Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
File:                     bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json)
Hash identifier:          1k2i1RwECwuvcGcySl5Jn9JnzkF+jfkMwWSLVt74VGM=
Subject key identifier:   EB:B7:64:EC:CA:F6:4F:C5:14:4F:3E:5F:20:E8:D1:3B:F6:CD:E7:59
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Certificate issuer:       /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial:       019E1F483994EB11B4EDA517C44327C28362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 03:01:27 +0000
Manifest this update:     Wed 13 May 2026 03:01:27 +0000
Manifest next update:     Thu 14 May 2026 03:01:27 +0000
Files and hashes:         1: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (hash: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA=)
                          2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: b4gDsmkmwPGSWliWZEWyzPfyAQBTCi4+K1C6DBurWrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:39:94:eb:11:b4:ed:a5:17:c4:43:27:c2:83:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
        Validity
            Not Before: May 13 03:01:27 2026 GMT
            Not After : May 14 03:01:27 2026 GMT
        Subject: CN=ebb764eccaf64fc5144f3e5f20e8d13bf6cde759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:01:40:7c:8c:d8:48:6d:52:31:be:6e:38:
                    28:0d:08:b8:82:f3:31:18:b9:f9:7c:9c:59:25:2f:
                    05:1f:65:00:2a:d0:a1:6f:1f:c2:f2:48:ec:80:64:
                    6c:e0:09:89:e0:95:68:a0:10:44:cf:88:8e:bd:ff:
                    77:7a:04:92:76:b0:04:b8:76:4b:f7:bf:2f:3d:5b:
                    8a:71:03:9d:ca:05:95:b4:f4:89:c4:b7:c1:dd:c1:
                    43:59:82:4e:e1:6e:63:d8:e5:b5:1b:f0:86:6e:1d:
                    15:40:0e:d5:6d:38:4b:0d:4b:20:8a:cb:e0:6f:66:
                    46:b6:0e:40:c4:8a:2d:e4:7c:29:45:b8:71:78:09:
                    7f:89:24:8e:47:89:38:76:0f:b8:a7:53:f2:70:32:
                    1f:92:0c:49:41:7b:e0:55:69:e3:2a:d7:f4:a6:ac:
                    a2:88:a6:07:4e:de:3f:a6:be:72:78:80:ce:21:22:
                    4b:63:c8:78:56:19:f9:04:83:ac:e7:c4:11:ad:06:
                    9d:df:11:49:72:8b:c5:e6:9b:d5:78:c5:20:81:12:
                    a9:12:67:ce:69:36:5c:54:ff:56:a9:b6:83:61:65:
                    97:77:66:83:70:a0:09:63:b1:a0:8c:c2:9c:64:d9:
                    5b:22:94:39:13:2b:5d:de:4c:dc:1b:35:d5:62:8b:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B7:64:EC:CA:F6:4F:C5:14:4F:3E:5F:20:E8:D1:3B:F6:CD:E7:59
            X509v3 Authority Key Identifier:
                keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7b:97:91:91:73:2b:57:99:2c:d3:3e:2e:e3:69:f9:04:1e:
         be:db:52:e6:21:1e:ab:7a:c8:d1:a6:8f:0e:46:0e:97:d9:d6:
         f3:62:72:06:42:d1:55:81:20:ed:cc:45:50:c3:a5:36:a4:a7:
         d9:bb:dc:38:7c:24:d8:2d:34:d9:1b:f1:13:04:7c:12:07:29:
         ba:7d:a2:fe:4a:59:24:73:b5:d9:00:56:1c:a0:0d:47:d7:a1:
         57:2b:a9:6e:5b:4b:dc:77:32:d4:e8:69:e5:b4:df:7b:ba:b2:
         95:7e:68:86:2b:22:26:a0:72:23:b5:61:38:5c:6b:54:d7:3a:
         ab:ec:fe:7f:25:07:fe:a1:16:3f:66:cf:39:f4:14:df:90:85:
         cd:f2:df:3a:98:34:f1:41:57:05:a0:a9:9d:0c:f9:b8:03:df:
         f2:ad:64:d0:55:15:cb:d4:37:22:00:86:1d:66:48:77:7a:81:
         e4:82:e7:17:22:0c:87:8e:b8:0f:83:f9:7c:af:8f:b8:f9:d6:
         74:88:99:b3:48:8b:cc:a7:76:a0:ad:32:e9:c2:15:a7:35:c2:
         83:d3:6e:fc:35:c3:9d:6f:47:1e:fd:87:e0:e6:f4:e0:4a:3b:
         8f:51:1c:d8:12:0a:98:0b:19:e5:67:5a:99:3b:a9:25:9a:c7:
         9e:6a:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:42:52 2026 by rpki-client