Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File:                     B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier:          QJg/tkt3x2a2cdnBHXDUhA/S+1AiUXnI458/YWKfGm8=
Subject key identifier:   70:12:14:F6:F3:71:FD:D5:71:A9:C8:75:B1:AB:2F:74:73:97:34:7D
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer:       /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial:       019F91DA1E72840A988968AD2B039BC8AA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number:          13B1
Signing time:             Fri 24 Jul 2026 02:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:18 +0000
Files and hashes:         1: 1E19BTK_LA4zeZPYYVdJPpynxg0.roa (hash: h1F2WE3RncgoMjYiAU0Eq6HKlYFOTGvsztN7HNFFiTg=)
                          2: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: dqqmXJJOcrHrF8ZS5GPJZYF9ArAEiJXObp2WotWxZ8w=)
                          3: IoQMQIW0XWSI5_b5MMPHNLfrTLs.roa (hash: VAo8djlNyx4sXM904+v7WPNvTL8d7Q3QF4Rk5oit41E=)
                          4: tvlbwaLiNP9W7yNlMC1BPke-BZ4.roa (hash: 9W23SkSaZrPD/wg8FqjOU9wsNzV3GxbjmkNHOzh3QfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:1e:72:84:0a:98:89:68:ad:2b:03:9b:c8:aa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
        Validity
            Not Before: Jul 24 02:00:18 2026 GMT
            Not After : Jul 25 02:00:18 2026 GMT
        Subject: CN=701214f6f371fdd571a9c875b1ab2f747397347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:07:b0:38:ce:d2:10:35:92:39:bd:7a:10:
                    85:ce:2c:a4:43:bb:7e:24:6b:1b:5e:59:b8:e2:66:
                    92:7f:39:ce:7f:89:08:ce:d1:a9:ff:cf:4f:c6:ef:
                    3e:bc:9e:d9:32:06:c7:9e:e6:fd:15:b8:ea:f0:e3:
                    c4:13:9b:dc:b9:d2:8d:14:03:0d:c1:5d:55:04:6c:
                    eb:7a:2a:e6:ac:74:bb:4f:ec:66:9c:56:b2:c6:36:
                    25:95:c6:a0:f1:9b:3f:2a:1b:0c:68:6f:f8:85:c2:
                    89:f4:01:cf:df:40:ae:36:a2:2b:d2:22:13:6e:64:
                    90:36:03:08:e8:e0:72:25:15:d0:52:17:1a:f1:2a:
                    eb:31:0d:76:7c:46:56:64:2c:dd:1e:79:75:b3:5b:
                    17:90:cf:1f:b8:18:e1:4c:a2:22:d4:4a:04:33:21:
                    a9:92:44:8f:e5:99:cd:75:53:83:ee:4c:fc:99:18:
                    20:94:60:ee:da:c6:bc:f4:cf:26:21:37:e1:61:02:
                    2e:6a:eb:47:5f:51:60:45:38:01:87:fa:4a:1a:96:
                    40:32:ed:0a:2c:a2:d9:37:f2:18:3b:43:e8:4a:86:
                    11:12:f9:7c:80:b6:79:01:4d:81:01:1f:06:da:6c:
                    10:01:d9:99:a3:6b:2c:32:50:a1:e8:5c:49:cf:10:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:14:F6:F3:71:FD:D5:71:A9:C8:75:B1:AB:2F:74:73:97:34:7D
            X509v3 Authority Key Identifier:
                keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:43:b1:4e:c7:19:e6:83:49:78:c7:1f:60:7f:41:16:e3:
         67:5d:53:f8:fd:68:28:d5:ca:55:3b:f5:e9:d1:ec:a8:76:1f:
         f0:96:f0:2a:43:4d:25:14:e0:9a:61:c3:ed:41:ef:05:36:71:
         5d:bb:e0:ed:e8:38:7b:4c:be:17:79:f3:87:c3:e6:8e:89:bb:
         0a:a1:cc:fe:f9:43:a5:2d:18:35:c6:9b:bf:90:1c:17:20:4b:
         67:0f:3c:69:ad:6e:68:ed:fa:be:3a:57:ce:82:0c:0b:01:46:
         27:e9:4a:0e:cf:62:e2:f7:80:47:a1:c3:d4:1d:d7:2b:78:46:
         52:59:75:02:11:d4:d6:2f:a9:ae:7f:b2:3e:1d:9f:eb:58:f3:
         e5:29:ab:a5:f2:20:3a:cf:b2:96:7c:e1:eb:a7:1c:5e:24:cd:
         a8:3a:6f:6f:ce:49:4a:18:3b:be:fc:09:cc:c3:cc:a8:bc:95:
         f2:e0:9f:8f:b1:9d:1f:13:9d:7f:db:bc:3a:ea:6f:30:78:a6:
         85:bb:69:9a:30:6e:35:b1:88:ab:5e:4b:08:5f:c8:c4:ae:f6:
         cc:0d:cf:af:14:f8:9c:a2:7e:24:b7:5f:0f:4c:a7:6e:74:9d:
         cc:47:55:f8:26:da:2b:00:7d:ba:c7:e9:bc:af:7f:51:35:c6:
         c1:b3:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:45 2026 by rpki-client