Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          Py8ZGoyfDhWT5PNIYC7ynQgi/dv3J5CinFZJTfFHabA=
Subject key identifier:   F1:A7:F9:C9:48:29:FE:61:93:36:D4:DF:62:F8:42:26:33:86:50:CF
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       019D9B8814F036D0F47FEC6A6FC7F3046693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          13EF
Signing time:             Fri 17 Apr 2026 13:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:19 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: lJ6PhbzGeWfpFP4S+sch9qyW9FqK1VYqo6oU1kgEyWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:88:14:f0:36:d0:f4:7f:ec:6a:6f:c7:f3:04:66:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Apr 17 13:01:19 2026 GMT
            Not After : Apr 18 13:01:19 2026 GMT
        Subject: CN=f1a7f9c94829fe619336d4df62f84226338650cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:61:a2:ec:87:09:5f:df:2b:e7:85:ab:d4:
                    07:98:53:bd:40:af:0d:77:95:8f:1b:71:23:41:f2:
                    63:8f:f5:ef:1d:3d:91:50:00:ec:5a:04:f6:ec:ad:
                    4a:9c:e1:51:40:22:7d:5b:a6:22:e4:4b:b7:26:05:
                    ce:d7:f8:7e:c4:de:da:e3:eb:85:9e:f7:0d:e8:7c:
                    3d:55:ec:a4:11:6e:e7:36:c1:aa:84:1e:2b:14:7b:
                    b9:01:ba:71:45:c5:bf:51:b0:70:9c:3e:70:5e:68:
                    25:14:90:ec:46:94:eb:d3:35:27:2a:d8:49:d8:18:
                    7a:e5:4a:b8:63:2a:72:ea:18:07:32:12:22:70:37:
                    63:76:80:46:27:23:b6:31:77:78:95:b5:7e:8b:92:
                    73:df:5e:3a:d8:99:5c:1d:0d:b9:b3:88:18:d4:6f:
                    06:eb:71:24:39:48:fd:f8:f9:f0:57:1e:ec:f8:51:
                    b6:be:c6:7e:0f:49:bd:52:7a:27:cf:75:28:24:af:
                    75:af:6a:88:42:37:b0:cd:48:62:ae:18:a8:c8:87:
                    2b:67:bc:9c:d9:47:d1:65:fe:f3:19:f4:43:07:13:
                    bf:5c:10:10:6c:80:42:52:0c:c2:a2:b1:d4:d8:11:
                    03:0d:65:3a:20:81:01:ac:7d:0c:83:ed:04:03:d8:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:F9:C9:48:29:FE:61:93:36:D4:DF:62:F8:42:26:33:86:50:CF
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:97:fa:cf:65:51:be:9c:45:75:35:29:cd:27:28:98:f8:
         06:fd:69:55:9b:c6:94:61:7f:05:d2:57:eb:a6:59:a5:f6:eb:
         f0:d1:e7:23:e3:e4:b7:b2:d8:61:c2:2a:43:c2:75:fe:a6:09:
         43:a8:f8:ae:b8:d2:db:25:51:6a:f1:71:dc:55:c6:22:11:29:
         31:02:51:76:f6:de:39:1a:be:60:e0:f6:ff:dd:44:7c:74:42:
         24:74:50:a9:b3:f2:01:03:0d:27:d3:c2:ec:af:9e:27:ec:6d:
         20:46:ee:fc:89:86:f2:d6:7d:ca:9f:dd:bc:c1:a6:80:ee:bc:
         24:cb:07:99:d5:6e:01:27:ac:95:f1:7d:49:9e:5e:24:1d:72:
         ac:26:8c:bf:4c:7c:04:94:c5:12:ca:a6:69:a2:79:46:6d:c2:
         2a:3b:d4:67:e0:4e:49:50:ce:78:9a:92:8b:8c:67:ab:65:d8:
         22:3a:a5:9d:29:13:b3:b1:51:53:e4:c3:de:9e:7a:32:ed:bf:
         fe:0e:a6:cd:44:f7:1c:7c:16:d0:f3:05:9d:58:10:4f:27:5a:
         7b:b9:24:d3:81:50:b7:59:42:65:7c:ca:b4:d1:de:f2:f9:ba:
         22:5b:38:a7:26:8d:eb:08:d8:ba:0e:35:b2:c6:e8:a4:67:3d:
         95:7f:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:40 2026 by rpki-client