Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File:                     beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier:          DIgvCO8FhthJdWgIavr2f2meJhCVXi5Z/j0A/TLQpsQ=
Subject key identifier:   BB:38:D8:07:5C:23:73:F3:03:34:DA:44:E6:DA:F1:A2:F9:59:72:16
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer:       /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial:       019FA82B00E5511944A7F7FE670FF9BA8331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number:          019F
Signing time:             Tue 28 Jul 2026 10:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:17 +0000
Files and hashes:         1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
                          2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: CBIG7SX9UX9XFcut18Zb7trIPGSXh2iGUMW1/Tfp5eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:00:e5:51:19:44:a7:f7:fe:67:0f:f9:ba:83:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
        Validity
            Not Before: Jul 28 10:00:17 2026 GMT
            Not After : Jul 29 10:00:17 2026 GMT
        Subject: CN=bb38d8075c2373f30334da44e6daf1a2f9597216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:e4:4b:db:08:1a:08:28:2f:27:33:12:fd:
                    c1:31:7e:50:97:81:e5:76:89:65:51:ce:a6:28:5f:
                    1c:36:1b:89:09:35:d5:02:af:a0:7d:35:e2:bf:de:
                    56:c5:23:5f:e3:50:d4:40:eb:a7:81:09:03:3f:e4:
                    f7:35:e1:2d:0e:2a:12:92:99:c5:e7:99:1e:6f:84:
                    4f:13:2d:41:8a:b4:16:f4:0a:c0:30:d8:a4:fd:1b:
                    35:27:80:c7:c4:43:24:dc:f2:21:5c:74:41:ec:09:
                    7e:7e:a5:9f:0a:1c:d5:b9:81:ab:2d:b6:82:12:13:
                    d6:d3:81:b9:c6:7c:4e:9c:3a:37:b3:f6:06:b6:d4:
                    b3:01:f9:a1:aa:76:92:a7:dd:b7:82:88:7e:16:df:
                    97:9c:dc:87:eb:98:0c:d2:f7:e7:95:dd:fd:2f:1a:
                    df:ad:20:88:14:04:0e:64:3c:de:2e:be:4c:f5:b3:
                    68:fe:83:8b:da:1c:ef:a1:84:5f:bd:bd:0a:a4:31:
                    72:be:2a:fc:e7:91:31:19:c4:a5:ae:6e:7f:5d:8f:
                    ce:fc:c6:fe:00:cb:f7:16:80:86:f3:66:76:8b:60:
                    c1:67:5e:59:b7:1a:77:85:f1:25:09:66:37:9e:5d:
                    da:91:95:b5:70:4b:36:ed:6b:17:f9:63:2f:79:ba:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:38:D8:07:5C:23:73:F3:03:34:DA:44:E6:DA:F1:A2:F9:59:72:16
            X509v3 Authority Key Identifier:
                keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:2c:b7:8d:a2:78:9f:71:f2:6b:3b:eb:30:ac:55:10:13:a6:
         2e:16:67:5c:2d:da:76:35:42:a9:6f:b3:cb:c0:04:34:04:ef:
         0b:9d:eb:1c:7b:40:0f:46:c0:b1:89:47:a7:31:cb:46:0d:e5:
         70:38:6d:fa:26:33:ba:6f:91:e7:54:ca:39:e5:85:82:86:39:
         16:36:e5:24:49:6d:b8:01:08:02:70:5e:4a:b6:fa:28:68:9b:
         0b:fb:10:2f:35:86:72:37:ea:f2:c8:40:58:fe:a1:58:92:05:
         f9:70:00:8f:20:27:01:8f:0a:30:0e:3f:dd:ea:b0:dd:58:16:
         23:9d:a8:ef:97:9b:83:fc:c5:81:f5:9a:1a:26:96:e8:43:83:
         b3:b1:02:76:a9:66:f1:31:07:d8:49:01:0a:9e:41:da:20:fd:
         d1:9b:4e:96:24:aa:55:97:d8:8a:db:79:42:4c:eb:37:45:81:
         3c:14:fa:ce:5a:d0:72:bb:e6:06:ad:d2:d4:44:e0:39:8a:b1:
         69:67:94:ae:8b:b5:2f:e6:43:c5:0d:36:e2:91:57:8d:10:d3:
         77:05:a5:b7:e5:c8:92:b7:9d:84:1b:9a:48:2b:b4:de:f2:2a:
         f0:fe:63:ac:a9:46:40:b6:0b:3d:ec:af:69:96:86:be:8a:6e:
         3f:ac:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:07 2026 by rpki-client