Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File:                     BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier:          /3/x0wBVVMtMOtJF3LctLpr7RUWx2K8NUXwQk2zpJ8k=
Subject key identifier:   BC:B7:08:11:91:D4:B1:C2:08:DF:0B:0F:94:1E:4A:81:D3:F3:29:87
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer:       /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial:       45F997DA470DE32637DFA570E3B28C74AF29E210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number:          97
Signing time:             Tue 28 Jul 2026 07:59:19 +0000
Manifest this update:     Tue 28 Jul 2026 07:54:19 +0000
Manifest next update:     Wed 29 Jul 2026 09:20:19 +0000
Files and hashes:         1: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: j+81G31l3eYPhe0zJ2vKUvSGuT3rsC2RzylcSPwrr38=)
                          2: AS11967.asa (hash: 3G71/8YzgM4CTftmey2qsl+DI5Cry2OneqPjAmyn8TM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f9:97:da:47:0d:e3:26:37:df:a5:70:e3:b2:8c:74:af:29:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
        Validity
            Not Before: Jul 28 07:54:19 2026 GMT
            Not After : Jul 29 09:20:19 2026 GMT
        Subject: CN=BCB7081191D4B1C208DF0B0F941E4A81D3F32987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:b0:d6:20:3c:f9:f3:2c:b5:f8:a4:7a:43:
                    8b:61:55:30:e7:f4:fc:91:13:49:15:6f:ca:e1:f7:
                    48:8a:6c:5f:71:08:70:52:44:bc:65:cd:91:66:ae:
                    29:14:0b:7d:74:84:f2:db:04:58:3c:d5:62:0b:0d:
                    91:aa:83:ed:e4:0f:de:cf:1d:af:60:1b:26:b7:b5:
                    52:f7:6c:c6:1a:27:5c:87:1b:f5:ef:67:37:53:08:
                    92:47:4b:c3:46:bf:18:22:04:3e:83:6f:b4:49:fa:
                    97:65:bb:ee:c1:05:c7:6f:98:5e:1c:f3:7a:1c:9f:
                    07:e8:24:f9:04:f2:a6:b8:c5:78:21:70:67:7c:5a:
                    3d:a7:f9:13:14:b5:c3:07:4d:14:c4:64:a5:7c:94:
                    bc:97:e5:1e:c3:ef:47:e3:c9:d0:34:92:0b:cd:d8:
                    5d:90:54:0b:23:08:a3:aa:35:84:12:b3:34:06:84:
                    35:fc:58:05:b2:08:f4:16:9f:3b:de:99:fa:a2:21:
                    87:4e:72:e7:42:cb:4c:23:32:99:6d:68:10:27:aa:
                    c8:d0:19:ff:04:4a:72:53:10:49:7d:11:db:13:93:
                    93:58:7a:3d:ba:8e:b3:45:79:2d:e0:cb:fc:cd:e0:
                    25:da:4f:01:b2:7e:07:7a:1c:0d:ed:84:99:ce:48:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B7:08:11:91:D4:B1:C2:08:DF:0B:0F:94:1E:4A:81:D3:F3:29:87
            X509v3 Authority Key Identifier:
                keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:42:6a:1d:e0:01:42:72:b8:c7:3f:24:17:3b:9b:9c:7e:
         c5:16:e0:48:02:f6:ce:8d:e7:03:d5:a5:4e:d7:3f:46:de:b4:
         9f:d2:8d:a2:ad:44:42:71:60:81:df:9d:d1:3f:57:2f:26:4e:
         c6:88:93:92:cd:9f:f7:9f:20:b4:a9:c6:68:0a:55:05:d1:20:
         56:7e:73:4b:6c:2e:46:9b:57:9f:5a:4e:2f:c9:80:a1:ac:45:
         2b:7d:d1:c2:e8:8c:f0:5f:fd:db:c8:dc:0e:67:14:b3:fb:e5:
         a9:70:00:2f:b6:c1:b0:61:70:7a:d6:c4:01:51:e3:9b:b2:2b:
         19:17:b8:b1:54:22:6d:e3:7d:96:3d:ee:3d:e0:6e:e0:d3:42:
         38:a0:4b:51:69:fa:b6:e8:29:fd:97:cd:da:c8:b5:4c:d6:d1:
         ba:2b:82:db:f0:bf:80:96:73:28:3b:e6:b7:ec:b1:a2:ec:bd:
         8d:73:14:df:47:45:20:b6:0c:a7:73:0d:0c:e5:72:7d:52:f7:
         92:5c:12:b4:08:63:ed:62:33:f7:a6:78:47:78:60:e1:7b:cf:
         05:eb:31:cb:06:12:ad:cf:a4:a5:d6:1e:fa:3a:b5:a6:69:10:
         61:bf:c1:0f:8e:f8:84:b4:3a:e8:8f:ed:a8:9c:13:00:86:dd:
         79:2e:b1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:06:31 2026 by rpki-client