Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File:                     B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier:          EDIIbalUWpuC+J9NDb2BDbY9HIR5S3FVJe4JGCvCRYs=
Subject key identifier:   7E:1F:B8:43:F8:E9:8F:E2:F7:80:BF:8F:5C:70:3D:2B:F7:58:84:E0
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer:       /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial:       01A0CEC89860451A440414A1319FDFDE290D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number:          1A69
Signing time:             Wed 23 Sep 2026 15:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:47 +0000
Files and hashes:         1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: WEW+8Y6XQqPuSQ18V+/7w08vKCFNzf1zT4WelpRxICA=)
                          2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:98:60:45:1a:44:04:14:a1:31:9f:df:de:29:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
        Validity
            Not Before: Sep 23 15:00:47 2026 GMT
            Not After : Sep 24 15:00:47 2026 GMT
        Subject: CN=7e1fb843f8e98fe2f780bf8f5c703d2bf75884e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:37:40:86:76:05:2a:e4:d7:43:3a:23:87:
                    5d:71:b3:04:1f:9c:94:5c:ef:4f:22:f9:5b:cd:ec:
                    35:29:16:87:9a:12:d8:16:fd:49:25:bb:70:d5:13:
                    25:2f:fc:6e:14:e3:93:ef:40:54:dd:3a:18:80:17:
                    06:fa:96:76:08:f1:75:d1:b2:ea:44:13:e0:09:59:
                    b6:b8:95:51:30:ed:93:a3:4c:a2:6f:97:f9:33:61:
                    af:0d:33:81:b3:11:b8:11:e9:c0:ef:18:7b:0c:e7:
                    ab:db:d1:f0:1a:48:b8:5e:7c:25:24:1a:e2:79:6f:
                    f8:0e:5c:a2:97:2b:54:bd:b7:87:2f:e8:0d:dd:b1:
                    75:3f:31:e9:61:40:9c:44:f6:27:bc:22:25:c4:91:
                    6d:9f:36:57:a9:cc:a1:44:f3:90:ff:96:21:a6:41:
                    0b:de:07:9c:f7:b4:15:f2:09:d3:65:c7:c9:3a:13:
                    5b:0b:df:ac:7d:37:37:24:e3:fa:69:3d:ba:3c:44:
                    f6:f6:f6:04:f9:01:73:9e:fa:36:d3:6d:a3:38:cf:
                    8e:79:0c:aa:6d:a9:eb:6a:3b:83:33:5a:83:7d:b8:
                    f1:53:a0:05:88:ee:88:d5:c7:f2:a6:a8:d0:8b:88:
                    91:4f:e3:15:e3:25:3d:47:ed:53:94:45:e2:a0:16:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:B8:43:F8:E9:8F:E2:F7:80:BF:8F:5C:70:3D:2B:F7:58:84:E0
            X509v3 Authority Key Identifier:
                keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:42:ab:77:40:dd:a6:e6:9e:5a:4b:b6:33:85:32:67:1a:
         24:08:b8:a4:fd:bd:49:2b:69:b1:a4:c8:17:ff:33:32:39:c5:
         aa:d5:6e:ba:fc:71:ac:43:6b:63:de:44:35:a2:03:b5:47:6b:
         2f:bf:a2:84:93:d2:42:d5:3a:c7:5c:94:f4:ce:ec:0c:b7:a8:
         0f:9d:af:1c:b2:b3:5f:fe:0d:07:d9:cd:d5:25:ab:17:e7:25:
         e6:2e:75:82:12:e9:a7:84:8c:29:7e:e6:85:83:c2:3c:5a:dd:
         ae:58:3f:61:0e:a5:7b:32:e3:87:0d:51:b6:f6:96:99:13:7b:
         fa:9b:3e:07:91:a3:44:68:60:04:2e:62:dc:2a:d8:89:e9:d5:
         4c:0d:90:16:55:aa:3f:ba:83:41:ad:6d:9b:8c:7e:73:b5:a7:
         f9:cd:3a:c3:3d:6d:47:fd:be:da:27:d6:b5:a2:1f:d3:1b:f3:
         1e:02:1a:24:95:3c:5e:c3:26:9c:c0:9b:c7:66:07:21:22:66:
         43:f9:6b:e4:1a:dd:4a:12:87:b1:80:99:61:e5:78:9a:96:bd:
         d0:6c:87:18:4c:93:2e:ec:4b:0f:19:55:c8:10:55:b2:6b:20:
         0f:00:e0:6b:28:d7:1a:f0:36:e3:71:08:aa:a2:39:61:f9:0f:
         75:7b:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:24:38 2026 by rpki-client