Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File:                     BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier:          OtQ7jd1iR1IEjItSw+R6PeKkjuLoswBxbO525WGkEcw=
Subject key identifier:   5B:4C:7D:0F:74:DE:BA:85:02:DE:FC:E9:E0:E2:DC:A9:A3:2A:B9:6A
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer:       /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial:       019CAD2258C7CCEEA759010049E6642B6FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number:          07D7
Signing time:             Mon 02 Mar 2026 06:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:35 +0000
Files and hashes:         1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: fmetHkY8mVkC7zAIauNfWkRFVf/s6zqiW9xZSK4/ztc=)
                          2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:58:c7:cc:ee:a7:59:01:00:49:e6:64:2b:6f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
        Validity
            Not Before: Mar  2 06:00:35 2026 GMT
            Not After : Mar  3 06:00:35 2026 GMT
        Subject: CN=5b4c7d0f74deba8502defce9e0e2dca9a32ab96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:67:e6:33:2e:29:66:23:f5:7c:85:1f:cb:
                    69:ca:7f:98:a7:ef:b7:c2:0e:a0:44:7c:80:30:92:
                    33:f6:53:c3:3a:70:69:16:c8:11:69:5f:19:f2:dd:
                    62:9b:7e:25:fe:e5:82:dd:fb:b9:77:a1:cf:bb:ef:
                    2c:d6:47:0b:3d:2d:97:9a:dc:58:a4:71:c1:e0:2f:
                    c5:ea:f1:cd:4e:bb:65:9f:a4:d0:d4:cd:97:b1:a8:
                    8a:6d:78:d9:44:e5:33:13:11:f6:de:c7:6c:67:ac:
                    c2:ee:0a:f5:81:fd:99:57:4b:94:a4:81:56:c4:7d:
                    8f:38:ed:19:7a:18:cb:be:de:81:97:aa:f2:f3:9e:
                    05:9c:6d:5c:6a:f4:a0:a0:cc:b9:23:89:45:ec:be:
                    e3:8e:1c:a5:72:71:3d:99:53:a3:42:bc:4c:24:98:
                    2a:e8:5d:8d:b2:d4:f8:46:46:02:71:eb:9a:09:a9:
                    25:57:a1:3a:73:ad:c5:21:26:33:e7:c7:98:7f:7f:
                    82:89:8f:9c:b3:37:b0:ef:26:96:7c:7d:81:ff:58:
                    16:f5:96:1a:7b:d9:cd:2d:68:72:d1:d5:f8:d8:01:
                    de:46:12:e7:de:01:12:7c:b5:d6:bf:90:45:9e:5d:
                    ed:1b:29:9b:e4:59:71:5b:42:31:f9:0e:26:4b:fc:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4C:7D:0F:74:DE:BA:85:02:DE:FC:E9:E0:E2:DC:A9:A3:2A:B9:6A
            X509v3 Authority Key Identifier:
                keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fc:5a:65:b3:5f:1b:1f:cb:a6:9f:12:bd:14:28:d5:a1:7c:
         de:15:ed:47:4a:0e:52:75:38:ad:c0:83:77:55:bd:95:25:47:
         68:16:78:e9:47:c0:9c:b2:99:46:ae:7c:a2:c2:97:7d:f8:6b:
         fd:31:28:cd:09:58:b5:32:63:41:d6:04:7b:7c:ab:02:0c:00:
         ec:91:e2:e8:73:52:2f:33:f2:7f:95:ff:c5:6a:b9:1a:0d:a5:
         49:c7:86:6e:6b:eb:8d:25:b8:fb:72:e6:d2:fb:cf:eb:7f:a9:
         9d:e1:df:62:3c:88:3c:4f:c5:a0:fd:4d:12:79:d0:24:9a:79:
         f3:54:47:9a:48:b3:5a:24:1a:ce:da:9f:61:dc:d6:b1:1a:19:
         a7:da:3d:31:34:eb:2c:86:82:da:a6:bf:7b:76:f0:79:69:c1:
         1a:a2:58:0a:21:19:e6:62:be:4c:8f:b4:50:c2:e7:e7:52:9a:
         b9:40:c1:f3:76:3d:05:21:82:cf:f3:b3:35:df:da:f3:5f:2c:
         71:4f:a3:09:19:99:fd:cb:a6:70:82:24:a8:60:63:60:ed:c6:
         b3:91:47:73:23:bc:a3:6c:c5:31:11:4d:29:0b:fb:3e:f1:18:
         22:f7:57:f6:3e:c0:f6:74:47:87:bb:93:74:6a:8b:4f:13:f8:
         50:db:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:46 2026 by rpki-client