Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          gSd+HEl7R1fmDjjb0H3ypXCo+UWgF0uL6p+JthofnZM=
Subject key identifier:   18:A6:8C:BE:3F:5D:C0:68:0E:EC:61:DF:9E:9D:0E:AB:30:75:C3:BE
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019A4DE15FF1ED2CA7C1D692F06E0BCDDDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          132F
Signing time:             Tue 04 Nov 2025 08:00:07 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:07 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:07 +0000
Files and hashes:         1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: B1TlmJIqdE4in8HakPSqvir4fEkrP6J992OIZL/DMk4=)
                          2: MHWEBb8RKZSn4dy7qA_izu7w91w.roa (hash: 44oBBFXwCkfSDHIkUc46ZuGmSEo2ss8zLAgd2waANh8=)
                          3: NwG29YuTRI5XksjMFNEM5lUSKWs.roa (hash: zIhjmOX+WnWAegfCFaKo2xLAqaq2QljDNtribVl5+Wc=)
                          4: Ta-jwZuVmBfbN54Mc87wJCcldqs.roa (hash: atOnMqdqU6L3frERpvrIl+0QC3L9/h7vBzk5CuDitGk=)
                          5: UYG02sedni6PF3l5885jWR9SDAU.roa (hash: F15eDYq10rpPatO7l2AwP8pJp/GPkxjGwfOAI4ndu8c=)
                          6: f9twcyYK2by7ABlD3vJjZJJTE9A.roa (hash: yE/0XoRiP4N9ruMBiHFcxDsyw4D7EJrDKYC2qthpjzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:5f:f1:ed:2c:a7:c1:d6:92:f0:6e:0b:cd:dd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Nov  4 08:00:07 2025 GMT
            Not After : Nov  5 08:00:07 2025 GMT
        Subject: CN=18a68cbe3f5dc0680eec61df9e9d0eab3075c3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:7a:41:d5:5c:5e:ad:39:81:11:0e:fe:31:
                    85:5a:ed:b8:18:c6:70:c9:f1:2b:cd:49:94:2e:0f:
                    b9:73:3b:76:c4:99:eb:00:b2:19:89:9d:d4:92:7d:
                    bd:81:44:6b:73:c1:af:64:2b:18:6d:03:95:a9:73:
                    cd:81:3c:81:39:8d:05:aa:2e:62:fe:61:83:6f:3c:
                    61:7e:a8:0a:8d:b3:89:af:99:19:af:f4:b3:d2:18:
                    55:55:0a:c5:42:84:b9:d4:9c:c3:1b:3b:6c:51:df:
                    1d:3e:d7:a8:6d:0d:17:70:04:1b:1a:17:81:ca:75:
                    53:a4:da:cf:c5:81:4d:e0:4f:a2:5d:85:ea:a8:0d:
                    83:f2:9b:af:bd:ed:5e:ba:2a:e7:67:01:6f:28:2b:
                    b8:0a:b7:8b:6f:4f:1c:8f:7a:56:5d:6c:9a:04:dd:
                    c8:cb:4a:f6:e2:2a:d6:63:9e:60:e8:93:1e:aa:2b:
                    f1:b2:10:0f:39:ec:7d:ec:c3:61:f0:8e:fc:5f:7b:
                    4f:15:4e:c1:5c:b1:1c:3f:2a:cf:69:a6:02:40:d5:
                    dc:88:8b:37:0c:6b:06:0e:3c:d2:1b:60:2c:ba:9d:
                    a5:a9:84:70:dc:64:c1:ce:d6:c5:1b:67:40:47:e1:
                    a3:96:fb:40:ea:d8:33:f2:0c:f4:64:00:9d:d7:50:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A6:8C:BE:3F:5D:C0:68:0E:EC:61:DF:9E:9D:0E:AB:30:75:C3:BE
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:29:0f:0e:9e:97:3c:1a:96:a0:65:6a:f3:b7:03:cb:cb:
         ca:24:20:5e:fb:98:82:dd:fd:4a:34:b3:6e:9f:68:1b:96:16:
         91:13:32:9a:35:ba:31:22:02:d0:bf:a7:48:50:7b:12:8e:70:
         18:d6:35:aa:c1:d4:76:a7:67:0d:a8:2a:b1:0b:49:61:b3:85:
         64:c4:22:a0:55:25:00:64:ea:ca:b5:56:b2:0f:f9:4d:e5:01:
         38:3f:d3:a7:4c:82:df:9a:e1:21:e7:f4:d8:60:76:d6:9b:fa:
         ef:c1:67:ad:db:11:9b:95:33:86:e6:63:11:d1:0f:4a:f1:58:
         cc:45:ab:a0:92:bf:44:e3:a9:31:32:95:1c:25:1f:c8:aa:35:
         d7:a0:c6:77:bd:9f:86:d8:ff:a6:d6:40:2c:6a:6a:55:1c:e6:
         5d:7f:51:0e:c2:bc:0b:10:c6:11:bc:95:94:44:55:20:69:13:
         53:c2:f3:5f:88:27:14:39:2b:6f:97:66:ba:37:4b:22:0e:b8:
         f0:3f:55:0d:67:b9:e6:b0:6d:96:7e:d8:d9:48:11:ec:55:be:
         ee:24:03:13:fd:41:b5:bc:51:49:df:ff:5f:c8:aa:83:db:53:
         b5:99:60:5c:70:18:c6:6d:73:44:0b:fd:15:62:aa:6f:b0:fb:
         9a:80:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:30 2025 by rpki-client