Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
File:                     bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json)
Hash identifier:          rBhscQPA52bNFpiAMGTVuo54DlY94VJMw0UxjOI9jLY=
Subject key identifier:   EE:0B:5C:BC:F1:9D:CB:C4:DA:51:60:EF:74:49:AB:3B:3E:EE:79:D1
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Certificate issuer:       /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial:       019F93FFCFFD08B503ACA771F79F936BA0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 12:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:43 +0000
Files and hashes:         1: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (hash: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA=)
                          2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: 18FQ5wvXcLpfbP2HQ5kNl6f4H3yqjP3Z3nFKYqqOxIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:cf:fd:08:b5:03:ac:a7:71:f7:9f:93:6b:a0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
        Validity
            Not Before: Jul 24 12:00:43 2026 GMT
            Not After : Jul 25 12:00:43 2026 GMT
        Subject: CN=ee0b5cbcf19dcbc4da5160ef7449ab3b3eee79d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:07:f7:df:07:ef:d1:cb:50:34:cd:a0:f1:
                    8b:c5:4c:56:54:d3:29:c3:e7:11:1e:ff:3a:2d:18:
                    e4:93:6a:56:33:8b:e8:fa:26:fb:f2:61:63:d1:4a:
                    f5:dd:47:04:79:d3:87:65:e6:a8:6d:aa:33:cf:59:
                    7d:98:51:7b:08:e8:54:4d:3a:64:41:51:af:77:06:
                    eb:28:f1:0d:0d:66:63:b5:69:8e:5f:82:af:c6:be:
                    7d:4a:bf:5e:5c:2f:f8:51:84:d4:50:fe:40:d1:2a:
                    3f:66:29:ec:44:32:0b:45:98:38:5a:1e:4e:45:62:
                    26:4d:51:69:4c:99:a7:ed:7e:5c:b4:65:c8:43:8e:
                    87:73:be:83:1c:b1:5f:e0:2e:89:37:f4:ac:d2:c4:
                    97:cd:78:bb:65:fb:98:92:95:b9:58:da:09:20:1c:
                    34:1e:83:94:70:a4:d1:1a:78:87:00:b7:b8:e8:0b:
                    90:50:e4:6d:49:62:39:07:f8:3c:29:68:3f:7c:83:
                    f2:ff:c3:bd:2d:47:c7:17:db:63:89:32:04:2d:f4:
                    a3:ca:d6:ac:d3:af:14:79:06:a6:2e:3d:2c:3a:c0:
                    a3:de:cf:56:49:3f:34:d2:b0:d0:d8:1b:3f:02:07:
                    81:51:ea:e3:82:b9:ba:8e:77:74:8d:a1:22:c4:51:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:5C:BC:F1:9D:CB:C4:DA:51:60:EF:74:49:AB:3B:3E:EE:79:D1
            X509v3 Authority Key Identifier:
                keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:94:82:5b:bc:e4:48:f7:b5:f3:28:7e:d9:be:95:11:ae:
         28:9a:f4:08:9a:29:fe:af:d1:a2:99:2b:c9:99:70:91:0c:dd:
         e2:3f:63:84:78:57:7f:27:e8:da:8d:1b:a0:cd:2f:22:ff:0c:
         e6:95:cc:70:84:2e:12:88:f3:60:69:c7:7b:bc:5a:e2:de:e0:
         6a:78:df:5e:e0:99:69:ec:fa:0d:87:12:13:62:3c:12:2d:52:
         df:c4:a3:c6:5c:8e:7e:a0:65:cf:c9:fd:23:d7:ff:a0:a8:41:
         37:8c:71:97:b9:f6:5f:87:b9:f4:fd:a9:58:0f:c2:04:60:b7:
         ef:34:cc:79:47:e1:d2:02:2c:cc:cc:b3:f9:0e:f2:19:70:99:
         44:35:84:7c:72:dc:45:50:12:0e:16:38:bb:93:21:e1:40:ee:
         10:8d:15:7a:2e:7a:68:60:04:71:79:5d:c3:34:e6:d3:da:25:
         0b:c4:8d:09:00:5b:f2:b7:1c:e0:62:7b:81:79:38:90:02:5c:
         8b:34:08:d7:6e:20:b7:76:66:27:27:84:b8:9f:9b:dc:0f:a2:
         ee:08:46:3d:17:a9:90:0b:8d:37:be:04:dd:6c:6e:8f:6f:fb:
         ff:c7:b8:5e:81:99:0c:e5:ad:0d:c4:ad:01:a5:8c:ad:0f:a1:
         ae:51:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:22 2026 by rpki-client