Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          bYWGIeZhJXpNJuUr31yqI8CaDCHKsTyWgOApl18+0ZM=
Subject key identifier:   D7:DC:72:24:19:12:C3:EB:7B:0C:25:CA:E4:61:AA:8A:FA:92:38:03
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       01A17C97DA36804B42456E18F4364FDCCB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          0E0A
Signing time:             Tue 27 Oct 2026 09:01:28 +0000
Manifest this update:     Tue 27 Oct 2026 09:01:28 +0000
Manifest next update:     Wed 28 Oct 2026 09:01:28 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: PJFvvVTHV490QhEoiZHwQw2Ea2uq1Qfw0lDsT6eV2Mg=)
                          2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
                          3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:da:36:80:4b:42:45:6e:18:f4:36:4f:dc:cb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Oct 27 09:01:28 2026 GMT
            Not After : Oct 28 09:01:28 2026 GMT
        Subject: CN=d7dc72241912c3eb7b0c25cae461aa8afa923803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:96:d3:f1:4c:75:99:1b:9d:1a:34:eb:17:
                    10:ab:bf:08:17:50:df:c8:07:86:f5:7b:1e:6d:14:
                    a5:c7:95:53:b0:ee:28:eb:a1:76:53:c8:2a:54:0a:
                    7a:b8:62:11:eb:07:26:f3:7c:c3:b0:80:52:80:d3:
                    a0:ce:16:ca:ce:6c:4f:80:47:1d:c9:e7:97:b6:67:
                    29:f4:06:10:3c:06:c8:c1:ab:cb:49:10:a0:a6:31:
                    be:d9:e4:28:a0:29:20:63:86:37:21:a4:e3:c7:76:
                    d2:a6:64:2a:79:20:f1:c6:8e:d3:a6:dd:50:8b:54:
                    3c:60:d0:4b:a2:ea:7b:c5:69:81:93:40:98:ce:4a:
                    39:79:e2:03:a0:f6:db:cf:d8:a0:65:23:59:9c:05:
                    bb:74:92:c2:11:6a:66:1d:73:62:1d:98:79:11:ed:
                    3c:8a:ea:57:3e:f8:10:f2:31:e0:3e:08:a2:45:9e:
                    23:ba:a1:6f:61:ed:0b:3e:48:b1:1b:30:0a:18:aa:
                    3e:14:4b:ea:ba:97:9a:59:cf:10:30:da:00:bd:59:
                    69:0e:32:06:ab:9e:3a:90:40:4f:15:a0:b8:70:6a:
                    56:e2:44:06:5e:2a:f8:9d:7f:63:11:cd:8e:02:0a:
                    b6:cc:3c:fa:5b:30:bc:90:50:2f:95:07:ef:02:27:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:72:24:19:12:C3:EB:7B:0C:25:CA:E4:61:AA:8A:FA:92:38:03
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:29:f2:8b:42:77:47:8d:39:fe:d1:6e:75:db:06:b6:ac:69:
         fb:f6:56:93:39:35:29:61:ec:aa:31:42:48:0c:72:7f:75:33:
         ed:8b:46:72:55:7c:6b:9a:c4:77:80:44:ae:c7:e0:bc:d5:d3:
         07:f9:23:4d:aa:ae:4b:7d:5b:6a:36:fa:81:b8:ae:e3:47:be:
         92:93:1e:38:6d:c9:4b:5b:f7:14:ab:b8:4f:43:2b:f7:01:15:
         df:cb:3a:f2:4b:17:0f:14:da:11:f9:c0:2e:88:c2:ff:8b:75:
         8b:53:4c:3c:74:6a:1d:d8:5f:eb:27:8e:20:eb:d7:3f:90:ea:
         f4:09:a8:ec:88:ae:35:43:54:0c:c8:af:0e:55:80:46:0a:c2:
         4d:34:54:f0:c4:d3:67:44:83:44:d1:63:5e:f6:07:68:b9:5d:
         35:0b:11:8a:32:00:ef:bd:46:18:d9:25:dd:4d:76:a6:e9:a7:
         f5:78:b0:98:dd:fe:a2:80:cc:f3:00:f8:c9:66:2f:2c:32:d4:
         5e:37:29:0f:e5:0d:03:dd:a7:cc:d7:3d:da:ab:35:49:f0:39:
         7b:42:c5:ed:af:d2:86:17:d2:ac:74:f8:48:78:d0:cc:6d:59:
         5b:d7:35:0b:50:32:0d:ea:ae:04:13:11:da:be:24:0e:7d:48:
         e3:ea:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:16:02 2026 by rpki-client