Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
File:                     BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft (raw, json)
Hash identifier:          DWir1cbp8kq6LX6ViyjvJOLXoBQXDIdGleP5AyGYfys=
Subject key identifier:   67:7F:BF:46:CC:C5:4E:5B:B5:F4:1C:B0:6D:AE:4F:15:5E:8E:1A:5D
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Certificate issuer:       /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial:       019F8F7DCEA54E617865685E0A2926D442BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
Manifest number:          F8
Signing time:             Thu 23 Jul 2026 15:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:14 +0000
Files and hashes:         1: BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl (hash: O2WGn7I+W8Yj1wjbDPsD9Qxyr2kAESRZJlQn9HcEYGY=)
                          2: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (hash: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:ce:a5:4e:61:78:65:68:5e:0a:29:26:d4:42:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
        Validity
            Not Before: Jul 23 15:00:14 2026 GMT
            Not After : Jul 24 15:00:14 2026 GMT
        Subject: CN=677fbf46ccc54e5bb5f41cb06dae4f155e8e1a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:d8:ea:8e:ad:6a:9f:d2:1e:00:53:24:c0:
                    ba:79:c3:67:c3:a4:7f:b1:0f:fa:40:c4:65:ff:55:
                    42:1d:3a:d4:a7:b4:d4:be:67:5b:0c:07:a0:e3:cc:
                    78:f8:93:1c:a9:dd:1b:ce:e9:f3:84:c6:f8:fb:42:
                    43:0f:1a:27:78:bf:b8:03:e1:4f:8d:c3:1b:cf:ab:
                    ac:43:e1:a6:9e:c6:27:07:e3:fe:47:26:e0:16:a7:
                    57:fb:fd:67:49:bc:4b:f6:d1:c0:7f:b8:08:b4:bf:
                    c0:a3:68:93:22:0f:2e:1a:bf:72:53:d5:b9:df:30:
                    62:8f:d3:62:a2:ae:f7:79:a4:36:3f:ed:d4:55:36:
                    1f:ce:e6:63:59:44:8b:c3:f7:3b:7b:01:c3:c7:1b:
                    71:52:bc:5c:2a:b5:99:ff:a3:88:8e:6b:cb:9f:49:
                    37:c1:07:d4:d5:0e:b4:fb:9f:8d:f6:67:8c:ea:b7:
                    eb:f2:74:15:c4:96:10:af:0a:74:3f:5a:25:20:47:
                    58:e7:74:de:57:27:6f:fb:c1:9d:42:e8:25:ec:b4:
                    79:3c:c7:16:62:f1:0a:39:83:41:2c:9d:6d:68:34:
                    c1:f8:e2:73:af:bc:7d:54:63:aa:47:ed:c1:84:78:
                    be:02:c5:77:89:35:3e:34:1e:27:e8:3b:84:a1:5e:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:BF:46:CC:C5:4E:5B:B5:F4:1C:B0:6D:AE:4F:15:5E:8E:1A:5D
            X509v3 Authority Key Identifier:
                keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:24:81:c7:d9:49:dc:29:37:a4:0a:67:21:5e:75:27:5f:
         25:61:3c:3c:24:6c:bd:2c:2f:f7:16:8e:02:11:9f:29:2a:a9:
         48:21:85:3a:d9:a0:ab:08:29:92:10:cf:2d:31:7a:35:88:66:
         6b:f0:24:e7:90:93:74:ff:95:bf:b9:09:3f:18:92:c8:ee:c6:
         07:00:2a:4e:fe:13:21:9b:50:fa:7f:cc:8a:4f:b9:6f:c8:00:
         da:6f:4f:68:d2:20:dd:04:74:a7:c4:fc:47:a2:f1:f3:41:09:
         88:6c:d9:aa:b2:28:f4:46:bb:bc:33:36:aa:45:49:b6:8d:f4:
         f9:fa:74:f5:d5:0a:72:be:dd:c9:b1:ec:05:b4:df:a1:a0:0a:
         87:d6:87:9a:0a:19:2e:12:25:88:14:68:29:8b:6c:65:a8:97:
         cb:65:fb:72:37:a7:32:b6:b5:52:76:50:9b:8e:08:ed:e2:a9:
         f9:ff:97:11:65:7d:be:55:12:f4:e5:9f:9a:4b:5c:8b:54:f0:
         d3:9e:24:98:93:be:41:a1:88:ec:a8:14:c4:f3:e1:41:db:ad:
         65:0f:5d:f8:1f:1a:35:94:14:39:82:25:89:bf:cd:9a:9d:ad:
         e5:35:79:c4:8b:1d:a8:27:3b:21:ae:c1:86:3d:17:b4:c9:29:
         19:ec:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:47 2026 by rpki-client