Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File:                     BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier:          Mx28iH7nuiT1uXD1EDr8yZVYz/50B7xmcJmqhVlL68M=
Subject key identifier:   CB:63:41:1E:7F:41:DD:DA:0C:97:4A:75:D0:FF:00:B4:89:AC:24:13
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer:       /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial:       01A1DFF14C8C6D66F561A7D459176652B3EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number:          1190
Signing time:             Sun 15 Nov 2026 16:01:35 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:35 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:35 +0000
Files and hashes:         1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: qPU7q4RgjSEnYCd+bX/80Cc9Vr/gNmmqizsLNKEEoQ0=)
                          2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:4c:8c:6d:66:f5:61:a7:d4:59:17:66:52:b3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
        Validity
            Not Before: Nov 15 16:01:35 2026 GMT
            Not After : Nov 16 16:01:35 2026 GMT
        Subject: CN=cb63411e7f41ddda0c974a75d0ff00b489ac2413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:00:a9:35:df:cd:9c:3a:9a:db:dd:e9:b6:
                    99:c7:ab:31:2a:e4:f2:54:37:e8:a4:af:2f:5e:48:
                    70:22:26:83:db:fd:f4:ec:82:42:48:40:94:7c:6b:
                    7f:91:30:b4:bc:a9:a0:f4:eb:95:62:f6:ad:7e:b8:
                    dd:66:f6:4c:c6:8f:0f:3a:5c:65:5d:7a:7f:e5:2b:
                    4e:cd:2e:ba:c4:6e:96:f9:9c:c0:76:37:0c:14:2e:
                    e3:6b:1c:44:41:f0:4e:0b:c6:1a:85:1a:cd:d8:26:
                    50:a4:0f:a1:5c:c7:58:35:1f:2a:e3:13:02:49:e7:
                    c6:89:92:83:5b:c2:3e:a3:5b:04:92:d8:ee:a9:cf:
                    35:1b:b4:ee:10:19:d4:c0:fa:90:14:5f:c4:45:f0:
                    62:62:4d:e7:96:8b:86:df:eb:95:79:72:e3:aa:11:
                    59:ff:aa:fb:21:e2:04:e2:46:89:32:1c:65:63:a6:
                    4a:ac:d4:d3:cb:ba:fb:62:d4:3b:70:4f:ac:3b:2d:
                    e5:2c:01:21:71:81:a6:f2:c4:58:8a:b3:ad:7d:83:
                    3b:dc:c5:95:e5:a5:74:6c:c9:7a:7e:a0:0f:57:4d:
                    64:15:75:bf:3a:08:eb:b5:b6:76:3b:06:dc:37:3d:
                    4f:01:8c:1d:e3:18:a9:28:61:c9:90:a9:f9:78:a3:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:41:1E:7F:41:DD:DA:0C:97:4A:75:D0:FF:00:B4:89:AC:24:13
            X509v3 Authority Key Identifier:
                keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:70:2c:04:94:90:f5:87:36:5b:f3:15:b8:01:ca:49:3c:
         4b:24:38:b2:1a:d6:2c:bc:ec:0b:44:9c:8e:9b:be:0c:4e:04:
         0d:c1:45:34:41:ea:70:db:81:50:ae:7d:39:6f:49:95:ce:6e:
         d0:c8:39:5a:f3:6f:84:10:19:12:ff:0e:1d:1e:7a:4c:6e:16:
         f2:52:8e:c5:8c:75:8c:9f:68:fa:d3:61:02:b7:5c:c5:6f:9b:
         bc:ef:44:b6:8d:e6:fb:3d:7b:fd:16:b9:7d:4b:2c:3a:e7:e7:
         9e:f4:94:d2:71:a3:3f:07:e9:1a:b6:03:c7:d7:f3:a0:4e:ba:
         6f:00:90:8b:5f:25:85:91:d6:0b:c9:3d:80:94:b9:d2:84:54:
         17:6d:d2:1a:5f:85:a9:a0:54:24:75:9c:75:97:53:91:d4:41:
         f0:0b:28:5d:2c:15:2d:28:15:51:e0:d9:3b:f8:de:f2:04:b5:
         5f:14:56:98:d6:95:48:20:17:7d:d4:76:84:83:95:75:ee:f1:
         02:ac:29:7e:18:73:cd:91:09:5c:f8:87:f7:a4:44:a4:8f:e1:
         4c:38:35:38:61:89:03:b6:f9:12:01:85:cb:95:c7:22:96:7d:
         54:d1:e6:01:08:7a:ab:6d:ce:e6:db:98:d4:fb:61:a1:55:20:
         54:cc:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:24:12 2026 by rpki-client