Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File:                     BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier:          JKA98U0LquobXD0LdFB/Yr/r/+f1DIPqPLmruWLJFUU=
Subject key identifier:   93:2B:63:6A:31:29:A1:E5:21:FE:E1:DB:22:43:7B:BB:1F:D1:36:2F
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer:       /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial:       019CAC4721002CDFDB84A983E86B396DA619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number:          0A06
Signing time:             Mon 02 Mar 2026 02:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:08 +0000
Files and hashes:         1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: fhsyK+tyD9+nkMVbNpghhCT12bjJuOPPLJRmXpoqN/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:21:00:2c:df:db:84:a9:83:e8:6b:39:6d:a6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
        Validity
            Not Before: Mar  2 02:01:08 2026 GMT
            Not After : Mar  3 02:01:08 2026 GMT
        Subject: CN=932b636a3129a1e521fee1db22437bbb1fd1362f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:31:aa:ec:db:a7:d4:30:ba:19:f6:88:dd:
                    e4:0d:30:2a:0b:81:23:bb:d4:72:96:5c:1f:f5:83:
                    4c:64:22:c8:99:d4:b9:44:bc:40:f2:8b:b7:44:f9:
                    de:17:9d:76:b6:51:75:5f:2f:10:81:0c:b9:17:de:
                    3b:24:d2:8e:a7:76:5b:c0:20:3e:11:02:72:e7:31:
                    6d:9d:9c:45:a9:17:2c:bc:e3:e6:f4:8a:21:03:ea:
                    5d:05:21:71:25:9b:f9:bf:dd:1b:98:46:8d:83:e8:
                    66:4f:cb:e1:71:89:0b:fc:b6:00:b5:41:bc:91:54:
                    27:ed:8b:54:28:a8:14:42:25:60:7f:32:36:21:88:
                    57:16:e8:d8:26:ab:37:a8:69:5d:c1:35:b3:92:5a:
                    15:e3:22:c4:b8:e1:d5:05:c3:39:16:12:44:24:24:
                    4b:78:91:4d:ba:34:ec:c8:3b:90:b4:07:26:dc:17:
                    76:99:4d:62:e3:70:3e:36:17:25:9e:dc:56:06:28:
                    6f:2a:8c:67:27:c2:5e:06:cf:19:ee:57:43:57:60:
                    56:08:0f:25:7a:fb:31:64:ff:22:10:18:cc:1c:a7:
                    57:2f:a6:e8:82:28:48:16:0e:3c:e6:47:79:9e:09:
                    43:c1:15:fc:2f:86:58:80:aa:c5:91:33:b5:2e:05:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2B:63:6A:31:29:A1:E5:21:FE:E1:DB:22:43:7B:BB:1F:D1:36:2F
            X509v3 Authority Key Identifier:
                keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:72:88:10:f5:9d:b4:91:86:e7:b9:26:42:6e:79:2c:d8:6c:
         f8:f2:fd:8e:a9:8d:42:14:c3:43:7c:13:ba:ab:6a:21:2c:a6:
         5e:b5:5a:e6:92:25:0b:bf:7c:d7:32:83:a0:5f:21:3d:33:c1:
         fa:67:b0:9e:ec:49:9f:e9:c7:2c:c1:48:82:22:5a:e5:f6:71:
         4f:cc:16:06:68:4e:d0:f0:08:0c:50:e1:53:1c:85:3e:53:54:
         d0:12:78:29:59:8e:21:67:a9:2e:f1:17:ed:26:c9:c8:bb:07:
         e5:63:87:3b:ed:05:55:c6:f5:f0:43:d4:e4:36:f8:42:ad:29:
         59:e8:7f:87:17:09:a7:3b:8d:1e:6a:f9:a2:b9:a2:65:74:83:
         9e:35:4e:6d:aa:1e:b3:29:db:29:92:c2:39:e3:51:c2:af:3c:
         d6:2c:53:a0:27:fc:bf:e4:da:34:62:0f:8a:88:f5:c1:61:d5:
         d6:79:13:ee:16:7f:81:b7:a5:4a:55:20:c3:32:7a:56:d1:75:
         89:1c:fd:68:0b:f3:d7:26:71:3d:a4:f5:50:ef:d8:a2:55:03:
         5c:64:4e:78:af:e4:86:5f:82:ce:3c:45:a6:eb:80:73:68:f3:
         3c:ce:e5:52:c9:51:ad:5a:19:3a:0b:63:45:34:a9:e2:8b:4a:
         7c:68:c2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRyEALN/bhKmD6Gs5baYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5
ZjlmNGEwHhcNMjYwMzAyMDIwMTA4WhcNMjYwMzAzMDIwMTA4WjAzMTEwLwYDVQQD
Eyg5MzJiNjM2YTMxMjlhMWU1MjFmZWUxZGIyMjQzN2JiYjFmZDEzNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjIxquzbp9Qwuhn2iN3kDTAqC4Ej
u9Ryllwf9YNMZCLImdS5RLxA8ou3RPneF512tlF1Xy8QgQy5F947JNKOp3ZbwCA+
EQJy5zFtnZxFqRcsvOPm9IohA+pdBSFxJZv5v90bmEaNg+hmT8vhcYkL/LYAtUG8
kVQn7YtUKKgUQiVgfzI2IYhXFujYJqs3qGldwTWzkloV4yLEuOHVBcM5FhJEJCRL
eJFNujTsyDuQtAcm3Bd2mU1i43A+NhclntxWBihvKoxnJ8JeBs8Z7ldDV2BWCA8l
evsxZP8iEBjMHKdXL6bogihIFg485kd5nglDwRX8L4ZYgKrFkTO1LgVqUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMrY2oxKaHlIf7h2yJDe7sf0TYvMB8GA1UdIwQY
MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt
NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1
LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXKIEPWd
tJGG57kmQm55LNhs+PL9jqmNQhTDQ3wTuqtqISymXrVa5pIlC7981zKDoF8hPTPB
+mewnuxJn+nHLMFIgiJa5fZxT8wWBmhO0PAIDFDhUxyFPlNU0BJ4KVmOIWepLvEX
7SbJyLsH5WOHO+0FVcb18EPU5Db4Qq0pWeh/hxcJpzuNHmr5ormiZXSDnjVObaoe
synbKZLCOeNRwq881ixToCf8v+TaNGIPioj1wWHV1nkT7hZ/gbelSlUgwzJ6VtF1
iRz9aAvz1yZxPaT1UO/YolUDXGROeK/khl+CzjxFpuuAc2jzPM7lUslRrVoZOgtj
RTSp4otKfGjCaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:34 2026 by rpki-client