Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File:                     BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier:          SON8eI+ZpdDYpKZt+WVToQs/KIL0SCNXAp/pfCegXJY=
Subject key identifier:   68:D9:A9:26:27:78:3B:BF:C6:A2:59:04:3F:7C:E3:53:DC:C8:55:30
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer:       /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial:       019EBF5B20F595BCE322F9AF720BC456DF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number:          0B19
Signing time:             Sat 13 Jun 2026 05:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:20 +0000
Files and hashes:         1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: FKPNWuSyWxKsrYPNabIg47F96kKcB8YYM6xNGn/nVn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:20:f5:95:bc:e3:22:f9:af:72:0b:c4:56:df:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
        Validity
            Not Before: Jun 13 05:01:20 2026 GMT
            Not After : Jun 14 05:01:20 2026 GMT
        Subject: CN=68d9a92627783bbfc6a259043f7ce353dcc85530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:a1:49:7b:79:ce:54:ed:11:16:8f:7f:b7:
                    9d:88:7e:55:df:97:ca:81:43:97:d8:78:05:53:9e:
                    91:e5:cc:5a:ab:63:e3:e8:1b:6c:41:95:a5:2f:cd:
                    2b:34:cf:63:99:53:ab:0f:5b:11:c8:94:b6:a8:02:
                    8e:0b:35:fe:01:90:d6:f0:5b:cd:43:4b:58:72:c2:
                    df:9d:76:e8:f8:47:2f:ac:e5:d4:f6:bd:fa:7e:69:
                    2a:23:c0:f1:bd:5a:d2:c2:ed:15:d0:58:e5:ba:80:
                    90:c6:9e:71:da:8e:67:fb:0f:e6:7b:4d:63:f8:97:
                    b6:37:1d:8d:ba:9e:70:58:0c:85:a5:6c:23:86:26:
                    51:15:f7:fc:62:e3:3f:67:9b:87:64:ef:6f:52:a4:
                    f1:ae:6e:78:7f:cf:2b:98:ec:0f:27:c6:59:b2:26:
                    90:39:5b:92:18:2a:e1:ad:98:2b:3e:8e:84:7b:34:
                    8b:ff:5d:e9:c7:22:16:be:e6:01:ec:2b:0e:9e:2e:
                    2c:50:eb:9a:f1:2c:78:fd:dd:cb:2f:47:91:81:c8:
                    c8:f8:c4:bb:55:4c:d4:67:2c:7a:56:1e:20:40:f8:
                    80:d5:00:e9:29:79:84:8d:ec:d8:10:55:12:36:d1:
                    f7:ab:fb:1a:41:7e:39:34:cd:38:5e:cf:ac:26:3a:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:A9:26:27:78:3B:BF:C6:A2:59:04:3F:7C:E3:53:DC:C8:55:30
            X509v3 Authority Key Identifier:
                keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:39:82:06:c7:38:e5:f8:71:38:57:23:9c:40:d9:0c:a0:
         28:70:ca:aa:83:6f:3d:ae:67:9e:68:42:b9:9c:b2:b4:72:f3:
         cb:21:d4:a3:c3:46:32:11:4c:08:e3:69:31:42:2e:ee:f8:80:
         49:b6:ea:a7:38:33:74:8f:d1:58:91:d7:1c:08:e8:17:72:5d:
         6e:67:9c:f9:24:b0:95:7f:48:51:c2:e9:6b:96:77:44:56:bd:
         22:77:e5:0a:14:d7:68:43:71:87:50:2c:06:42:1a:df:aa:20:
         9f:33:87:e0:c2:25:ca:e9:ba:46:65:82:58:92:db:be:96:c7:
         b7:9d:ee:89:8e:db:22:50:57:70:65:e0:46:8d:f5:14:cc:47:
         8c:27:42:d6:a5:b1:0a:2c:fc:04:ab:ee:22:3b:5f:38:2e:ae:
         1f:57:52:3b:2c:2c:13:1f:bd:19:fb:0a:88:55:e1:11:c0:c9:
         17:38:53:8f:c4:f2:a9:22:be:87:cf:58:d6:c3:fa:2c:55:79:
         6f:a9:4c:cb:81:63:45:4e:07:e5:ba:a0:30:4a:d7:4d:fd:7a:
         9c:2f:f4:59:46:79:a9:58:a6:0e:af:dc:92:95:f3:d3:20:d7:
         cc:d2:9d:c5:e4:2a:e2:07:47:7f:41:37:f4:d6:fc:ea:5d:aa:
         36:c3:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----