Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          TzwFVS8FfVTaskg31sEm3pQjsZK3G4H9ZfWrD1uRbU0=
Subject key identifier:   DD:47:11:CC:F0:39:2E:54:86:E8:BF:BB:75:CC:00:44:CA:D9:99:0B
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       019E1ED9CC648C154FFEC6D95FA33182FE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          1433
Signing time:             Wed 13 May 2026 01:00:50 +0000
Manifest this update:     Wed 13 May 2026 01:00:50 +0000
Manifest next update:     Thu 14 May 2026 01:00:50 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: Remyx7+Iy2eR91IFXjgSkDDT+Mdorz2BJ7yAKHC8hfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:cc:64:8c:15:4f:fe:c6:d9:5f:a3:31:82:fe:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: May 13 01:00:50 2026 GMT
            Not After : May 14 01:00:50 2026 GMT
        Subject: CN=dd4711ccf0392e5486e8bfbb75cc0044cad9990b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:20:48:b2:93:3a:10:44:f5:49:1c:1a:72:
                    2f:4d:76:25:4f:f6:b0:8d:51:31:f7:0f:09:6a:2a:
                    95:47:7f:d2:61:ea:8a:56:e3:e2:6d:60:be:7e:ce:
                    6f:d8:48:5d:05:05:37:2d:b8:db:32:c6:13:9e:4a:
                    46:44:7d:28:ac:8f:36:62:d6:e3:cf:75:86:9d:9e:
                    5f:25:5d:06:ac:5d:fe:38:db:d0:ac:f1:4b:9c:64:
                    65:4c:67:1c:76:84:f5:bf:c4:34:b9:9c:e9:23:37:
                    e9:4c:89:66:51:82:4c:a9:ee:ca:22:b5:ce:45:00:
                    82:94:ce:3b:22:7c:f2:e1:47:ed:90:b9:fd:71:cc:
                    98:ee:07:60:26:d3:ab:c9:d5:c6:a8:60:b8:0a:39:
                    53:8d:35:bb:4b:15:22:3e:53:9f:48:62:61:eb:9b:
                    ef:e1:47:a9:48:68:25:19:f1:8e:1b:e4:ea:df:e0:
                    18:30:19:56:5d:d5:93:55:bf:5b:f5:2d:72:ff:86:
                    0a:17:56:5a:16:45:38:47:90:d1:f9:90:f7:5a:f1:
                    cd:40:8c:d2:cd:0a:9c:4a:eb:b0:34:a1:b3:cf:8a:
                    19:e5:c2:f8:54:db:b4:5a:8b:f3:b5:ff:4d:be:b1:
                    fd:48:b4:6e:73:61:69:41:f6:1b:7a:23:73:6f:9c:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:11:CC:F0:39:2E:54:86:E8:BF:BB:75:CC:00:44:CA:D9:99:0B
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:10:db:35:54:36:fc:18:f8:12:1c:28:c2:0d:1a:56:23:47:
         45:16:fd:7f:06:b4:72:52:5a:ff:9b:da:4d:93:c3:2c:14:45:
         e2:9a:c1:f2:1e:34:4d:70:15:66:1f:d7:54:56:f4:23:1d:e8:
         a4:6d:8b:de:31:f3:4f:c3:a6:0e:6c:82:f3:db:14:a7:de:0a:
         a5:9f:f0:9d:13:8f:56:f8:89:07:a8:1a:46:e1:2d:e2:9f:23:
         99:4e:07:4d:2c:30:8a:6e:d5:fa:35:1f:5e:f3:5f:49:06:ef:
         6d:0b:fb:73:5c:1b:69:aa:e2:53:04:1c:e9:83:18:22:5e:76:
         79:06:55:19:80:52:57:1b:09:b3:9d:1b:23:ac:df:22:1c:86:
         43:f3:8a:86:d8:e1:e4:13:d6:f7:35:18:f0:4b:94:98:9a:f0:
         91:02:3b:0e:cc:61:95:d5:dd:90:6b:25:a1:4f:30:4b:28:1f:
         8f:e9:e1:d4:6d:ae:e7:ec:45:fe:76:28:ae:7f:ee:7f:64:d3:
         a8:86:a2:d8:19:3a:24:0d:07:07:e3:64:78:2f:c0:d5:4d:cb:
         bd:65:86:5f:b2:99:00:de:b5:df:05:66:9b:bf:01:66:4b:9e:
         dd:0c:af:7a:df:72:5d:dd:f5:8c:58:c1:36:c3:1d:e8:63:55:
         a2:e4:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:47 2026 by rpki-client