Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File:                     beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier:          mmC+wJdDF7sJTSolpRPgU8PYf9ay11200TqFSS+uU2s=
Subject key identifier:   2E:95:32:74:CD:81:27:81:21:E4:2C:63:B7:84:61:2B:D1:3E:96:6D
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer:       /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial:       019F8F110584284FD762B59BA74792DBB0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number:          0192
Signing time:             Thu 23 Jul 2026 13:01:25 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:25 +0000
Files and hashes:         1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
                          2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: LXg3OmLf2/TakQgX3niqABkWPuLyV99Zallv6drZ//I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:11:05:84:28:4f:d7:62:b5:9b:a7:47:92:db:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
        Validity
            Not Before: Jul 23 13:01:25 2026 GMT
            Not After : Jul 24 13:01:25 2026 GMT
        Subject: CN=2e953274cd81278121e42c63b784612bd13e966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:c2:f5:48:6d:39:7d:c3:89:08:63:2a:30:
                    50:03:03:3f:a8:90:47:79:0d:7c:a5:67:25:ef:e1:
                    4a:7b:67:c1:2c:e0:7b:c4:67:58:94:77:49:89:12:
                    84:69:d1:23:bd:6c:9f:0c:9a:ba:a0:67:38:82:7d:
                    74:dd:27:f6:b5:99:76:73:e8:1e:25:5e:45:ca:56:
                    58:c3:f4:ad:c0:c8:35:9b:0c:11:fe:33:48:f3:24:
                    13:62:a8:00:e4:45:41:e2:8c:49:d0:b2:b9:cb:02:
                    5e:b0:ce:c3:b3:0c:89:fe:14:fd:cf:ca:e5:8d:37:
                    87:c7:b5:ba:9b:b4:ef:37:0b:de:ed:db:13:28:4b:
                    95:10:64:b3:07:a2:61:e2:1e:27:cb:4f:ef:94:e0:
                    dc:32:ee:63:10:83:fa:86:69:58:4a:bc:e4:91:46:
                    51:7d:12:f2:bf:88:60:89:f7:d8:4b:15:0d:b5:70:
                    57:f6:ec:eb:f9:50:9c:be:86:3f:bc:54:e4:e4:73:
                    fe:2f:4e:4b:73:e9:22:50:95:6e:5d:80:bf:1f:45:
                    d2:3c:df:b1:52:a4:e9:b0:48:93:ba:e1:ad:c1:b9:
                    b5:f9:81:03:53:57:f1:e1:e2:9e:42:62:6a:57:dd:
                    c4:70:b5:1c:7d:94:72:ae:7c:cf:94:ce:e2:75:ca:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:95:32:74:CD:81:27:81:21:E4:2C:63:B7:84:61:2B:D1:3E:96:6D
            X509v3 Authority Key Identifier:
                keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:ee:d3:18:91:5f:16:47:ec:2d:cb:88:a7:6e:e8:3b:b7:
         de:98:de:72:c0:aa:a9:4a:63:47:2d:ca:5c:c5:0c:c7:50:1d:
         60:50:b7:4e:3a:a9:c3:c1:a2:47:c2:00:60:d6:3b:4f:f3:31:
         f6:7c:d5:69:42:7f:90:6c:f1:70:06:7a:02:77:93:bc:c6:4b:
         39:74:f5:95:ef:88:a7:cb:a0:76:6e:cb:b3:dd:b4:2c:ad:49:
         ab:ce:1c:dc:df:85:45:01:54:1c:9d:66:8a:b8:14:c6:2c:e7:
         b7:97:6c:8c:ce:25:0e:78:61:bc:51:1d:59:62:15:88:58:58:
         69:7f:99:4e:2c:de:d5:37:71:f8:1d:e1:d0:14:2d:18:42:20:
         01:46:4d:4f:fe:bc:5a:fd:a5:27:7e:37:49:9c:13:15:e1:bc:
         46:cf:81:a5:1c:d5:d9:38:a3:ff:b2:32:8f:54:ba:a5:7b:38:
         e5:c5:f5:83:2b:fa:49:e8:98:41:46:46:47:48:0e:bc:13:ce:
         c2:46:a5:9d:e0:ac:38:b7:ed:2a:f8:23:6c:c3:92:c7:ec:28:
         b6:d5:2f:1d:af:0b:c0:64:da:6c:48:e4:8a:e3:db:de:b9:3b:
         63:1a:e4:cd:07:02:cc:17:ed:a1:6f:38:37:5b:bf:e9:33:5e:
         65:a2:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:34 2026 by rpki-client