Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File:                     B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier:          vErKPkW0Heyh8j+aO/OQaltRHKYeEYjp8Gs88dK4ur4=
Subject key identifier:   31:79:B8:7B:9B:1C:87:B1:62:19:7F:88:E3:93:21:E5:2A:A9:0F:5C
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer:       /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial:       01A0C4E97AAD6CA4949747CD21946055FD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 17:00:30 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:30 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:30 +0000
Files and hashes:         1: 1ci4NPebCgeMNcywiGWuM9-74b0.roa (hash: NY5avTfHcZ7Ff+XOjRJKVaDYbSIYWepikXVoA2de9Ps=)
                          2: 3T09Td3RZBmm3zvrQZwwBpGpeB0.roa (hash: pFlvkiWfnXad6Oz+dG5TGKsNIEC3q4DoU1i3YQnxVfo=)
                          3: 5tzteWGlFwKyjVQ8xPXj-51OvPg.roa (hash: xh5JVCDA4vTE54YP7MSyM/w2gDnbTUxL3iC/W96lliI=)
                          4: AvaeWG-njVdOVlLECWj-IW43uqs.roa (hash: gNzxs1dP4CTxfTmXk2sbLEZ/MxqwjiItf63NRx4XFwI=)
                          5: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: d9gQWYLeZElZPTE7QpE5qKTLzCTZKJjXojROb7TsRIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:7a:ad:6c:a4:94:97:47:cd:21:94:60:55:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
        Validity
            Not Before: Sep 21 17:00:30 2026 GMT
            Not After : Sep 22 17:00:30 2026 GMT
        Subject: CN=3179b87b9b1c87b162197f88e39321e52aa90f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:a2:7a:e4:bd:09:ec:2d:8b:ea:0c:78:3c:
                    8e:df:94:7a:54:0b:e9:26:b1:af:19:3c:73:99:1d:
                    9c:fb:a0:8b:0b:5b:ad:e1:5c:f0:cd:3e:5d:7f:a5:
                    39:31:29:3f:d4:dc:ea:2e:81:0f:11:ec:b7:80:7f:
                    db:8f:66:15:18:9f:64:75:a1:95:74:23:ad:6f:0a:
                    d3:cb:3f:a1:31:24:4b:84:a5:8c:5c:d9:8f:ff:9e:
                    0f:33:75:5a:c3:3e:b0:99:96:82:6f:6f:42:c1:71:
                    60:2e:6f:9c:ad:69:70:01:0c:79:2e:97:45:0b:59:
                    11:95:50:c7:a7:47:73:1d:58:fb:92:e8:5d:c9:52:
                    cb:ee:e2:a8:69:dd:6f:09:cd:a7:c1:a7:84:f0:42:
                    da:40:c5:49:99:69:23:af:49:f6:74:1d:65:6f:4d:
                    12:d3:3e:56:a1:72:93:d7:1b:74:25:47:e6:e5:74:
                    59:13:c7:61:3e:83:c2:f8:d7:5c:ff:ca:a2:1f:02:
                    ad:16:b5:4c:8c:8c:13:1c:de:22:bd:ff:45:07:57:
                    38:20:06:b4:02:09:30:02:77:34:73:2d:9b:cd:bc:
                    c3:1e:72:76:8e:78:cf:76:2f:04:0d:0f:70:71:86:
                    cc:5a:8e:a8:a3:95:bc:e6:44:96:57:8b:9f:5f:89:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:B8:7B:9B:1C:87:B1:62:19:7F:88:E3:93:21:E5:2A:A9:0F:5C
            X509v3 Authority Key Identifier:
                keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:8c:42:d9:04:d5:54:fe:14:60:b5:fa:73:cb:f2:cf:1b:
         c1:7a:e5:4f:fe:65:04:32:d0:b0:51:dc:f1:00:f6:73:0c:28:
         d4:7a:7d:de:ee:08:d1:ac:d0:d6:89:42:2e:04:8a:05:c7:8f:
         4f:77:9e:b3:f9:95:10:cc:8f:e4:3e:29:18:9f:ed:b3:a1:2b:
         30:f3:ed:f3:ba:2f:28:a0:fa:12:e3:25:2f:95:85:5c:66:9e:
         fc:e6:bf:dc:92:a7:f1:07:12:ae:fb:51:c1:de:b0:40:2b:bb:
         a7:3b:9f:3a:64:31:9c:eb:61:21:30:cc:10:86:ad:cf:b5:ff:
         91:3b:03:73:3f:94:bc:d5:ad:5f:1c:de:54:49:c9:9e:c0:c1:
         22:94:b3:85:fb:7c:ea:d3:87:cc:f5:b4:31:0e:70:06:cf:82:
         f2:f1:4e:9e:22:79:99:6b:4b:40:da:7f:c9:b8:59:7d:83:8e:
         15:4e:dd:e7:77:8e:b2:72:06:c9:74:cf:fd:65:2f:b2:8b:bd:
         7d:16:65:3f:58:f4:65:38:77:32:a1:2b:e5:96:b6:13:f2:8c:
         13:45:a2:65:c4:dd:25:1d:35:f4:2f:84:fd:67:87:10:5d:f0:
         a0:ac:65:67:7b:df:0b:0b:9a:a1:e3:db:9d:ed:74:37:be:b1:
         1f:d3:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:19:10 2026 by rpki-client