Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File:                     B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier:          bDqMjdNeklzFEkKgoPe9leARembEnJYH2bG9eu9gono=
Subject key identifier:   54:DA:24:11:B0:61:4E:98:15:CE:2E:94:48:72:49:5A:E5:B6:8B:CF
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer:       /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial:       019CE447AF5F01A3E28E5F634B6452D35E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number:          124E
Signing time:             Thu 12 Mar 2026 23:00:28 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:28 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:28 +0000
Files and hashes:         1: 1E19BTK_LA4zeZPYYVdJPpynxg0.roa (hash: h1F2WE3RncgoMjYiAU0Eq6HKlYFOTGvsztN7HNFFiTg=)
                          2: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: vpxs1fwziFJYn7CQp9oLYcgr7cxu4vt9OGGOhKUmhZI=)
                          3: IoQMQIW0XWSI5_b5MMPHNLfrTLs.roa (hash: VAo8djlNyx4sXM904+v7WPNvTL8d7Q3QF4Rk5oit41E=)
                          4: tvlbwaLiNP9W7yNlMC1BPke-BZ4.roa (hash: 9W23SkSaZrPD/wg8FqjOU9wsNzV3GxbjmkNHOzh3QfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:af:5f:01:a3:e2:8e:5f:63:4b:64:52:d3:5e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
        Validity
            Not Before: Mar 12 23:00:28 2026 GMT
            Not After : Mar 13 23:00:28 2026 GMT
        Subject: CN=54da2411b0614e9815ce2e944872495ae5b68bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:d1:60:c8:58:ff:83:ff:68:b2:cc:07:7c:
                    13:c6:5b:5d:e1:84:62:46:0f:3f:34:81:38:7d:52:
                    e3:98:56:66:9e:72:bc:ef:dc:bd:bf:56:77:2e:8e:
                    e2:b2:13:68:2d:80:85:0f:57:65:77:54:3a:61:0e:
                    90:35:b3:39:3f:ac:5f:eb:5f:b7:0d:5b:76:73:f8:
                    5e:bc:17:0d:e5:63:29:d0:27:93:e2:0b:73:2d:7b:
                    92:4c:d5:ec:11:43:05:e5:1e:38:04:fe:ff:e9:8e:
                    8e:4e:dd:6c:c1:63:1d:63:c5:33:86:11:6d:c3:1b:
                    0e:a7:60:3e:09:8a:02:7b:b0:d6:78:75:8f:89:8e:
                    d3:50:d3:b9:28:f4:6a:ad:2f:bf:b9:f2:67:7b:a2:
                    ad:bf:c9:26:0f:d5:0c:72:fb:c8:10:f3:6d:1a:57:
                    7e:99:24:4d:22:11:12:a6:79:38:d2:55:8a:21:c4:
                    90:14:82:90:a5:3c:90:b3:f2:2f:99:dd:66:42:98:
                    66:75:a2:f0:8b:21:f4:bd:ed:34:38:f6:db:07:6e:
                    58:9d:77:ea:40:1d:7d:3e:52:22:76:8c:97:73:38:
                    c4:18:73:74:62:3e:2e:31:b1:0f:0c:c3:16:39:fb:
                    69:1b:d6:20:b4:b0:7c:33:7a:9d:3c:32:ca:a4:05:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DA:24:11:B0:61:4E:98:15:CE:2E:94:48:72:49:5A:E5:B6:8B:CF
            X509v3 Authority Key Identifier:
                keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:6a:fb:c6:65:21:e1:ea:eb:a8:c4:9d:83:d2:08:2c:14:
         7c:d5:f9:b3:e9:63:5e:a3:f9:26:9a:0f:5c:cc:4d:d5:8b:46:
         33:45:53:47:04:45:65:0c:fe:74:01:06:6d:2d:60:94:9a:0f:
         0c:96:4a:92:44:d7:03:ea:e3:78:d8:8a:d5:49:23:34:b5:72:
         02:53:f0:0b:33:64:64:a1:aa:03:ee:98:b7:33:19:7a:43:9a:
         b4:dd:3d:c5:04:69:83:68:2c:6f:6c:a9:ad:69:53:86:24:01:
         97:b0:c3:b3:3b:26:96:64:37:83:64:fc:2f:ae:c5:5e:12:06:
         09:4d:58:ec:37:5a:95:d8:8c:09:29:5e:36:11:50:10:2d:ec:
         5a:bc:fc:d5:37:f2:6f:fa:9e:16:74:84:d9:cc:45:59:eb:bb:
         94:17:3e:67:0b:ea:2b:10:01:07:a3:39:3c:af:19:0e:9f:15:
         f4:cd:71:17:1f:9f:08:2d:35:94:9f:a3:c3:35:a3:77:8f:e5:
         cb:7e:9f:09:2d:ef:e3:ad:e8:a4:ab:3b:bd:88:e2:a3:87:f6:
         ec:47:e6:33:f2:c2:c3:e3:2e:8d:ff:17:c4:db:57:03:75:66:
         52:71:dd:25:8e:6b:7f:6d:32:a1:6f:7f:83:2b:9b:f3:e9:36:
         a6:ea:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:51:10 2026 by rpki-client