Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          YHITwtE1lQgll2D0SL9vSufdrPPHfGP4tMrltJKycOk=
Subject key identifier:   B6:04:8A:C5:B9:74:18:CA:C0:A5:CE:11:1A:F1:F8:A9:26:51:85:54
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019FF9ED2FF4819EA99433F6E11C630CBEB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          1628
Signing time:             Thu 13 Aug 2026 07:01:38 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:38 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:38 +0000
Files and hashes:         1: 1QPv7Hg00XDN5cnZjgn3hLUFgBM.roa (hash: xHzTpfyqfCy0xxbqcTY1JJR6jCXEqmCkWPADjNHWeuA=)
                          2: 4o4L_7_xd96NsgGKsiURLa7lMNQ.roa (hash: HafbA3v0Vsbqb/QGRzwxXfYkVjmE1FlzpPoVskuxJxs=)
                          3: BHN3XmXxVLWD4rgsEFmNFNccO28.roa (hash: efPXAm/VtQEruBQ7R8XH59jWhi4KeQOuvEaYHKdoWTU=)
                          4: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: BxwAQN9/wPYz2EnonQlc67DkwZ9DGHiB6pLEZM8y+5E=)
                          5: O4lfIFI5neBXzLMxaV02jkeMzgc.roa (hash: ko9jy9JwVheYnkpwrtUCdOV69SgxGZD9WIsq1tTyulI=)
                          6: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
                          7: gw4BPb4uAJDOzJ_Kafu7dXfPcw4.roa (hash: MfusxviaX8fqxiMBAVkmOufZsFOf9Mn6gCko9leOsUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ed:2f:f4:81:9e:a9:94:33:f6:e1:1c:63:0c:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Aug 13 07:01:38 2026 GMT
            Not After : Aug 14 07:01:38 2026 GMT
        Subject: CN=b6048ac5b97418cac0a5ce111af1f8a926518554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:bc:2c:95:75:e2:a0:eb:7b:07:2a:c1:88:
                    cb:51:78:89:a0:e0:ce:72:6e:07:5f:ea:65:ab:95:
                    ff:93:e5:b1:65:91:2e:27:b9:7c:8e:a0:4a:05:02:
                    2f:88:40:97:80:e3:fb:76:88:77:c1:1f:b7:48:9c:
                    fa:e1:b2:4e:5f:d1:ec:fc:72:c9:41:59:14:b1:64:
                    2a:fa:25:59:87:a9:be:05:d0:c4:2c:af:d5:56:37:
                    4d:4e:4c:18:a6:3b:85:8a:ae:33:3a:8d:74:66:01:
                    48:96:c5:3b:a3:0b:68:c8:73:0d:22:70:34:80:24:
                    2f:5f:48:32:1e:e7:b7:38:8e:3c:94:00:a3:79:be:
                    8a:a1:2a:10:64:f5:cc:24:85:be:a5:53:c1:ef:1c:
                    93:44:7d:0d:0e:b0:9d:5d:87:ff:7b:66:5f:4e:09:
                    ed:70:64:23:0b:84:a8:c6:16:fe:24:49:61:fe:c5:
                    01:68:e6:a9:c4:e7:b6:90:63:a6:de:f0:32:8f:74:
                    c9:db:9c:94:82:ec:54:01:e9:b6:1d:0b:92:68:0a:
                    df:78:3e:5d:f2:23:aa:6c:1b:d9:8b:67:fe:d4:50:
                    57:89:4b:02:f9:d1:a9:3b:d9:68:b5:77:37:87:1a:
                    3c:d1:33:fd:4c:3d:73:b3:1f:3d:6b:cd:e9:b4:cf:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:8A:C5:B9:74:18:CA:C0:A5:CE:11:1A:F1:F8:A9:26:51:85:54
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:03:ad:18:0a:bc:e3:e9:26:1b:a8:50:04:7e:d4:be:b6:
         2f:8b:8e:30:5e:13:56:70:76:e2:b2:81:7a:d8:a7:32:18:ac:
         b7:cd:6b:0f:25:b9:b8:e5:80:b4:5a:b7:bd:50:10:a6:b2:08:
         4e:42:41:b3:e2:02:bc:33:61:f0:7c:ba:b2:eb:3d:76:62:23:
         fd:cd:f3:11:d7:0a:4a:c0:f6:89:9a:03:49:d9:48:06:00:5b:
         db:b8:55:ce:c2:8a:68:a1:49:0f:07:97:c6:47:48:73:97:2c:
         32:82:ee:cc:71:c8:c8:77:38:6d:7e:aa:42:af:4f:19:cb:8f:
         b7:38:ab:94:39:dd:66:66:8d:ee:1f:47:0b:04:17:8d:51:d0:
         cc:8a:bd:c3:d9:ab:8e:14:62:b7:de:f9:32:7b:4e:fe:93:18:
         e8:88:c8:b8:42:3f:8c:34:7e:77:1d:54:ba:26:2d:4d:2b:c7:
         35:aa:ba:d8:83:fd:8f:c7:db:db:d6:ed:7b:9a:2d:6b:fd:83:
         f3:e0:7e:03:de:18:01:0d:44:2b:62:b9:d3:11:7f:7d:22:4c:
         98:ad:85:35:f5:36:98:78:52:98:1d:63:c6:69:de:57:e9:f0:
         c0:b1:95:a0:28:1b:d1:f4:34:d3:54:8a:3a:a7:7c:42:42:dc:
         4b:d9:a4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:23:25 2026 by rpki-client