed:68:ce:5d:a4:28:49:f4:61:9c:5d:49:
         c7:45:6a:2a:4e:02:39:23:23:bb:ce:5f:aa:bd:7b:1e:94:21:
         21:3a:d1:4e:55:1c:ca:d6:ed:71:41:cd:fe:fe:80:9f:42:cf:
         a0:2d:f3:d4:de:51:d0:ec:da:c9:1c:0a:de:ac:75:89:5e:11:
         fe:c7:b3:fa:fa:32:38:3f:d4:78:f3:53:3e:fa:63:b5:06:c1:
         ec:06:ad:18:ea:6e:10:6e:bb:1d:34:b7:3d:3b:3e:97:35:54:
         12:99:19:72:07:d1:6a:1f:ce:b4:a8:8c:02:7b:67:be:7d:34:
         e8:8c:1c:c8:88:e9:37:12:e2:d2:79:26:2e:1c:51:55:0e:d3:
         be:6c:af:ea:8e:8f:df:b4:7a:83:c7:b7:bb:f4:95:09:db:18:
         99:a4:78:6a:5c:cd:3e:c8:81:0c:a5:2d:d7:41:06:12:bc:0c:
         dc:df:1f:71:21:13:6d:e6:32:ed:51:03:65:4d:80:39:7c:71:
         e5:57:95:85:15:52:f3:04:6d:ac:90:20:19:3e:07:f2:a4:2f:
         c7:52:de:c3:03:d2:68:02:b0:4a:3e:0c:0f:f0:9d:48:6d:44:
         7b:7e:07:9d:ac:aa:24:69:4b:7d:cc:5f:0f:7b:c4:05:a1:3b:
         c2:fe:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:17 2026 by rpki-client