Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File:                     beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier:          I13fCbVxiymO/xqd9xHM409fvL5/GUEq/ok0WTyumx0=
Subject key identifier:   F2:BC:2B:C8:FA:E9:EF:FD:29:B1:E1:AB:45:ED:46:38:B8:35:AF:FA
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer:       /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial:       019FABD198632BDCD9C7E319DDFD39F41C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number:          19DA
Signing time:             Wed 29 Jul 2026 03:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:07 +0000
Files and hashes:         1: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (hash: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8=)
                          2: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (hash: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4=)
                          3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: C3i/3PbanvDjG0DhQn7XIADb7CzYN/FMDdQ6PsSfUHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:98:63:2b:dc:d9:c7:e3:19:dd:fd:39:f4:1c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
        Validity
            Not Before: Jul 29 03:01:07 2026 GMT
            Not After : Jul 30 03:01:07 2026 GMT
        Subject: CN=f2bc2bc8fae9effd29b1e1ab45ed4638b835affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:f1:42:b8:64:ef:ff:85:69:7a:9d:42:94:
                    41:ac:eb:84:bb:5d:6c:23:09:c1:0b:4e:4e:63:e0:
                    6b:62:d0:0d:e6:5a:85:f7:f4:15:04:22:f8:f3:33:
                    7c:a5:c9:c6:b5:fb:31:80:7b:0a:81:2f:7a:c6:38:
                    8d:de:55:d0:dc:32:87:83:3c:58:dd:d6:f9:3c:00:
                    c2:3f:a1:6f:ac:bc:83:73:32:73:9b:a8:73:35:54:
                    59:c8:eb:15:24:bd:43:64:c6:3c:bb:2c:4f:09:84:
                    09:ee:cc:f4:7f:5a:f9:a1:01:9d:c9:b8:f1:8b:5d:
                    88:19:2f:93:25:8a:7d:a3:99:3c:4d:5c:d4:b7:bc:
                    6d:16:8e:08:17:51:03:9b:3b:f2:f6:2e:7d:81:ef:
                    48:e0:48:2a:88:6e:81:50:fd:6c:20:ad:31:fc:bd:
                    5f:21:5c:f8:63:0e:cb:a8:7a:ce:14:7f:cf:88:a3:
                    c8:4e:bd:32:6e:de:a3:22:29:18:80:56:3d:c2:85:
                    04:7e:80:04:ff:7d:5f:54:1b:40:b6:52:7a:5b:7f:
                    c6:53:03:76:e6:be:bb:ea:e8:ad:93:c4:00:57:be:
                    32:57:74:b0:e6:f8:62:d4:dd:55:ae:20:0e:db:4c:
                    a1:6c:d8:0e:12:0d:12:52:de:65:59:ac:a9:48:33:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BC:2B:C8:FA:E9:EF:FD:29:B1:E1:AB:45:ED:46:38:B8:35:AF:FA
            X509v3 Authority Key Identifier:
                keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:b3:83:a4:6d:25:bf:4c:5c:67:e9:54:57:72:81:cc:60:
         a5:4c:c8:ab:74:00:15:23:70:77:55:5d:55:44:d4:ae:c2:12:
         17:5e:1b:b9:8f:e6:8c:4b:d0:ec:3b:17:d8:b5:a3:08:e5:1c:
         5f:24:33:18:b1:80:67:3c:12:51:96:76:99:68:0c:d1:7c:45:
         6f:f2:ba:d8:88:ef:6f:9a:23:9a:74:64:89:d0:17:9c:d2:53:
         4a:06:1f:d9:ce:45:49:67:4f:f8:b4:b2:9b:60:e7:47:fe:4f:
         d3:8c:41:57:aa:4e:9a:68:c0:b5:85:cc:fa:76:56:df:e2:d9:
         16:87:0e:42:6e:b4:f2:75:3f:73:56:6e:7d:45:f3:f1:40:04:
         ed:ab:0f:55:55:ab:f1:25:5b:e8:96:e0:4a:c0:99:f3:4a:9c:
         f6:8c:32:9d:f6:f6:20:69:16:d9:0a:0c:32:f6:04:05:1e:a2:
         4c:19:f9:19:d1:e4:17:7c:f2:72:ed:85:53:ca:e1:c9:c8:38:
         d6:e3:2f:54:fa:85:f9:0a:54:97:5f:5a:53:bc:0b:c0:47:9e:
         05:a7:d3:5c:b4:2b:83:2f:f4:ab:4c:27:f7:f1:cb:72:a9:cc:
         c2:c3:a4:cd:60:20:03:09:84:db:fb:5f:eb:c9:17:08:cb:1a:
         de:73:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:16 2026 by rpki-client