Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File:                     BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier:          BPLwgLN2N8MT+zSEswisuQQxRmG12kb99oeY7zH1lgY=
Subject key identifier:   1E:7C:26:57:07:9F:D3:19:DD:1A:74:27:85:B8:14:4B:9C:FD:12:3C
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer:       /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial:       019EC06DA1DF591FE3B6F994DBDBDFCD1890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 10:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:10 +0000
Files and hashes:         1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: sU6JdJXJ9txOJk89GHFAoLrPC/Nnq2MJWucojEWM6F0=)
                          2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:a1:df:59:1f:e3:b6:f9:94:db:db:df:cd:18:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
        Validity
            Not Before: Jun 13 10:01:10 2026 GMT
            Not After : Jun 14 10:01:10 2026 GMT
        Subject: CN=1e7c2657079fd319dd1a742785b8144b9cfd123c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:ee:c1:ca:0c:4c:bd:24:92:aa:a6:ee:7b:
                    b9:e7:b3:6a:b5:81:40:03:07:91:81:b2:66:ee:6c:
                    48:c4:22:4d:23:8e:6f:ea:59:9a:a0:35:f6:1d:b3:
                    ad:c5:a8:68:68:da:61:60:a1:a9:35:87:a8:a4:a7:
                    fa:45:21:83:b9:50:b6:d0:23:8d:43:18:51:fc:06:
                    ef:47:18:b4:9d:49:7d:39:60:55:2c:20:d5:0c:f9:
                    17:85:9f:82:8c:37:fd:98:f4:2f:71:99:35:ca:88:
                    c2:c4:33:83:1a:2f:ff:d8:fa:ed:36:32:c3:06:c2:
                    e3:78:31:c6:42:25:1a:04:c3:c1:f8:6c:f4:8a:ac:
                    f4:13:ea:cc:e4:e7:58:9d:f4:52:6d:d7:b0:f7:87:
                    df:67:cc:9b:8a:0c:68:e5:9d:35:64:c0:0c:b0:40:
                    fd:92:6f:1b:c3:e0:3e:69:b4:47:87:4d:3f:e0:49:
                    bd:fa:7b:e9:a1:4c:72:7c:ce:48:f6:d3:21:96:34:
                    de:a2:2b:75:f9:9f:53:62:4c:08:94:eb:9c:d9:a6:
                    65:1d:45:85:05:87:d4:09:a4:90:56:8e:f7:29:44:
                    72:ea:ce:c4:c8:88:fb:64:c9:a7:48:1d:bc:f2:3a:
                    4c:f2:eb:72:b7:01:4f:44:4f:2b:20:b1:33:6c:f7:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7C:26:57:07:9F:D3:19:DD:1A:74:27:85:B8:14:4B:9C:FD:12:3C
            X509v3 Authority Key Identifier:
                keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:d6:0d:ea:a5:29:da:f2:f2:f7:ce:88:37:d8:a4:0a:fa:
         4d:58:3a:9b:ad:ad:94:4e:60:a8:8e:a0:45:89:d4:f5:0a:57:
         4b:40:52:d7:24:24:89:f7:cd:62:f3:1c:70:e8:ba:e3:7d:c3:
         b7:81:ff:e2:41:f6:c6:86:d0:06:f7:c9:8e:92:57:c9:6c:e4:
         6d:91:02:d8:6f:a6:04:ce:7e:d6:f1:c2:03:bf:86:25:ce:fa:
         71:c6:01:87:63:7f:94:19:41:95:88:52:44:0d:ce:e8:a5:1c:
         8d:d3:9b:4d:10:f1:be:5b:24:de:85:0d:a5:af:3e:63:8e:ee:
         0a:a4:d7:c2:67:7d:a0:2a:a0:77:81:b9:b9:69:31:f1:27:11:
         59:cf:7e:66:d0:3b:06:87:33:99:03:1c:63:8a:d5:0f:37:7d:
         07:22:8f:19:62:fe:98:1f:10:6e:47:69:11:ae:0b:ff:50:98:
         66:e3:35:9e:fa:d9:05:61:97:b3:12:b6:be:ec:a8:52:0c:68:
         10:1e:1c:19:05:69:79:5b:94:de:63:a1:b2:f8:4e:b2:ef:75:
         23:50:5b:ef:df:82:ec:40:63:51:e5:95:df:2a:1f:87:fa:37:
         6a:e5:8f:66:c9:e1:22:7e:ef:9a:58:9c:2b:7d:76:50:b9:0e:
         ae:90:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:29:36 2026 by rpki-client