Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          VYB5pXwC1sFnelDWMnZcS1y8u8FDa4d0u0E8fxuO38k=
Subject key identifier:   C2:CB:DC:E2:8E:98:95:A5:7D:69:50:CE:67:5B:47:3E:83:02:CB:72
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019FAABED059DF10C947872673BC85C19430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          15FD
Signing time:             Tue 28 Jul 2026 22:00:59 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:59 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:59 +0000
Files and hashes:         1: 4o4L_7_xd96NsgGKsiURLa7lMNQ.roa (hash: HafbA3v0Vsbqb/QGRzwxXfYkVjmE1FlzpPoVskuxJxs=)
                          2: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: dIJrutneQ5CDmYJPA5iMvb7GdDHs62AuXpIGtaUkakQ=)
                          3: O4lfIFI5neBXzLMxaV02jkeMzgc.roa (hash: ko9jy9JwVheYnkpwrtUCdOV69SgxGZD9WIsq1tTyulI=)
                          4: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
                          5: gw4BPb4uAJDOzJ_Kafu7dXfPcw4.roa (hash: MfusxviaX8fqxiMBAVkmOufZsFOf9Mn6gCko9leOsUY=)
                          6: rKGQ7poojETPp4y6kBV03CAX_QU.roa (hash: MFAKwx/30b1lSDbBv7QTFqnX5FoVInm26iYIXMltgCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:d0:59:df:10:c9:47:87:26:73:bc:85:c1:94:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Jul 28 22:00:59 2026 GMT
            Not After : Jul 29 22:00:59 2026 GMT
        Subject: CN=c2cbdce28e9895a57d6950ce675b473e8302cb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:73:b3:a8:76:9a:f8:37:f0:8b:33:31:d2:
                    40:11:8f:d3:ba:65:fb:0c:09:5a:7b:00:43:1f:58:
                    8c:77:f5:4a:f0:1a:23:6e:25:28:86:58:d7:ef:40:
                    40:b7:5c:61:16:29:10:78:46:f1:3f:56:5d:ed:80:
                    2e:75:5a:ed:3b:7a:a0:f7:95:88:a0:af:e3:5f:44:
                    dd:d2:55:c3:86:9b:2b:a9:e3:a7:3b:c7:ae:44:b6:
                    cf:f7:a5:b1:59:e3:8f:c0:97:13:44:cb:f8:68:8b:
                    e6:71:8b:17:bb:f2:bb:c5:5a:ba:64:e8:53:25:1e:
                    49:76:a8:ed:f1:08:4c:90:c1:a1:88:84:58:33:bf:
                    59:d0:d7:c5:d2:21:fb:84:75:da:d9:5c:79:d8:34:
                    b1:e6:3b:a8:6e:73:43:7e:eb:f6:02:be:77:7c:03:
                    ef:65:f5:37:5e:47:0b:d4:24:b7:61:f1:fe:08:b3:
                    95:52:c3:21:87:02:cd:06:0d:1c:80:ff:ad:90:ac:
                    c5:d1:45:2b:28:07:30:37:eb:41:77:dc:ad:5b:90:
                    12:59:7d:43:3b:88:ed:da:68:87:17:28:fd:56:dc:
                    a9:c2:bc:f6:9f:47:20:2d:0d:fe:14:72:dd:73:b4:
                    c8:23:f6:67:06:a2:6b:7c:3f:93:3c:86:0e:1b:8a:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:DC:E2:8E:98:95:A5:7D:69:50:CE:67:5B:47:3E:83:02:CB:72
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:aa:99:6b:6f:b5:ec:78:50:7d:77:da:0d:62:5b:0d:cf:
         e9:2f:1e:d3:fb:ee:56:84:88:3c:c7:d7:b8:dc:35:cc:6a:92:
         a5:83:fb:17:24:4f:c3:15:2e:aa:ce:ee:2a:75:94:49:a5:97:
         8b:69:65:5c:c4:10:ef:10:a0:84:42:0c:a9:cb:ff:29:14:26:
         b1:f2:4d:87:09:7f:59:a3:8d:b9:fb:f2:b2:bd:fd:53:e2:4f:
         ba:a8:81:87:bc:fe:db:9a:27:60:4e:a4:9b:10:a0:86:ed:64:
         d0:c5:aa:9f:b5:1e:8c:33:d5:6a:03:4c:bc:da:8c:fa:85:51:
         a8:eb:b1:de:63:6b:eb:77:24:d9:02:1a:7b:5f:38:41:ca:d2:
         10:cf:f9:f3:e3:6b:5b:e5:be:9e:df:c0:8f:57:7a:4c:b6:b4:
         b6:26:a8:ff:98:c3:9d:e4:31:1d:7c:c2:15:12:7c:51:5d:18:
         ba:98:88:f1:07:24:70:6a:bb:49:b6:0d:0e:68:9e:49:12:f9:
         bf:f4:10:09:9d:59:79:f3:6c:a0:f3:6e:9b:3f:56:62:7e:50:
         ef:5d:3c:52:9b:2a:2b:96:ae:94:49:11:ad:c5:15:ba:f1:b7:
         a1:61:51:ac:f3:fe:5d:92:7c:6d:c2:ee:24:1e:62:e6:bf:19:
         f2:1a:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:08 2026 by rpki-client