Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          1vaRLZPH1oZmeUV/SQO4qVHykaPkbpPUkqCdK+VzUKg=
Subject key identifier:   1F:9B:B2:57:68:8E:A8:9C:70:07:D7:3C:B2:2B:62:24:1D:DD:88:22
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       01A0DD2A008D61699B55DD171BDA25BE040D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 10:01:52 +0000
Manifest this update:     Sat 26 Sep 2026 10:01:52 +0000
Manifest next update:     Sun 27 Sep 2026 10:01:52 +0000
Files and hashes:         1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: aecCrXzzNV5oWKEdHZDNzYVf8uhqZdZTH1NipfMoSLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:2a:00:8d:61:69:9b:55:dd:17:1b:da:25:be:04:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Sep 26 10:01:52 2026 GMT
            Not After : Sep 27 10:01:52 2026 GMT
        Subject: CN=1f9bb257688ea89c7007d73cb22b62241ddd8822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:76:94:9e:91:b2:ed:2e:50:cd:c3:a4:c1:
                    2e:b2:a7:af:3e:0b:96:f1:07:c3:f8:f9:21:6e:64:
                    c7:db:75:87:81:f5:de:18:4c:0e:ab:e7:89:55:82:
                    07:6f:de:c2:28:2e:76:32:e2:0b:ea:55:e3:3c:6f:
                    b6:96:91:9f:84:69:70:2f:1a:44:77:a6:5f:04:4a:
                    23:8f:f6:96:96:8d:fa:17:5e:8f:64:97:13:54:47:
                    14:a7:98:33:32:27:da:0d:84:4c:24:dc:27:da:8e:
                    cc:1c:4a:47:e9:96:bf:7f:95:04:d6:db:24:78:ba:
                    51:dd:61:c1:30:59:a6:97:67:ab:72:43:37:5f:d2:
                    d4:c1:1c:2e:46:84:25:87:aa:c4:f1:84:9b:31:e3:
                    5c:cb:dd:3e:85:1d:c5:e6:20:c0:32:39:71:ac:5b:
                    0e:2a:fa:e7:e5:0d:7f:89:ba:56:c5:61:04:df:cd:
                    5e:8a:78:85:33:1a:24:41:a1:e9:f1:b3:a1:47:a5:
                    bf:cd:e9:a7:62:9f:6a:e5:7f:80:7f:06:2c:39:ea:
                    c7:8e:89:c9:df:cc:5d:42:8a:5a:78:bf:ae:90:b2:
                    3a:ba:68:8e:fa:ed:d1:32:5a:9f:01:53:ef:11:8d:
                    e9:00:90:a1:ef:ba:8c:a9:3b:be:38:2a:75:b8:70:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:B2:57:68:8E:A8:9C:70:07:D7:3C:B2:2B:62:24:1D:DD:88:22
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:1f:77:2e:ef:f1:80:a2:b0:f2:fc:78:39:5b:4d:c4:43:
         4a:df:c8:73:b6:d8:ea:83:54:f3:6d:d1:84:7d:9c:26:31:5b:
         8e:b3:bb:98:ce:5e:89:fe:06:d4:e0:aa:8e:6c:1f:f9:ae:a9:
         b2:8a:09:6a:6a:a7:06:8a:07:4f:de:22:f7:fb:0d:b8:0c:bf:
         ff:40:58:07:f5:48:ae:b7:ed:6c:49:cf:4c:7c:0d:af:9b:10:
         b7:d7:ef:2e:03:6b:f3:36:6f:7f:ff:44:ff:41:4e:63:b9:08:
         eb:2f:d9:c9:67:16:a7:a4:13:d4:d0:2b:2a:fa:05:12:69:b2:
         11:6f:b5:69:e4:40:df:08:ce:22:20:cc:8c:0c:16:39:b4:3d:
         29:a0:c9:10:50:4b:b1:6c:62:66:b8:e1:e3:b6:71:1f:2b:5c:
         c4:69:8a:48:23:c9:27:8d:89:fa:cd:39:8c:05:09:f2:9c:b1:
         78:d6:5e:53:c8:1d:dd:47:ab:08:49:36:1e:d8:0d:cc:81:32:
         1c:6d:fa:10:92:50:7b:f1:38:78:57:85:16:7f:2b:cb:44:fa:
         e2:25:5b:64:8e:7f:2b:06:49:ee:94:6f:e4:91:1b:d3:1d:43:
         84:7a:af:45:16:39:79:78:77:1f:c4:15:dd:cb:e2:5f:60:7f:
         f9:8e:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:18 2026 by rpki-client