Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          SzroAzyOeRWreeUYVqmUyI8jNdCfXLk9tYMzdHmkTdc=
Subject key identifier:   CF:7E:E7:14:08:F8:B9:59:21:FA:CA:D3:0B:85:5D:CC:3C:23:1E:DA
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019E1D90346495005FB82E01D8735862073F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          152D
Signing time:             Tue 12 May 2026 19:00:50 +0000
Manifest this update:     Tue 12 May 2026 19:00:50 +0000
Manifest next update:     Wed 13 May 2026 19:00:50 +0000
Files and hashes:         1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: n2d9fhigviwQEYWNDlJowQgcjwG5mZGyIE85XpqFew4=)
                          2: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
                          3: ehM6TAJv9Xbu-lvdPOyBuDK6Eyg.roa (hash: CP8g2bPiECUDsq5QB1ti9WR4HH2XCU4VO+4gIqWnJMk=)
                          4: gw4BPb4uAJDOzJ_Kafu7dXfPcw4.roa (hash: MfusxviaX8fqxiMBAVkmOufZsFOf9Mn6gCko9leOsUY=)
                          5: y_GcCsfSfaQjGz_SPaSfHi-dJc8.roa (hash: AgL+OrWbRwy8UGkbrgT4UM/oCwI3h3pWQBfXUwydd1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:34:64:95:00:5f:b8:2e:01:d8:73:58:62:07:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: May 12 19:00:50 2026 GMT
            Not After : May 13 19:00:50 2026 GMT
        Subject: CN=cf7ee71408f8b95921facad30b855dcc3c231eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:d7:9c:a3:1d:86:e6:38:43:13:cf:28:5e:
                    e1:b7:6e:c3:e7:74:6a:cd:9f:c5:30:6d:85:d8:d1:
                    f2:3d:13:98:7c:a3:a7:5c:1d:3c:26:6d:51:ae:7b:
                    f2:04:bd:ae:e6:59:b5:9c:5f:0f:59:74:12:3d:f1:
                    12:2a:82:86:d8:73:86:f8:04:3b:a3:8d:db:d2:dd:
                    c0:a0:06:c2:d1:c0:ca:04:7d:f7:18:2a:af:41:80:
                    f1:1e:f6:c2:52:5c:8c:e7:5d:46:4a:ec:97:09:26:
                    6e:7b:c5:d6:49:0e:c6:37:18:27:a9:c1:3f:27:41:
                    e1:af:3f:b8:06:ae:2d:68:4b:23:03:ff:2c:09:5a:
                    b7:4b:e4:40:e4:c6:29:6b:a0:2d:b3:3e:53:41:70:
                    ee:ef:39:7e:a2:ac:0d:26:5f:a8:25:e5:e8:08:aa:
                    be:a9:c0:c2:43:5f:e7:34:2f:53:90:50:ac:d6:d5:
                    f0:fc:93:61:21:f2:08:98:c1:a3:e9:8a:78:58:eb:
                    11:2c:b8:ff:17:53:5a:fa:db:7d:d3:d3:8f:49:bf:
                    a6:86:7d:f8:54:ad:11:f3:b8:42:10:06:54:f1:bf:
                    04:63:01:a5:84:ac:8a:fe:00:fc:bc:cc:a4:1e:c4:
                    0a:cd:3d:f8:4d:c9:12:74:92:f1:a2:c2:cb:82:80:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7E:E7:14:08:F8:B9:59:21:FA:CA:D3:0B:85:5D:CC:3C:23:1E:DA
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ee:4e:fc:28:1c:4a:60:45:5a:aa:60:47:b6:b1:e4:7f:b7:
         96:5c:12:4f:64:72:35:85:ae:00:ed:6a:ea:97:7a:c2:f4:ee:
         2d:1f:fd:29:2f:26:b7:dc:9f:e3:d6:e0:a5:3e:7e:5b:12:6d:
         7d:64:6e:39:e3:2a:d9:45:3f:75:b1:ff:23:ed:a3:da:22:85:
         dd:da:ba:ba:48:2d:b6:04:e7:1e:63:cf:5a:bc:85:ab:f9:29:
         b7:23:45:75:7b:44:c7:af:af:17:d1:1d:70:79:30:33:b6:2d:
         1f:5a:75:55:81:1d:fe:72:4a:76:64:da:8a:b8:41:69:b7:cd:
         2b:1e:63:e4:07:e4:1f:94:99:38:57:7e:1e:3e:95:38:f6:cd:
         31:24:03:a4:87:a1:79:d3:08:18:a7:a3:a7:08:7b:92:bd:c3:
         a6:a7:24:4d:00:60:e1:33:e0:f1:b8:98:31:3e:ec:0e:87:50:
         5e:c1:27:75:09:7d:9f:8d:d1:84:6d:9b:60:c2:66:e6:19:f6:
         9e:d3:e0:9a:e3:2d:73:03:02:4b:c3:a0:e5:b8:4f:e3:a5:62:
         38:e6:50:07:e2:14:ed:c9:3a:de:45:40:84:f7:19:82:31:4e:
         41:2e:8d:2d:b7:7b:50:c6:11:76:5a:b4:cc:22:3b:d5:3e:d5:
         52:db:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:24 2026 by rpki-client