Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
File:                     BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft (raw, json)
Hash identifier:          4EmbHM5dnbs67vt2xeJXHQYx4wUbQWq0Eqix18ZAg5I=
Subject key identifier:   55:56:BE:C0:E1:A7:88:37:68:D1:BA:C7:3A:FA:C8:FE:90:67:AE:40
Authority key identifier: BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC
Certificate issuer:       /CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
Certificate serial:       1A5E952D448589B4A8DE4F1365ED68C1834C9EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
Manifest number:          AE
Signing time:             Tue 16 Jun 2026 23:40:22 +0000
Manifest this update:     Tue 16 Jun 2026 23:35:22 +0000
Manifest next update:     Thu 18 Jun 2026 01:40:22 +0000
Files and hashes:         1: BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl (hash: J8MbylWHHWz0KX8LxxbysLemO32MvmMH4Kmc7e2nswU=)
                          2: AS210632.asa (hash: F50VKl1bg+VRFTiiiinmTlkpKITkrkQiXfVtBw/oKQk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5e:95:2d:44:85:89:b4:a8:de:4f:13:65:ed:68:c1:83:4c:9e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
        Validity
            Not Before: Jun 16 23:35:22 2026 GMT
            Not After : Jun 18 01:40:22 2026 GMT
        Subject: CN=5556BEC0E1A7883768D1BAC73AFAC8FE9067AE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:d1:e7:aa:3b:1c:63:f8:6f:16:d1:3e:2b:
                    2e:49:d5:0b:f7:2f:2e:23:3e:28:b7:5b:ea:0d:4f:
                    cd:3a:0d:c9:b6:02:b6:7e:dc:07:cb:3a:5f:e2:26:
                    cf:e1:65:51:23:ad:65:97:d0:a0:d6:2b:c9:90:cf:
                    0d:8c:49:8b:20:95:1c:03:72:49:f5:f2:da:83:a9:
                    94:04:ef:f0:2b:02:b1:50:14:0e:56:56:5e:57:2b:
                    1a:d8:4a:67:3e:55:6d:4a:ac:23:58:1f:41:d7:70:
                    90:f2:9a:36:c6:9a:39:83:8b:95:49:a9:0c:1e:dd:
                    81:74:60:ed:bc:2f:2c:30:52:78:b4:41:66:f0:d2:
                    e0:dd:86:eb:5f:f2:47:f5:7a:d5:55:c4:7b:0b:53:
                    95:c6:0e:04:c5:b3:e8:e5:e0:5f:04:95:b0:44:f0:
                    30:5c:ec:9b:da:93:64:b5:34:19:17:e2:63:8c:0e:
                    fd:ce:97:f9:7b:00:c4:4c:58:f3:78:88:a6:a6:dd:
                    6c:0d:11:51:00:03:1c:59:ed:ec:8c:6f:56:1c:16:
                    eb:ca:60:a7:24:f7:da:b1:ac:63:7a:2b:51:cd:2e:
                    e4:0b:2f:e4:0f:39:0e:c5:cb:7d:c7:b8:13:6e:68:
                    d6:e5:cc:7a:5c:c8:ab:5b:24:75:71:7e:41:d3:2a:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:BE:C0:E1:A7:88:37:68:D1:BA:C7:3A:FA:C8:FE:90:67:AE:40
            X509v3 Authority Key Identifier:
                keyid:BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:20:4a:78:fe:e7:c4:67:29:35:28:77:ec:84:e4:c7:53:b2:
         61:2e:22:89:b0:6e:29:5c:ef:ab:0f:cd:1a:c1:f0:43:0f:9a:
         24:d4:3a:3c:76:92:02:4b:cb:11:4c:92:3a:c1:ae:ec:68:2b:
         b6:d8:9d:1b:78:a8:ec:93:95:11:be:61:75:e3:41:93:21:72:
         ef:7d:b7:09:c1:46:9f:78:93:f1:7b:b0:ab:30:19:1a:aa:41:
         82:4b:16:f8:70:3b:23:e5:cb:8a:32:8a:16:ee:05:e7:c3:b1:
         74:eb:b5:06:32:b2:b9:05:ae:00:dc:8e:c9:7d:9b:f9:06:8a:
         8b:53:ac:0d:e0:40:23:79:da:02:d2:d2:e1:88:d8:97:94:ce:
         c7:1f:2f:bd:0e:48:a8:28:31:cc:17:1d:d8:15:c9:56:ff:d2:
         f5:3d:fc:67:a8:f3:73:3e:a8:b0:04:4d:54:87:71:a2:be:f7:
         a4:8f:52:1b:83:74:de:bc:47:c8:ee:51:b0:37:bd:df:b2:6a:
         c7:16:0a:36:0c:24:2a:e5:d3:51:51:29:d2:9a:1b:c2:42:fd:
         5e:6f:b8:e6:a2:1e:b0:7a:cf:12:ed:9d:7f:dc:f9:52:f8:ad:
         a7:ba:0e:03:fd:5f:27:58:81:d6:6e:ef:62:df:32:f3:06:94:
         5f:98:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:24:22 2026 by rpki-client