Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File:                     BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier:          BJxGebn3S0aqbeWtg+mx/UPm/zIcx5++0OUxCDjKMQ0=
Subject key identifier:   15:12:8D:70:CC:BB:03:B6:F2:31:81:80:5C:32:75:C2:45:54:56:CA
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer:       /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial:       019F90FF90F6E856003CABB926744A0C3936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 22:01:35 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:35 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:35 +0000
Files and hashes:         1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: V2u8dW9LmWCVJwCIVPzY+tpBja1hNYU5si8RquuP04c=)
                          2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:90:f6:e8:56:00:3c:ab:b9:26:74:4a:0c:39:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
        Validity
            Not Before: Jul 23 22:01:35 2026 GMT
            Not After : Jul 24 22:01:35 2026 GMT
        Subject: CN=15128d70ccbb03b6f23181805c3275c2455456ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:6f:60:ff:9e:03:e8:db:f4:d0:fe:f3:e0:
                    24:91:f5:88:cb:83:58:95:23:91:2a:9c:d2:d3:f3:
                    84:7b:dc:0e:91:29:6b:2f:db:03:a3:11:b1:d8:a0:
                    35:9d:b8:86:a6:23:8f:3e:03:6b:76:55:b1:0d:40:
                    8a:ba:97:85:0c:ef:18:65:37:37:77:8d:17:d4:5e:
                    54:0f:2e:47:68:cf:55:18:af:53:06:0f:3c:3d:6c:
                    38:60:8b:32:4d:6f:79:89:4f:0a:18:b7:f9:c2:da:
                    94:1e:01:3f:47:7a:f8:33:45:6c:12:6a:19:e4:c8:
                    fb:ea:7f:29:c0:39:8e:c8:cd:0a:86:16:bb:0d:38:
                    34:91:cd:69:38:5d:5e:3b:23:5f:0b:85:6f:dd:86:
                    a5:a5:a9:e7:00:f1:ab:d4:2e:21:8e:0e:d6:27:16:
                    ca:24:ba:7a:9d:b4:6a:3a:af:57:2f:f7:c1:f1:4d:
                    cf:2b:a8:b2:e7:0b:dd:f4:60:23:27:ef:1e:28:0d:
                    d6:a2:95:e1:5a:a7:42:40:89:27:97:04:b6:5e:4c:
                    4e:d9:73:7d:1d:b1:d7:79:f6:54:e0:84:04:22:84:
                    a8:12:69:12:50:5b:68:b7:3b:3e:67:cb:1f:16:90:
                    43:28:eb:44:be:62:0c:4b:60:3f:8d:61:48:55:36:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:8D:70:CC:BB:03:B6:F2:31:81:80:5C:32:75:C2:45:54:56:CA
            X509v3 Authority Key Identifier:
                keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:5b:8a:0c:ec:4e:6d:42:85:c5:97:4d:b5:e9:2d:31:bc:
         e3:52:3b:3d:30:af:9b:ca:d4:69:17:ee:0e:40:b1:25:7c:8e:
         4f:57:55:66:80:f4:7c:f3:9f:60:86:25:eb:12:c7:5b:95:83:
         95:f7:03:2e:f1:26:5a:64:a3:2e:0a:d5:ff:51:0b:d4:df:4b:
         01:46:f0:f2:bb:7f:0c:54:56:bf:bd:cf:7d:85:a1:ce:bb:ef:
         62:18:25:a9:97:96:c5:a0:f5:5b:e3:35:56:72:93:20:7a:d2:
         4e:96:0c:64:af:8e:a1:40:03:32:93:ce:0a:b8:13:97:87:88:
         33:dc:da:3d:7a:e6:07:8d:b6:2d:21:b7:e5:42:42:24:89:44:
         b4:19:34:d6:fb:dd:ac:9b:51:23:f0:5d:d6:1b:96:a4:8c:4f:
         0c:25:83:14:c7:39:14:28:d0:2c:75:16:d9:d7:f2:52:c0:0e:
         ec:25:f9:7c:5c:e8:f0:70:e8:29:55:1f:cd:1b:f4:ac:1d:ac:
         47:c0:42:e9:0e:a0:09:9e:ee:9c:5e:bd:4b:d4:bb:8a:f6:5f:
         1b:2d:db:5c:a8:39:22:8f:0d:a2:c9:e2:72:35:cb:6e:8f:0d:
         83:e7:02:71:8a:31:9a:b6:7f:ec:e1:8c:8e:34:71:6c:17:69:
         24:e3:ac:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/5D26FYAPKu5JnRKDDk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZhMzgwOGMyZDI4YzU3N2Y5OTc2YzYxY2QyMjZlMTg4
Njk1ZDgwHhcNMjYwNzIzMjIwMTM1WhcNMjYwNzI0MjIwMTM1WjAzMTEwLwYDVQQD
EygxNTEyOGQ3MGNjYmIwM2I2ZjIzMTgxODA1YzMyNzVjMjQ1NTQ1NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwatvYP+eA+jb9ND+8+AkkfWIy4NY
lSORKpzS0/OEe9wOkSlrL9sDoxGx2KA1nbiGpiOPPgNrdlWxDUCKupeFDO8YZTc3
d40X1F5UDy5HaM9VGK9TBg88PWw4YIsyTW95iU8KGLf5wtqUHgE/R3r4M0VsEmoZ
5Mj76n8pwDmOyM0Khha7DTg0kc1pOF1eOyNfC4Vv3YalpannAPGr1C4hjg7WJxbK
JLp6nbRqOq9XL/fB8U3PK6iy5wvd9GAjJ+8eKA3WopXhWqdCQIknlwS2XkxO2XN9
HbHXefZU4IQEIoSoEmkSUFtotzs+Z8sfFpBDKOtEvmIMS2A/jWFIVTZZZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUSjXDMuwO28jGBgFwydcJFVFbKMB8GA1UdIwQY
MBaAFARPo4CMLSjFd/mXbGHNIm4YhpXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgt
ZDU0NzIyY2NhODQ5LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgtZDU0NzIyY2NhODQ5
LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSJbigzs
Tm1ChcWXTbXpLTG841I7PTCvm8rUaRfuDkCxJXyOT1dVZoD0fPOfYIYl6xLHW5WD
lfcDLvEmWmSjLgrV/1EL1N9LAUbw8rt/DFRWv73PfYWhzrvvYhglqZeWxaD1W+M1
VnKTIHrSTpYMZK+OoUADMpPOCrgTl4eIM9zaPXrmB422LSG35UJCJIlEtBk01vvd
rJtRI/Bd1huWpIxPDCWDFMc5FCjQLHUW2dfyUsAO7CX5fFzo8HDoKVUfzRv0rB2s
R8BC6Q6gCZ7unF69S9S7ivZfGy3bXKg5Io8NosnicjXLbo8Ng+cCcYoxmrZ/7OGM
jjRxbBdpJOOsBQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:02 2026 by rpki-client