Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          rrVMhshxB0Pj9jDnW+oP74PAp1LuEf7AZZT2weMln0c=
Subject key identifier:   40:FF:D8:4D:C7:D3:E5:9D:F7:1B:17:13:9F:40:B0:F3:2A:1A:17:07
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       019FAC090161EE70A1149F9EC1D806AFBB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 04:01:39 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:39 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:39 +0000
Files and hashes:         1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: I9fUtwmG3rFMXZtywymxNlusxG8wwxU2nVCe/8V1y2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:09:01:61:ee:70:a1:14:9f:9e:c1:d8:06:af:bb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Jul 29 04:01:39 2026 GMT
            Not After : Jul 30 04:01:39 2026 GMT
        Subject: CN=40ffd84dc7d3e59df71b17139f40b0f32a1a1707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:f9:b5:e6:27:e6:61:a8:40:56:30:d3:f9:
                    ae:f6:d6:4d:a3:1a:8f:eb:7f:6f:22:cb:6a:b7:3b:
                    f6:d2:f4:14:6e:a5:68:e6:4a:df:1d:ac:9a:02:5c:
                    37:63:21:58:7e:0d:87:92:d1:93:06:cd:93:77:75:
                    a8:34:d2:99:9d:41:be:14:d3:29:ec:14:bd:3f:09:
                    f3:b4:3e:89:a4:b8:88:62:09:ce:09:37:35:95:62:
                    90:5c:9c:22:9a:33:9f:ad:8e:37:54:1b:4b:98:52:
                    ee:5f:19:9e:fe:a4:3d:d5:50:77:0b:26:6f:85:9c:
                    ff:ac:f7:eb:73:ac:f2:31:b5:2e:f2:47:28:13:e5:
                    91:60:71:c0:da:67:b6:9c:55:2b:2b:dd:7b:d7:71:
                    07:56:f6:04:a9:b6:de:8a:8b:42:74:1a:6e:31:f5:
                    95:db:9b:80:32:2c:29:a9:50:39:29:51:36:05:68:
                    9f:42:fe:6e:92:17:59:66:44:c1:a0:19:fc:3a:99:
                    38:b0:84:1b:cc:38:0b:1a:c2:ef:12:bc:82:53:30:
                    d8:c1:db:ea:10:4c:17:85:ca:ee:8b:eb:ec:fa:a9:
                    29:f1:4a:88:e1:62:d7:ee:fc:07:32:8c:12:94:fc:
                    f8:79:32:37:c5:8f:e6:7e:27:b2:fc:66:e7:a9:22:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:D8:4D:C7:D3:E5:9D:F7:1B:17:13:9F:40:B0:F3:2A:1A:17:07
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:54:d2:a6:20:9c:96:5f:79:4a:0f:05:3b:af:e8:9e:a4:
         9a:f6:d4:cb:9d:65:b6:8f:17:2a:57:8b:48:a8:53:fe:e6:f7:
         6f:37:00:50:7d:62:4e:aa:7f:d7:e5:ed:b1:84:b9:cc:52:31:
         ec:d1:10:41:67:24:de:06:cb:d1:6a:50:3f:91:63:9e:1a:8f:
         c9:ff:a9:33:ff:8a:ff:e0:31:77:0d:1a:ff:eb:21:b4:02:07:
         43:bb:f2:53:10:57:80:d8:54:df:5d:42:a1:75:64:84:28:b8:
         48:66:30:0f:92:5e:eb:64:86:a4:83:ab:d1:90:51:f1:f4:22:
         a0:06:79:f0:03:5a:31:bb:f8:66:66:52:60:d5:62:3c:90:5b:
         77:b5:2a:59:f5:66:68:e8:67:32:a7:3f:2e:79:eb:14:aa:11:
         55:1c:77:fe:4d:fa:88:74:31:9b:2c:3d:7b:46:a6:aa:ae:26:
         49:98:e7:a0:85:0a:4a:0f:29:7c:0b:bb:ef:4c:32:3f:5e:01:
         37:a8:12:d1:69:ff:42:69:f9:d8:e3:e7:92:af:fb:b5:12:07:
         a3:78:32:8e:63:44:92:96:f4:4d:2b:03:7e:e9:2b:d2:d4:67:
         75:d0:17:d5:d2:22:de:58:3f:e8:4a:ca:53:df:07:b5:eb:e2:
         10:85:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:04 2026 by rpki-client