Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File:                     BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier:          ov4aYMBgRwGr4fCPGJoDBle2nGmRJy/atnszmVM0UfI=
Subject key identifier:   C4:DE:17:06:E8:15:1E:EC:21:48:32:88:62:BA:3A:6C:21:E9:83:36
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer:       /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial:       01A13A120833241B2E4CB7900F8F96E0BD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number:          0A33
Signing time:             Wed 14 Oct 2026 11:00:22 +0000
Manifest this update:     Wed 14 Oct 2026 11:00:22 +0000
Manifest next update:     Thu 15 Oct 2026 11:00:22 +0000
Files and hashes:         1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: 2K8i4RN9CUyJ1Il8WVsNehIVJT6VDaqpVV6QmoC07Js=)
                          2: K2OwPxMayCE_1ViREDJ_Lw9Kd5E.roa (hash: gffqd1M2fn2Fy9anzZwV6xr4tLTh3PAkfv21h6tFVf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:12:08:33:24:1b:2e:4c:b7:90:0f:8f:96:e0:bd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
        Validity
            Not Before: Oct 14 11:00:22 2026 GMT
            Not After : Oct 15 11:00:22 2026 GMT
        Subject: CN=c4de1706e8151eec2148328862ba3a6c21e98336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:26:e8:7c:7b:d6:32:aa:f4:5e:ea:a4:bc:
                    af:b5:5a:5c:30:21:4b:5e:f5:eb:43:97:6b:77:b2:
                    13:52:b5:66:10:3d:8c:54:e3:97:fa:41:6a:f6:ad:
                    c7:b6:fa:a2:8c:08:45:05:90:42:14:fb:39:1e:e8:
                    1b:52:58:e5:e7:8b:76:ac:ee:d6:ab:aa:87:35:a5:
                    f6:97:4d:cc:09:37:5f:d3:92:ef:06:77:d1:6d:91:
                    41:61:69:3d:e7:a9:5b:b9:6e:e3:a1:47:34:f7:0d:
                    13:40:10:7d:9a:ae:5b:26:50:15:9d:7d:3e:42:95:
                    2b:73:93:d3:45:84:9f:dd:af:5c:c2:f0:b5:fc:11:
                    84:34:59:ff:79:e4:b3:2c:77:71:38:ae:4e:58:6d:
                    85:81:9d:a4:e9:56:5c:5e:18:90:23:ec:e2:de:25:
                    a4:1c:1f:9d:9c:db:92:44:b6:de:a1:0b:6d:05:4c:
                    d8:08:40:77:d6:6f:5a:b0:c4:c3:7c:57:94:f6:22:
                    f1:14:92:da:2f:c7:20:b3:a1:a2:a8:c5:f8:f0:19:
                    26:99:f5:45:9b:cc:2a:e9:16:05:83:83:f3:75:ac:
                    86:42:0b:5e:77:db:f1:6c:f0:53:2c:00:ce:d1:cb:
                    82:fc:1d:12:2f:4e:b5:85:b7:ef:41:4a:52:80:6d:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DE:17:06:E8:15:1E:EC:21:48:32:88:62:BA:3A:6C:21:E9:83:36
            X509v3 Authority Key Identifier:
                keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:3f:54:6b:7e:95:4e:99:40:7a:9b:fc:46:32:b5:f0:92:
         2a:5c:68:dd:10:51:d3:7f:d1:22:a8:d1:e5:45:55:db:be:46:
         6f:f1:ff:8d:e4:9f:1e:ab:25:b0:35:02:10:10:1d:fc:57:da:
         9a:21:a4:35:96:c7:68:7d:6f:0f:44:46:a8:aa:f7:85:a0:6a:
         56:1f:60:15:34:b3:9a:c4:1e:62:40:82:23:f1:e2:f4:88:0a:
         ba:e6:03:53:c1:df:6e:c0:3d:23:3a:77:55:4e:45:ee:15:02:
         01:fa:04:a7:58:b2:15:13:d1:39:dd:3d:4e:2f:50:58:84:d4:
         0b:e6:22:0c:aa:ee:42:ef:35:0f:56:47:c1:e9:72:22:ea:44:
         8f:9a:29:c0:20:ec:41:00:a8:1b:fe:6c:56:7b:cc:b9:f3:5b:
         cf:ae:b4:97:38:51:d5:11:f3:ec:27:29:d8:5d:f4:0b:82:dd:
         a3:cc:8c:b7:6b:0c:82:8f:7c:51:e2:6c:98:73:19:24:d4:ab:
         18:e9:fd:a0:7f:3f:5e:9d:f5:b6:82:69:36:ae:49:9c:3d:d4:
         b2:09:a4:e5:3a:58:fe:a1:1f:39:42:fa:aa:32:d7:10:e7:e9:
         1b:1b:90:33:66:79:15:9d:37:c8:b8:e9:57:c7:68:5a:2e:ba:
         59:ba:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:45:43 2026 by rpki-client