Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File:                     B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier:          Zw65fqgwS8VW/Xslyx4klbY819PHUGHSLg/AYPlbQNU=
Subject key identifier:   AE:51:B5:06:EC:26:AB:B5:3B:68:2E:60:6C:CA:57:67:7B:92:B3:D6
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer:       /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial:       019F90C7B8035CB4FEB397FE7DE85AC0EABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 21:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:35 +0000
Files and hashes:         1: 1ci4NPebCgeMNcywiGWuM9-74b0.roa (hash: NY5avTfHcZ7Ff+XOjRJKVaDYbSIYWepikXVoA2de9Ps=)
                          2: 3T09Td3RZBmm3zvrQZwwBpGpeB0.roa (hash: pFlvkiWfnXad6Oz+dG5TGKsNIEC3q4DoU1i3YQnxVfo=)
                          3: 6y02T8isddrk35I82aQnZfza2hw.roa (hash: 6Bwcv1vQHggut1Ym2FRTt/C0CVvJQpNdaHy95CBYlLc=)
                          4: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: wrfawc6g1tCqsNNj/7jERIHRs8ORcHMY2HpXWpXO3lM=)
                          5: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (hash: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:b8:03:5c:b4:fe:b3:97:fe:7d:e8:5a:c0:ea:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
        Validity
            Not Before: Jul 23 21:00:35 2026 GMT
            Not After : Jul 24 21:00:35 2026 GMT
        Subject: CN=ae51b506ec26abb53b682e606cca57677b92b3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:02:31:dc:37:0d:c8:07:0c:54:3b:dd:1c:
                    55:06:6f:f5:d5:b5:cc:3b:f8:b6:7d:41:4c:e1:af:
                    2b:5f:55:b2:e7:19:90:82:98:83:1b:f9:6b:75:e0:
                    a5:1b:2f:c4:1d:4b:7b:06:ae:5a:32:16:72:be:c5:
                    90:3d:73:4a:2c:85:3f:e2:e0:2d:31:0b:53:bc:4e:
                    84:4f:53:df:a8:2d:53:45:b5:f4:cf:0f:96:60:f1:
                    a0:42:f6:af:0f:7c:35:b6:1b:e1:70:11:da:ba:fc:
                    dd:7a:92:07:a4:f5:01:49:54:16:1e:5b:47:99:a5:
                    b4:63:64:d2:97:d6:d0:2f:c2:18:a2:4e:d8:c8:7d:
                    fb:5b:a7:8d:b1:c8:22:53:0f:69:26:de:86:44:40:
                    14:80:e3:66:3e:ae:ee:e0:27:17:77:14:3d:a1:09:
                    2e:e8:18:28:28:36:46:a4:74:22:e3:79:02:8e:c0:
                    49:19:4e:24:50:40:24:1c:ba:62:be:a6:3b:65:96:
                    96:74:ab:09:48:a5:0f:f3:a5:a9:12:58:ee:b3:fb:
                    e8:17:1c:64:82:98:e6:ea:7c:5a:15:b6:b8:6c:44:
                    d6:56:6d:3d:3b:bb:e1:8a:df:7c:ac:32:8d:a3:a0:
                    69:eb:b0:77:3d:96:2b:12:c6:52:3f:ac:d2:d6:86:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:51:B5:06:EC:26:AB:B5:3B:68:2E:60:6C:CA:57:67:7B:92:B3:D6
            X509v3 Authority Key Identifier:
                keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:35:7c:f7:3f:a0:7f:59:96:64:87:52:60:cc:ff:c3:c2:
         8b:02:dd:02:85:dd:50:8e:43:fd:d9:3c:8e:ad:b7:8e:75:58:
         c6:ac:ee:48:03:4f:a1:88:5e:94:e7:1f:7f:0f:a4:c9:a0:0c:
         95:ff:03:d1:fb:ef:6b:50:40:5b:a8:3f:48:a9:45:39:2c:0e:
         16:16:09:50:41:79:1e:10:c2:6b:e9:23:05:99:0f:8d:87:f9:
         fe:b9:d9:9d:bd:f6:cc:b0:6b:56:07:0f:f6:dd:e5:e5:e6:08:
         d4:5d:9d:82:c3:ea:4a:61:31:27:e7:46:1e:12:cb:5e:b2:d6:
         e6:57:bd:71:d1:5d:56:8b:8e:40:2b:37:87:93:0b:2b:d5:63:
         e5:41:5f:8b:81:74:cf:2a:92:5d:02:ea:35:bf:69:9a:4b:60:
         69:63:44:52:10:61:61:a7:4a:c5:9f:2e:8d:15:35:17:b4:ed:
         e5:7f:21:c3:d1:45:51:63:72:0b:2d:8f:84:4a:91:49:05:21:
         03:43:f5:9b:e3:2e:06:f2:f4:c0:7a:29:77:8e:43:7f:7e:2b:
         84:a2:4d:8a:4b:2d:81:54:f7:38:de:61:d0:b8:29:72:d0:82:
         25:19:60:5e:62:f0:40:cc:d6:b7:4e:df:e6:1f:4d:af:e2:2a:
         99:27:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:23 2026 by rpki-client