Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          tOAbveKnn8lC4gyJc7FX1oC5eYuwtV6+rbWt1ZwLjKY=
Subject key identifier:   6B:01:F8:7F:D2:C5:D9:80:5B:E0:CC:89:6C:FA:03:52:A4:D7:77:C7
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       019E1E3554980EFBA8D882F8EB0468B52B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 22:01:11 +0000
Manifest this update:     Tue 12 May 2026 22:01:11 +0000
Manifest next update:     Wed 13 May 2026 22:01:11 +0000
Files and hashes:         1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: jwdziDiwejgtQ8raxSSm1VPHep2Ba0hV2JV6FfG2g40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:54:98:0e:fb:a8:d8:82:f8:eb:04:68:b5:2b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: May 12 22:01:11 2026 GMT
            Not After : May 13 22:01:11 2026 GMT
        Subject: CN=6b01f87fd2c5d9805be0cc896cfa0352a4d777c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:59:77:52:91:f4:2b:83:d1:78:84:c0:39:
                    8f:ec:60:ef:a7:66:43:14:4d:39:00:07:be:84:80:
                    be:7a:a3:0c:3e:c3:55:a2:f3:74:32:15:f1:ed:dd:
                    b2:5b:34:02:dc:62:bf:fc:c5:d1:50:32:89:ec:9c:
                    d5:ac:c6:47:d5:6e:d0:61:dd:74:59:78:92:ad:42:
                    72:27:33:fb:38:57:53:8f:8a:10:ee:ad:0f:dd:c2:
                    93:0a:69:bd:2c:e7:32:f4:a8:20:12:06:03:20:e7:
                    3e:5c:fb:60:c5:34:5c:71:91:7a:c5:f1:be:6c:4f:
                    4c:ea:35:d9:35:54:f2:1d:63:a9:65:54:0a:2e:fb:
                    c6:63:d9:28:62:53:e6:ad:f1:73:06:62:d4:8b:56:
                    d4:f6:a7:eb:cc:80:87:03:0c:bd:2c:f8:03:d8:cf:
                    16:bf:f3:24:be:f9:ee:7c:de:0a:48:7a:95:79:5f:
                    12:b8:bc:51:00:92:cd:78:52:e2:af:3d:cb:67:07:
                    7a:0a:db:36:57:2d:8c:d5:3e:73:0d:5c:15:a6:ac:
                    a1:2d:ad:6f:89:81:32:3b:6b:78:c6:28:f2:e1:bc:
                    03:9d:86:ce:70:35:dd:3d:5d:72:2d:0b:8b:80:fb:
                    63:47:1f:62:54:7d:4f:31:22:99:51:6e:81:54:14:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:F8:7F:D2:C5:D9:80:5B:E0:CC:89:6C:FA:03:52:A4:D7:77:C7
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:28:39:89:aa:1f:b5:6f:0e:5d:31:e3:41:d0:0c:df:61:
         c8:f4:a5:b3:19:99:9c:c8:7c:cc:47:9b:a4:e5:1d:b1:67:f4:
         a0:37:36:a3:f6:d5:44:09:48:82:05:ba:82:15:4c:5a:bc:01:
         1f:4b:a0:8d:3b:a8:18:0d:4b:57:13:5f:1e:15:35:57:b4:86:
         3b:7f:18:14:a1:ae:8c:23:0a:1b:77:a3:a7:10:ee:50:a9:20:
         dc:72:9f:27:49:1e:80:ae:30:d7:2e:84:2e:b2:45:27:99:97:
         41:e1:9c:c1:29:15:1e:b2:d4:c0:d6:cc:1e:94:27:f4:3c:00:
         cb:60:90:fa:03:70:8d:ba:d0:32:37:2a:25:0a:38:de:0b:50:
         f9:90:f1:d7:f8:bb:7d:92:c5:be:56:5d:75:61:1c:de:68:93:
         95:72:75:24:a1:3e:18:b1:ea:e5:73:22:03:df:76:b5:06:3c:
         89:2f:0b:e9:72:fc:e5:01:0b:c4:01:f6:b7:49:28:05:03:32:
         6a:09:45:86:c3:cb:c4:b0:29:08:cd:a3:00:d7:3d:ca:87:18:
         ef:41:6a:15:1d:c2:34:d4:01:25:81:f4:bb:7f:5a:6d:d5:02:
         d4:56:25:43:6c:84:fa:ef:50:77:33:6f:07:88:36:97:d3:39:
         d0:ae:5f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNVSYDvuo2IL46wRotStKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi
NWQ3MmEwHhcNMjYwNTEyMjIwMTExWhcNMjYwNTEzMjIwMTExWjAzMTEwLwYDVQQD
Eyg2YjAxZjg3ZmQyYzVkOTgwNWJlMGNjODk2Y2ZhMDM1MmE0ZDc3N2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOJZd1KR9CuD0XiEwDmP7GDvp2ZD
FE05AAe+hIC+eqMMPsNVovN0MhXx7d2yWzQC3GK//MXRUDKJ7JzVrMZH1W7QYd10
WXiSrUJyJzP7OFdTj4oQ7q0P3cKTCmm9LOcy9KggEgYDIOc+XPtgxTRccZF6xfG+
bE9M6jXZNVTyHWOpZVQKLvvGY9koYlPmrfFzBmLUi1bU9qfrzICHAwy9LPgD2M8W
v/MkvvnufN4KSHqVeV8SuLxRAJLNeFLirz3LZwd6Cts2Vy2M1T5zDVwVpqyhLa1v
iYEyO2t4xijy4bwDnYbOcDXdPV1yLQuLgPtjRx9iVH1PMSKZUW6BVBQMUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsB+H/SxdmAW+DMiWz6A1Kk13fHMB8GA1UdIwQY
MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt
MWE5YWJhYjI0ZGM5LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5
LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3soOYmq
H7VvDl0x40HQDN9hyPSlsxmZnMh8zEebpOUdsWf0oDc2o/bVRAlIggW6ghVMWrwB
H0ugjTuoGA1LVxNfHhU1V7SGO38YFKGujCMKG3ejpxDuUKkg3HKfJ0kegK4w1y6E
LrJFJ5mXQeGcwSkVHrLUwNbMHpQn9DwAy2CQ+gNwjbrQMjcqJQo43gtQ+ZDx1/i7
fZLFvlZddWEc3miTlXJ1JKE+GLHq5XMiA992tQY8iS8L6XL85QELxAH2t0koBQMy
aglFhsPLxLApCM2jANc9yocY70FqFR3CNNQBJYH0u39abdUC1FYlQ2yE+u9QdzNv
B4g2l9M50K5f2w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:34 2026 by rpki-client