Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File:                     BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier:          6zZYz6am9MYIKp6n9kmhlKGCQ4vmpHqMSbe39sBDttY=
Subject key identifier:   3E:8E:8C:D1:A4:A7:23:53:3D:4B:C1:5A:A4:EB:CA:C1:25:E0:69:A4
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer:       /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial:       6BE11D792AF22CFC67FBF87817B5C9E99D7E16BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number:          5A
Signing time:             Fri 12 Jun 2026 23:44:18 +0000
Manifest this update:     Fri 12 Jun 2026 23:39:18 +0000
Manifest next update:     Sun 14 Jun 2026 01:18:18 +0000
Files and hashes:         1: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: aTAAW1nyQjyfp9KlCtcZEjySTI+CIT1CGKLt7VmYE54=)
                          2: AS11967.asa (hash: 3G71/8YzgM4CTftmey2qsl+DI5Cry2OneqPjAmyn8TM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e1:1d:79:2a:f2:2c:fc:67:fb:f8:78:17:b5:c9:e9:9d:7e:16:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
        Validity
            Not Before: Jun 12 23:39:18 2026 GMT
            Not After : Jun 14 01:18:18 2026 GMT
        Subject: CN=3E8E8CD1A4A723533D4BC15AA4EBCAC125E069A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:17:7d:00:d7:62:d6:b7:0b:19:8b:46:f2:76:
                    2f:a3:09:8d:e0:26:dc:d1:f1:0d:cf:61:5c:43:73:
                    1a:0f:66:04:ad:45:66:62:01:6a:44:67:2b:55:4d:
                    ea:ed:97:60:14:6a:1e:97:b3:bd:26:1a:af:4e:d7:
                    f8:4c:8a:b6:1c:af:74:25:68:85:77:6d:45:7e:28:
                    46:2b:9e:e5:05:f4:21:7a:1e:06:6c:b3:fc:71:39:
                    cc:67:a6:a5:dd:2d:99:20:6f:c1:cc:92:8c:ab:ae:
                    ff:c3:5f:a5:5d:d6:d1:e0:ae:70:23:0b:45:89:25:
                    ea:26:7d:25:43:45:e4:aa:c7:f4:0a:8c:a0:d9:84:
                    47:91:44:28:23:50:36:91:44:75:0c:5f:fe:1b:96:
                    60:34:e8:ed:3b:89:ea:46:cd:52:cc:1b:dc:0d:48:
                    2c:71:2f:bd:d1:bb:f7:16:94:d7:57:ca:c5:41:87:
                    37:be:93:39:d6:b2:91:c4:7f:43:db:93:64:60:a5:
                    d7:5f:1c:be:61:95:ff:25:d9:42:45:0e:a9:2e:55:
                    6e:70:75:3c:6b:4f:3e:3b:0b:87:c0:75:1d:fb:d9:
                    70:4c:a0:a2:30:c1:9c:ab:a2:a6:55:19:29:25:e4:
                    f0:5d:5c:cc:d9:d8:32:45:3e:8f:fe:72:f5:17:c3:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:8C:D1:A4:A7:23:53:3D:4B:C1:5A:A4:EB:CA:C1:25:E0:69:A4
            X509v3 Authority Key Identifier:
                keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:27:ca:0d:f4:a9:0c:5c:6a:4a:c5:40:44:7f:bb:9a:50:1c:
         d1:57:47:1b:6b:7a:73:4d:e3:cf:95:f1:78:39:b9:5c:65:2e:
         66:1a:39:c5:96:b0:3f:17:2e:dc:d2:d9:5a:75:62:3b:33:70:
         32:b3:5f:cb:bc:d0:c3:c6:33:f4:7a:a4:d5:9b:f6:ed:cf:c4:
         36:a5:df:ff:cd:65:b4:27:f8:00:24:54:aa:4d:c3:7f:c8:c3:
         72:3b:75:3c:9c:02:a0:a1:c1:3a:31:69:41:81:42:92:74:cc:
         b8:4f:cc:24:6a:12:e3:ee:89:ec:48:97:e1:88:e5:38:62:ea:
         bb:cd:14:e1:03:e0:b8:40:4a:5f:31:fb:e7:a7:83:69:99:a8:
         18:41:0a:e7:d0:10:0e:3f:e8:2e:e5:7c:6a:f6:03:65:9c:f3:
         63:5b:e2:b1:94:e7:05:9a:6d:2f:87:8d:a4:64:8d:d7:d9:27:
         3a:87:e9:97:1a:df:36:f3:79:15:28:93:f7:96:b0:3a:20:73:
         fd:5f:81:bc:90:ff:b8:cc:20:f7:7d:a9:dd:b8:90:b8:51:91:
         f2:43:7b:20:34:f3:e1:bc:92:12:8b:c3:be:dd:7e:5f:03:53:
         95:5a:6f:f8:3e:8c:74:fa:3c:23:96:18:79:a8:87:17:51:04:
         56:5d:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:08 2026 by rpki-client