Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          8Xls8SkUmXW9r0zLpFsDqySAmDhXtjy5NrJHZAjmpwM=
Subject key identifier:   24:B1:B4:FC:D6:A3:5B:44:59:9E:02:F2:E2:C7:6E:75:F0:AE:EE:27
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       01A0CE5A2ACAD72D08D39FEF2717EE3538F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          1597
Signing time:             Wed 23 Sep 2026 13:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:10 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:10 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: nwCk41VwxaStVCbP+biGGup2RhEQwgt6Kuw96mUjnrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:2a:ca:d7:2d:08:d3:9f:ef:27:17:ee:35:38:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Sep 23 13:00:10 2026 GMT
            Not After : Sep 24 13:00:10 2026 GMT
        Subject: CN=24b1b4fcd6a35b44599e02f2e2c76e75f0aeee27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:ae:ce:57:03:e8:c4:b0:54:9e:ff:77:5a:
                    a7:c1:32:1b:a9:a9:0a:30:bc:46:ee:e1:cf:98:55:
                    d8:f3:0f:fd:c0:68:ab:28:9d:01:72:60:84:7c:d6:
                    1b:58:54:de:40:82:6a:15:bc:df:02:85:20:cc:9c:
                    1c:01:43:6f:45:70:55:3a:f9:6a:30:98:3b:91:0c:
                    93:6c:d4:81:b0:03:8f:54:7f:46:c2:53:5f:cb:70:
                    8c:db:98:c0:6d:5a:56:9e:b7:b5:69:56:46:d6:39:
                    e0:47:74:83:71:fa:da:f6:f6:f5:d3:d3:31:a3:cd:
                    3c:c9:00:5c:c0:25:c9:64:aa:e5:dd:15:9f:ea:bf:
                    5c:c8:49:67:4b:69:a4:c6:22:30:59:9a:50:ee:3e:
                    fe:47:05:9f:8b:9a:85:2f:37:c0:41:9b:0c:93:5b:
                    4d:f9:c4:0a:9b:2b:7f:d6:15:d3:16:b5:9c:ac:60:
                    a9:4c:7c:a9:1f:c8:e7:cc:49:3d:37:7f:9d:40:76:
                    40:ee:93:0e:26:06:65:c1:f1:b9:0d:00:ac:40:cf:
                    b8:b8:ba:68:bd:50:39:12:13:03:bb:ef:13:69:17:
                    a4:aa:71:bd:92:b3:2b:76:e1:ad:00:17:f4:68:6c:
                    5a:7d:b6:6e:e3:f3:1c:f5:96:2f:bc:a2:42:a8:f0:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:B4:FC:D6:A3:5B:44:59:9E:02:F2:E2:C7:6E:75:F0:AE:EE:27
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ec:cd:2f:4e:f4:eb:94:1a:cc:80:f1:fe:08:cd:5f:9b:76:
         f0:69:c7:34:07:4b:e1:70:e1:46:0b:67:b4:0c:bf:84:86:68:
         ff:f6:cf:00:58:db:ab:1f:69:59:d2:1e:a4:60:f0:ca:1c:a1:
         62:d9:e3:be:95:0f:05:f2:05:2e:95:cf:99:01:3a:d4:be:91:
         ae:33:08:2e:89:ae:71:ac:d5:19:13:a2:91:4b:43:af:cb:78:
         1f:48:c2:16:7e:00:4a:01:eb:d8:e0:c7:ae:36:77:f3:4d:14:
         38:38:6c:b4:17:d4:01:d6:f6:35:7e:e9:bd:4f:4d:0b:61:8f:
         18:33:87:d3:fd:fa:d3:97:be:39:e2:58:16:ed:d0:4e:c8:b4:
         fd:ca:2e:46:2e:86:f9:5f:3d:6b:cd:ce:8c:28:75:c0:dc:b1:
         2f:f4:e9:ee:32:c3:64:50:a3:24:f3:c6:95:e9:ba:c4:e0:1f:
         c5:f1:9e:de:56:39:93:17:f2:bb:79:d3:f5:13:e6:4d:e2:bd:
         ac:47:25:b2:2b:01:e9:0c:b1:60:fa:4f:bb:79:ed:24:07:00:
         26:34:aa:ec:e4:22:6f:a5:44:88:77:78:0e:4c:64:9f:87:09:
         9e:7c:82:f4:29:d3:5d:0c:fd:4f:0e:9d:0f:bc:45:e2:53:4d:
         f2:f5:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:42:32 2026 by rpki-client