Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File:                     BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier:          Ir5RYgkuBhxp6xErn+P9vx9BgBs0Jc9VpKA4MslnCRM=
Subject key identifier:   B7:64:3E:6D:56:3E:E7:9F:C2:5C:C0:5A:2E:74:31:20:5C:1D:82:92
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer:       /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial:       019FAC08C1516302E07A6952FE97D6334598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number:          106C
Signing time:             Wed 29 Jul 2026 04:01:22 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:22 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:22 +0000
Files and hashes:         1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: 5wPXkYoPlsFAZdlQCjNPpkGNc0IP/6/g5eIpQM0bmCM=)
                          2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:c1:51:63:02:e0:7a:69:52:fe:97:d6:33:45:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
        Validity
            Not Before: Jul 29 04:01:22 2026 GMT
            Not After : Jul 30 04:01:22 2026 GMT
        Subject: CN=b7643e6d563ee79fc25cc05a2e7431205c1d8292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:8c:eb:dd:4a:a2:c0:72:f2:96:51:de:c0:
                    ee:27:9a:5d:ba:21:37:fa:29:34:c3:38:31:b6:41:
                    c9:88:6f:1b:18:b3:bc:76:8d:6d:14:70:ed:d3:ea:
                    60:c3:5d:45:7c:2f:81:10:ec:b7:de:7c:ef:9d:65:
                    f2:cf:4a:fc:d2:b2:d7:22:17:a0:e8:94:61:93:e2:
                    b5:0e:96:98:01:3c:46:37:af:2e:23:eb:f6:33:64:
                    91:dd:8d:88:ec:7a:3c:d3:ca:a2:2b:99:c8:a8:5e:
                    72:e3:0e:8d:6d:e3:b1:40:92:8c:6c:7b:af:ee:ca:
                    f5:e2:4a:01:ca:33:ad:ef:e2:bd:1f:e3:71:6e:75:
                    f2:2e:c9:29:85:69:c5:25:63:c9:69:39:01:99:c8:
                    99:66:05:9e:0a:be:63:97:42:fe:ed:9f:5b:9a:20:
                    e8:88:91:85:b9:eb:02:b1:d8:b1:c2:9d:68:80:6c:
                    0a:b9:3d:6d:d8:f5:ee:7a:6c:e7:b0:41:a2:65:8b:
                    5e:8a:fd:3a:5e:86:ec:ac:b7:83:31:9f:e3:b0:f5:
                    23:04:44:e8:f9:21:8b:67:af:a4:85:75:f5:ab:34:
                    8c:cb:5c:ca:90:1b:ba:28:46:08:cc:b8:f4:b0:b0:
                    86:b9:4b:c8:66:9e:b5:7c:4d:cf:c4:23:de:63:9d:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:3E:6D:56:3E:E7:9F:C2:5C:C0:5A:2E:74:31:20:5C:1D:82:92
            X509v3 Authority Key Identifier:
                keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:ed:d5:fa:38:15:7f:18:0f:8b:29:c0:a3:e6:8b:09:7e:
         cd:55:c8:28:91:df:3c:2f:7e:ef:c7:99:a4:36:43:86:32:c1:
         8f:2b:7c:1e:2a:d9:e0:58:c4:90:d3:2e:62:41:8b:7f:65:2d:
         64:1e:65:a6:db:e1:fa:38:30:d8:e0:d1:bf:17:9a:54:85:a2:
         01:1c:e0:82:54:10:4a:35:0b:d5:d9:ec:90:fb:bd:03:b8:27:
         74:f0:10:03:e9:bd:59:ff:7a:9a:d3:ff:f7:1f:a0:1e:d5:87:
         91:94:66:61:25:5b:21:06:45:5f:4c:7e:db:25:32:6d:d6:4a:
         85:8e:27:52:3d:a6:15:1e:35:5a:1f:04:80:0d:ca:48:fa:1c:
         38:6c:21:c6:d2:46:29:90:ed:95:2f:34:86:15:f5:82:92:96:
         43:a7:fb:53:da:7c:10:38:18:38:f4:ee:09:11:f9:3b:95:28:
         88:dc:b5:5a:92:b6:f4:03:ae:f8:eb:e2:50:6b:02:01:26:94:
         7c:97:9b:70:50:a4:1d:a8:32:76:0a:95:01:2c:38:7b:0b:a9:
         9d:36:99:a7:8d:65:a9:92:13:fb:ca:c6:77:e6:d8:24:e2:3d:
         d0:49:34:aa:e5:f8:94:53:c8:4f:79:1b:cb:23:fb:30:56:da:
         29:81:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:35 2026 by rpki-client