Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File:                     BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier:          wgz0kiHwTnbwIuXQcXAgMOGHvcbTEiOhK8jn1LXO9YE=
Subject key identifier:   62:D0:52:4E:73:5C:64:F5:60:D1:3F:B8:CC:6F:F4:86:DF:62:21:7D
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer:       /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial:       019F9211A35D92FF61B381EC73E94FEA18E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 03:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:56 +0000
Files and hashes:         1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
                          2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: B+wDZdEaaetwx3+8j/xOOkMTEXhtMpfqHuYPtnp6IC0=)
                          3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
                          4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:a3:5d:92:ff:61:b3:81:ec:73:e9:4f:ea:18:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
        Validity
            Not Before: Jul 24 03:00:56 2026 GMT
            Not After : Jul 25 03:00:56 2026 GMT
        Subject: CN=62d0524e735c64f560d13fb8cc6ff486df62217d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:b1:c9:2d:c9:ca:ed:16:b6:af:f1:ce:29:
                    3b:62:1d:91:7a:60:21:87:d3:fb:87:e2:98:03:5f:
                    88:90:ca:ed:82:bb:36:51:d6:63:d6:8f:54:61:1e:
                    28:f0:32:df:b3:b4:bf:a5:1f:0d:4d:f0:22:56:84:
                    9d:01:e6:46:c0:8d:62:79:73:ea:0c:0d:6d:fe:34:
                    a0:5c:5d:25:6f:74:89:70:93:c0:b6:1d:64:05:d6:
                    0b:e1:c2:bf:06:5e:4c:ce:75:f9:91:44:df:e0:3a:
                    11:f5:c3:34:9d:6d:c0:ff:bc:15:da:55:ce:a7:b3:
                    7c:5b:c2:ea:02:fb:af:e3:fd:46:88:41:8d:64:2f:
                    89:30:c1:47:c4:40:c1:04:5c:67:cb:d7:14:2c:4a:
                    f7:76:89:22:fb:80:ec:ab:43:fd:2d:6e:17:8a:15:
                    f4:bd:1f:ca:be:ba:ac:ee:55:96:de:06:6b:7b:3e:
                    7b:a4:77:02:af:e9:76:8f:2f:f8:27:45:62:0d:6b:
                    50:a2:04:eb:77:34:31:10:e7:19:e4:d3:63:fc:a9:
                    41:4e:bd:cb:71:09:f1:77:9e:a7:9b:99:42:07:86:
                    85:39:a3:9d:27:ed:96:0a:21:22:dd:d5:05:50:db:
                    b0:0a:d0:ed:44:a6:a4:ff:97:c8:51:9c:a4:db:51:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D0:52:4E:73:5C:64:F5:60:D1:3F:B8:CC:6F:F4:86:DF:62:21:7D
            X509v3 Authority Key Identifier:
                keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:65:12:16:6e:e8:dd:e4:ad:37:1f:c6:5e:77:40:8e:ad:
         f9:a0:95:60:1b:84:e6:4b:5e:7a:ed:4f:1a:4e:de:34:e9:25:
         28:33:4b:7d:e7:1d:e0:72:49:b2:bf:f2:26:4f:ba:f8:91:4a:
         b1:2d:15:e4:11:f3:d4:cf:29:67:8d:85:9f:14:0a:62:7f:1d:
         bb:84:60:58:1e:3e:6b:fe:a7:bf:1d:81:a6:f3:69:ff:f5:c1:
         46:d5:e1:67:48:fb:4e:ee:c7:66:48:26:8f:3e:3d:38:b8:70:
         ad:41:ef:9b:60:77:0b:7d:1c:33:ee:78:c1:15:87:34:22:55:
         21:f6:c7:ec:9c:98:c0:96:d8:c0:c2:49:25:86:22:79:63:d9:
         db:cf:8b:e7:0e:f3:24:4e:09:eb:17:bb:82:55:a4:a3:94:ee:
         d3:15:de:ad:c9:f3:5b:1c:43:3a:2a:21:63:e0:0a:99:08:18:
         d9:0c:8e:0b:3c:5f:aa:a7:4b:5f:a8:f4:86:4d:eb:e4:31:a3:
         2b:8a:4b:0b:c8:1e:6b:8a:4f:a9:40:93:11:a3:57:66:5f:ca:
         42:ff:ab:8e:30:e0:ca:26:df:c7:e8:c8:d0:98:af:dc:ad:16:
         40:cf:f7:fe:32:70:33:36:14:67:40:98:1b:40:e9:8e:92:78:
         3b:33:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:32 2026 by rpki-client