Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          mDdg1WP8/tjq1TohY8qnUqLClRRCa1TqmvEmZeZCVF8=
Subject key identifier:   2C:37:7B:2F:6E:38:60:46:02:AB:E8:86:4C:92:5E:04:67:9F:D9:51
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       019CE4477EB09428181DE677CA79DC92F505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          0BA8
Signing time:             Thu 12 Mar 2026 23:00:16 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:16 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:16 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: 16CCv30c/D0YkDwLZfgovV6KT4D9TQRgex43AB0mYCw=)
                          2: fJL_3yJ-c6mNDdaD5lADLkXjGvQ.roa (hash: MpRA99Kyyzl1J5oPIvWn+XfiQkdUHbddqAT22yvxz8w=)
                          3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:7e:b0:94:28:18:1d:e6:77:ca:79:dc:92:f5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Mar 12 23:00:16 2026 GMT
            Not After : Mar 13 23:00:16 2026 GMT
        Subject: CN=2c377b2f6e38604602abe8864c925e04679fd951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:11:da:ec:2d:b1:a7:e8:2a:30:a9:9f:81:
                    1c:81:50:bb:a6:a5:8c:cf:50:dc:f9:c4:ae:9a:9e:
                    09:50:50:3b:13:b2:f5:5b:55:bf:a1:1d:86:3c:7b:
                    ed:81:81:8b:bd:7c:65:93:2d:6f:a9:78:e4:24:6e:
                    f1:9a:62:b9:e6:16:a8:5d:de:6a:02:52:08:da:ea:
                    1b:3d:0a:1c:bd:d9:b9:cd:fd:b3:f9:b6:5f:cc:b5:
                    1e:22:02:46:0a:d5:e1:74:fa:13:a8:9a:41:10:9c:
                    cc:63:6b:76:d8:2f:3e:31:ee:49:5f:83:5b:b7:2a:
                    00:4d:ba:3c:d3:2b:bb:01:f3:fb:ae:52:24:43:cf:
                    fa:73:03:4a:f6:c7:f0:71:d2:24:37:e0:d3:23:41:
                    f2:a5:e0:3e:af:ce:b3:6d:4f:74:1f:6f:ce:69:be:
                    b6:b9:a2:69:1f:8b:81:87:56:36:69:de:ee:e9:20:
                    6a:2f:86:fe:d2:dd:d2:9f:57:6d:f7:a7:72:ab:ac:
                    ce:0f:12:65:57:3b:09:83:ff:cd:f9:0f:0f:75:2f:
                    26:c5:e2:bb:2e:ff:8c:fa:bc:88:3c:fb:13:70:29:
                    b7:49:d6:fc:cf:82:1a:ca:40:07:50:29:76:7b:b6:
                    79:7d:57:88:0c:ec:54:84:6a:2b:a4:a2:6a:3e:88:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:37:7B:2F:6E:38:60:46:02:AB:E8:86:4C:92:5E:04:67:9F:D9:51
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:28:40:1c:ea:ef:bc:64:2c:0e:7a:a2:5b:e4:d6:e4:36:
         a4:8c:c5:22:c4:75:07:dd:6e:1d:41:14:6c:aa:37:b4:0f:45:
         c5:04:8e:e8:02:bd:76:c8:e0:5d:3a:6e:95:4c:ae:a3:e4:1d:
         cf:02:be:6d:30:78:cd:d8:e0:95:36:c0:e2:18:e8:9f:5c:b8:
         d6:1b:f2:b0:cf:1f:3c:83:29:70:9c:1c:16:56:f6:30:f3:3b:
         ef:b1:dd:74:8b:6c:6a:91:fd:93:25:07:25:b5:b9:3b:31:4b:
         8f:83:e9:b0:80:02:25:27:0b:6a:60:63:00:72:b8:40:f2:7c:
         80:ef:4b:aa:1b:07:95:7b:90:4b:75:3f:fa:c9:ab:c1:62:96:
         b4:81:9e:dd:53:be:6c:b9:73:40:48:92:c3:73:d0:73:b1:5c:
         01:f7:70:9a:10:67:23:ae:79:49:4d:f6:78:2b:b0:67:ba:a1:
         e7:4d:f1:c8:21:ad:3d:e7:52:b6:dc:fd:87:f0:e0:1f:4b:d4:
         b8:3d:0a:39:12:25:97:fc:08:2b:5c:7a:56:6c:64:2a:1e:b7:
         0d:7e:1f:8f:df:c2:5a:61:11:0d:e8:ce:89:0f:6b:f2:cf:2a:
         4c:79:69:42:5c:ab:08:65:f1:d6:f0:20:d6:59:4c:f9:9b:41:
         57:c5:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:48:34 2026 by rpki-client