Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          cwYJOS9Iq50a3WyLsJpMLbTZh8E1RC1/nuOHzKHcHJE=
Subject key identifier:   3F:81:36:66:1B:3A:B9:D8:D0:7E:D2:4B:9D:50:7C:81:3F:CF:E5:20
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       019F8FB55538E39BF542B24DA0DE558DFD02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          14F2
Signing time:             Thu 23 Jul 2026 16:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:53 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: 0nrR4b81SC3Rl5YoeZ3OTkRJnC70CEA6u3mVHQPQtpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:55:38:e3:9b:f5:42:b2:4d:a0:de:55:8d:fd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Jul 23 16:00:53 2026 GMT
            Not After : Jul 24 16:00:53 2026 GMT
        Subject: CN=3f8136661b3ab9d8d07ed24b9d507c813fcfe520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:b8:86:bf:a3:d9:f4:3c:ff:d5:d3:c8:6c:
                    93:bb:e8:28:ce:f9:69:43:0b:69:35:bc:67:6f:4c:
                    15:cf:b2:74:2d:8e:2f:c9:f6:4d:c4:74:98:9d:ae:
                    3a:b6:9f:cf:b4:ae:99:37:d7:a9:2a:6c:78:3b:6d:
                    94:bc:30:b8:16:f9:29:a5:d4:60:20:55:47:52:86:
                    86:98:01:b2:15:f1:59:9a:c0:0c:23:12:03:a7:90:
                    2a:bc:2c:22:ae:6b:b0:93:a1:8f:5d:07:09:10:74:
                    dd:bd:9a:2e:5b:7c:12:95:a8:e7:6d:51:27:38:57:
                    28:8e:b3:40:72:de:72:dd:d7:97:f6:f8:7f:cb:76:
                    90:07:ea:3b:1d:cb:61:22:3a:ae:92:23:4e:7c:0b:
                    80:97:c9:3f:19:98:2b:84:05:7f:a5:94:a0:0a:d1:
                    76:83:d5:a5:63:c1:e2:83:aa:4e:4c:ea:43:49:04:
                    c6:ee:31:cd:6a:07:68:97:b8:b3:05:52:b0:89:3a:
                    5c:1d:27:2c:41:ab:cc:94:93:ab:a1:e3:db:b9:cc:
                    c4:e6:cb:11:36:39:8d:1b:8e:a3:58:80:f8:90:61:
                    1c:5f:95:5a:d4:f6:10:fa:f3:b8:85:13:a2:bb:da:
                    b4:fe:1c:38:77:b4:46:a3:08:69:52:23:61:38:3b:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:81:36:66:1B:3A:B9:D8:D0:7E:D2:4B:9D:50:7C:81:3F:CF:E5:20
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:0a:f3:05:a7:d1:90:4c:6d:d7:a0:63:31:b5:87:4f:7d:
         72:7a:84:35:88:b6:55:a6:35:75:2e:6f:29:84:28:df:19:8c:
         4a:5e:67:17:f0:d8:0f:88:fc:76:37:d8:a7:25:70:6a:ce:9a:
         83:40:24:32:04:d0:e4:44:26:a9:85:62:8b:cf:52:14:a2:1e:
         33:72:8c:98:69:96:2c:1c:18:eb:1b:ea:fb:95:23:10:b7:51:
         4f:19:a9:cd:f1:15:0b:5e:23:9b:c1:e2:39:ed:fc:7a:b5:26:
         42:a2:b4:1f:21:6d:00:f6:fc:08:c8:ca:3b:78:98:22:de:f8:
         c3:f1:6e:4f:26:8b:fc:9f:e9:10:15:38:62:e9:87:08:30:ca:
         aa:da:48:55:a2:24:04:44:f2:a5:6c:e3:6e:85:a0:fb:c0:a5:
         7c:3e:31:03:b3:a2:6d:05:88:6d:d0:94:5f:3c:11:f2:04:a1:
         ca:de:38:00:29:33:34:2f:0e:14:80:89:88:02:38:92:94:d9:
         41:32:9f:b2:5b:58:f7:1e:52:3e:d9:14:aa:19:f2:c5:06:5a:
         3c:d3:ff:e2:42:2b:4b:61:62:18:36:0e:16:ad:05:19:e5:eb:
         a6:50:dd:5b:0a:6a:a2:a3:a2:81:79:6b:a5:2f:2c:97:3a:81:
         e4:ab:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:57 2026 by rpki-client