Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File:                     _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier:          TRqE0d+HgPnKbC0eUSeQq5v2nNxuIeo1uzM8O9I+Fcc=
Subject key identifier:   49:09:51:C8:6C:D7:CE:05:1E:D8:8C:FF:17:41:86:CB:66:C2:DD:97
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer:       /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial:       01A0CB22D18AE9DB61F5CF863E3B1210A7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number:          065E
Signing time:             Tue 22 Sep 2026 22:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:51 +0000
Files and hashes:         1: R_QXAd0ljQo11gwzi4iQ8aziD6Y.roa (hash: of6gwgr1hLSBTBKNTi/EQcBYEpZYdsoorOxLzo/9c8g=)
                          2: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: 0xG6XLad3efEnBsJQ/CHT/FXp/7DcBlCl5e4chHLYUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:d1:8a:e9:db:61:f5:cf:86:3e:3b:12:10:a7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
        Validity
            Not Before: Sep 22 22:00:51 2026 GMT
            Not After : Sep 23 22:00:51 2026 GMT
        Subject: CN=490951c86cd7ce051ed88cff174186cb66c2dd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:e9:54:85:42:33:bd:97:4e:17:2e:97:98:
                    37:22:46:ef:67:4e:6b:be:85:b5:1d:d7:26:ce:3d:
                    dc:c6:98:74:20:f8:60:ca:9a:b6:f7:6f:ea:73:b4:
                    f8:6c:49:cc:94:f5:8b:7e:f5:2c:61:3f:23:d9:73:
                    0d:c1:8e:c5:8a:8b:44:29:98:6a:c7:78:3d:14:df:
                    a0:01:7a:5a:69:53:88:a5:70:d1:8c:7c:3a:b0:b2:
                    1a:58:6d:57:22:2d:67:6a:1e:65:a7:49:b5:29:97:
                    d8:52:16:8d:fa:d2:1a:73:f1:4d:3b:2a:5e:ac:b1:
                    1b:10:2e:78:6c:ab:d3:38:1a:1a:f2:ed:89:fe:40:
                    79:c6:72:39:56:f7:9d:40:fe:55:2a:74:14:fb:f7:
                    85:c3:ab:d3:c2:31:ed:dd:64:7e:70:59:17:e6:8b:
                    92:3b:c1:f9:78:d7:18:e5:4e:27:3e:db:77:1e:1b:
                    79:1f:b0:b1:ee:95:0c:7f:3f:3e:1b:6a:fe:7d:6b:
                    07:8b:3f:8c:68:bf:eb:c4:7d:42:b0:9d:7f:58:cb:
                    00:f1:3d:84:96:39:b5:bf:4f:4d:f4:fb:74:1a:12:
                    06:23:48:0f:a3:c2:11:e8:7f:1f:26:fb:5a:18:09:
                    b2:a6:d0:e7:01:f3:f7:ad:db:06:f7:19:77:3d:c0:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:09:51:C8:6C:D7:CE:05:1E:D8:8C:FF:17:41:86:CB:66:C2:DD:97
            X509v3 Authority Key Identifier:
                keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:64:92:70:09:e6:f0:4c:7a:63:2c:27:be:37:5f:fb:8a:a5:
         67:35:bd:8d:30:ac:91:8f:86:2e:f9:23:66:b2:9a:f2:4a:35:
         c2:5d:05:ae:56:56:75:20:8f:fb:1f:95:a0:b0:2f:62:1b:16:
         41:fe:82:55:69:bd:0d:ab:7f:5e:3a:f1:8d:20:77:38:c8:8c:
         87:04:8f:96:56:5a:30:4a:ee:be:11:72:d1:5c:a5:05:8c:01:
         46:3d:4c:0c:57:c9:a3:c7:35:df:a8:45:32:34:46:bd:16:09:
         7c:c0:16:e5:2c:79:74:7e:36:5f:3d:c5:0a:4b:3a:3c:c5:ed:
         aa:19:f3:3d:db:10:d2:2d:d4:60:00:b9:89:92:50:77:b6:97:
         71:71:61:06:cb:ff:0e:60:9d:8d:39:ee:e4:bc:0a:c8:d3:19:
         e5:e3:5b:25:61:12:14:1f:34:ba:c6:8e:f6:70:22:f5:af:ce:
         8e:42:c3:d4:48:c2:29:e0:b5:fb:c6:31:f3:4a:97:e9:97:d1:
         94:45:4e:09:01:2a:a0:56:52:55:fd:1c:ed:04:fe:be:b7:24:
         fa:26:73:53:ee:b1:af:77:e5:16:c0:31:23:c8:76:da:87:2d:
         5a:51:d0:4b:c5:eb:d9:71:20:d2:e9:65:49:5e:1f:0a:ea:c0:
         9d:7e:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:37:54 2026 by rpki-client