Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          f3jNHlrvkn6e8PdGZDry6A/dPmJ2Kobs+sDls37514A=
Subject key identifier:   7F:5F:9D:FD:59:4D:74:CC:FE:C9:95:26:E8:D0:C6:D7:07:9E:C3:94
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019EC0368517739F0A6E28AF740B011E344F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          1582
Signing time:             Sat 13 Jun 2026 09:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:58 +0000
Files and hashes:         1: 3xMKlPHIGaOyntvxq5-0cJGkEM8.roa (hash: /cEKrRNTiBM5gi3hqFnttqfsa8KXp+I1M1pMt+zCB0M=)
                          2: 4o4L_7_xd96NsgGKsiURLa7lMNQ.roa (hash: HafbA3v0Vsbqb/QGRzwxXfYkVjmE1FlzpPoVskuxJxs=)
                          3: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: bMlwEy4cDlqB+U6rmcMNB2QKSGcXd8SlB5tSsTfAUPM=)
                          4: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
                          5: gw4BPb4uAJDOzJ_Kafu7dXfPcw4.roa (hash: MfusxviaX8fqxiMBAVkmOufZsFOf9Mn6gCko9leOsUY=)
                          6: y_GcCsfSfaQjGz_SPaSfHi-dJc8.roa (hash: AgL+OrWbRwy8UGkbrgT4UM/oCwI3h3pWQBfXUwydd1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:85:17:73:9f:0a:6e:28:af:74:0b:01:1e:34:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Jun 13 09:00:58 2026 GMT
            Not After : Jun 14 09:00:58 2026 GMT
        Subject: CN=7f5f9dfd594d74ccfec99526e8d0c6d7079ec394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:82:a0:94:49:20:b3:c7:fb:f9:57:21:7e:
                    88:07:62:95:80:7a:40:2a:a8:13:74:21:be:e0:18:
                    85:f4:ce:1e:80:35:e1:7b:7b:33:7a:d4:ac:cb:fc:
                    f9:b3:c5:bc:4f:e9:75:f5:3a:ac:26:b6:9f:a9:5b:
                    c3:11:a4:d1:af:12:32:d0:52:6e:a4:be:cd:24:09:
                    27:0f:03:79:0e:83:22:06:5f:76:77:8c:59:7d:9b:
                    60:78:1e:b1:a6:d7:71:95:d4:61:d4:ae:d1:44:28:
                    ff:fa:b4:b4:f1:aa:b2:a8:22:a7:ae:b4:6a:ef:44:
                    9e:1a:69:1c:4f:07:ba:c9:68:40:43:2b:da:28:05:
                    19:f4:a7:50:8b:99:7f:fd:6c:7d:c0:c0:ff:e3:eb:
                    54:8a:7e:8b:29:33:29:54:fe:b1:64:15:37:1a:c4:
                    11:45:74:f3:92:56:3d:55:9c:1e:05:55:1f:72:9a:
                    91:58:23:12:a4:9a:2b:59:c3:36:08:b9:e6:63:b0:
                    fa:f3:23:c2:fb:90:4d:59:01:5a:7d:62:3a:77:6e:
                    09:24:b7:0d:f1:30:ab:40:7c:71:be:a5:13:2f:c8:
                    9b:7a:18:ef:02:41:3b:c9:1a:27:f1:1b:9d:30:ca:
                    d2:e1:e0:28:3d:2e:56:72:56:f1:78:ae:82:16:96:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5F:9D:FD:59:4D:74:CC:FE:C9:95:26:E8:D0:C6:D7:07:9E:C3:94
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:e4:0d:40:b9:d0:3e:af:e4:87:9f:d3:ed:97:f9:61:24:
         a0:f3:c3:e9:73:13:1d:30:12:cf:4e:1b:35:3a:97:58:c2:c3:
         41:bf:f2:c0:13:8b:a7:32:db:2f:06:bc:07:4a:50:51:f1:9e:
         e2:9a:2b:bd:0d:03:04:45:3b:64:34:cd:8d:20:36:04:45:dd:
         88:80:5b:2f:26:d9:7c:c5:66:ea:cf:5e:97:9f:b0:65:42:7d:
         db:0a:31:6f:88:d8:15:85:00:9a:37:a5:6f:dd:86:51:f9:ac:
         31:4c:88:54:20:94:8d:65:59:b0:79:ef:e7:47:94:52:8d:ee:
         14:9e:9e:d1:79:98:3a:d3:f0:41:ed:92:11:58:85:4b:c7:ac:
         88:d8:10:83:ae:40:bb:c9:71:0c:4f:8c:df:17:22:bf:af:89:
         30:7e:44:ed:4c:e8:73:26:63:42:55:52:75:a0:37:7b:dd:79:
         d0:ad:82:71:92:6f:e4:93:a2:7d:66:b3:a0:55:71:c5:63:04:
         28:13:95:6f:5b:a7:52:30:c7:f5:44:61:07:0d:67:4e:bc:68:
         3c:c4:08:a9:ca:1b:30:f1:d0:02:a0:12:b4:ea:ed:20:a3:46:
         7a:d9:e8:1b:3f:6c:6e:5e:51:90:86:94:03:95:93:83:f4:29:
         2e:94:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:25:25 2026 by rpki-client