Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File:                     beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier:          ODkwF0BvDq++g/dBLFgK8OIhSyPnhA4QXbHO4V7lJBg=
Subject key identifier:   AF:8A:D1:44:0F:35:1B:55:97:A9:AD:BB:E3:FF:F0:84:16:11:BE:95
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer:       /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial:       019DA48B37EB1BD598BBB7D3D6339B56FA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number:          94
Signing time:             Sun 19 Apr 2026 07:01:20 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:20 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:20 +0000
Files and hashes:         1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
                          2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: /mXImXGTAtGKrao36WY3mxeudFZHfXzWfHlX85w9pIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:37:eb:1b:d5:98:bb:b7:d3:d6:33:9b:56:fa:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
        Validity
            Not Before: Apr 19 07:01:20 2026 GMT
            Not After : Apr 20 07:01:20 2026 GMT
        Subject: CN=af8ad1440f351b5597a9adbbe3fff0841611be95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:c3:11:6f:14:ef:4d:b5:65:71:ce:9b:ca:
                    30:50:68:3b:f5:7d:56:4d:1f:a1:46:55:82:a8:42:
                    e5:42:cb:49:74:87:33:ed:35:f9:60:1c:7b:0c:7c:
                    87:c9:33:9a:cb:44:a3:38:c6:89:c6:99:b7:57:b9:
                    0e:94:e9:76:49:f0:ce:e8:35:49:29:3a:c0:b1:73:
                    ac:6a:f4:fe:53:92:35:0f:0c:bc:51:9d:25:d3:cd:
                    ab:8e:ab:cb:e6:3b:b7:e0:b2:5a:97:fc:07:53:8c:
                    95:b5:94:f0:14:42:63:15:99:da:81:85:66:ad:3d:
                    de:9e:1f:69:e6:6a:47:c9:96:e0:72:45:ea:a8:27:
                    1f:e2:76:cb:8c:9a:b1:0b:ec:89:7a:22:30:e0:7f:
                    4e:ce:c2:d2:e6:36:f8:ff:fe:87:7c:1e:ef:b5:1e:
                    42:0c:45:03:9c:1c:98:e7:ef:98:6c:9c:87:e2:8f:
                    8d:55:d3:bc:04:f5:31:28:ff:86:d2:7a:66:d3:bd:
                    ba:c6:f7:11:4d:e3:64:7f:db:0b:34:ec:ed:15:23:
                    6f:18:b2:2f:13:e3:8b:dd:07:5b:81:c3:2c:cf:f5:
                    bd:5d:04:9d:ff:59:58:5d:46:20:26:5a:77:e5:3a:
                    c7:99:0f:d5:a9:5f:bc:bf:2e:47:ee:d9:ed:42:4b:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8A:D1:44:0F:35:1B:55:97:A9:AD:BB:E3:FF:F0:84:16:11:BE:95
            X509v3 Authority Key Identifier:
                keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:2a:5e:dc:77:83:fb:b7:92:82:da:c8:dd:23:48:36:44:
         2b:1e:05:83:5d:11:14:d3:ad:4f:82:22:58:b0:3e:14:a6:45:
         ff:d0:95:05:3b:1f:55:c2:46:df:f0:0d:86:c9:0a:10:07:75:
         08:c0:94:c5:6b:1b:39:1e:04:f6:c4:52:90:2c:16:fc:a2:1f:
         a1:3a:c8:e7:bd:33:30:c8:07:6f:6f:f0:1c:26:07:89:2e:dd:
         59:b5:0f:28:68:71:88:9c:82:d8:ac:05:55:f1:43:a4:cf:cd:
         6f:9c:2e:75:d2:51:9f:27:50:44:1c:67:a5:3b:d3:49:0c:5f:
         6f:83:15:ea:ec:bb:7a:cc:83:8e:97:43:b3:e0:53:ea:84:3f:
         25:cd:c4:b8:d1:99:82:77:dd:89:cd:8f:71:72:96:c9:05:5c:
         74:d6:43:a0:96:ec:d3:e8:2a:74:12:51:c6:10:8c:9a:33:d5:
         26:1d:11:16:2a:5d:e2:c1:34:95:9a:37:fe:e5:75:60:89:c8:
         c7:66:be:0d:1b:09:22:34:dd:ff:3d:ae:8b:2d:53:1b:98:5c:
         15:35:87:2a:ec:d9:d8:d1:b8:1b:1a:ba:c4:de:10:18:cf:1f:
         43:d2:ec:63:51:f5:1c:f5:ae:71:71:4c:f1:b8:bc:d5:fa:06:
         9b:fa:b6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kizfrG9WYu7fT1jObVvooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZWE5NzVmYmIwM2ZjMjVmYjgwNDRiMmRhMzg4MTRjNmFm
MWNmZGUwHhcNMjYwNDE5MDcwMTIwWhcNMjYwNDIwMDcwMTIwWjAzMTEwLwYDVQQD
EyhhZjhhZDE0NDBmMzUxYjU1OTdhOWFkYmJlM2ZmZjA4NDE2MTFiZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTXDEW8U7021ZXHOm8owUGg79X1W
TR+hRlWCqELlQstJdIcz7TX5YBx7DHyHyTOay0SjOMaJxpm3V7kOlOl2SfDO6DVJ
KTrAsXOsavT+U5I1Dwy8UZ0l082rjqvL5ju34LJal/wHU4yVtZTwFEJjFZnagYVm
rT3enh9p5mpHyZbgckXqqCcf4nbLjJqxC+yJeiIw4H9OzsLS5jb4//6HfB7vtR5C
DEUDnByY5++YbJyH4o+NVdO8BPUxKP+G0npm0726xvcRTeNkf9sLNOztFSNvGLIv
E+OL3QdbgcMsz/W9XQSd/1lYXUYgJlp35TrHmQ/VqV+8vy5H7tntQkv4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+K0UQPNRtVl6mtu+P/8IQWEb6VMB8GA1UdIwQY
MBaAFG3ql1+7A/wl+4BEsto4gUxq8c/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNDQwMGEtZTFhYi00MjExLWI5M2It
YzUxN2UzMDdlNTY3LzEvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNDQwMGEtZTFhYi00MjExLWI5M2ItYzUxN2UzMDdlNTY3
LzEvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmQqXtx3
g/u3koLayN0jSDZEKx4Fg10RFNOtT4IiWLA+FKZF/9CVBTsfVcJG3/ANhskKEAd1
CMCUxWsbOR4E9sRSkCwW/KIfoTrI570zMMgHb2/wHCYHiS7dWbUPKGhxiJyC2KwF
VfFDpM/Nb5wuddJRnydQRBxnpTvTSQxfb4MV6uy7esyDjpdDs+BT6oQ/Jc3EuNGZ
gnfdic2PcXKWyQVcdNZDoJbs0+gqdBJRxhCMmjPVJh0RFipd4sE0lZo3/uV1YInI
x2a+DRsJIjTd/z2uiy1TG5hcFTWHKuzZ2NG4Gxq6xN4QGM8fQ9LsY1H1HPWucXFM
8bi81foGm/q2QA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:22 2026 by rpki-client