Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File:                     beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier:          M75/xuu4+T6pC8phNMyrmloxh43ymF74a2rjAGrLtbM=
Subject key identifier:   6E:42:26:E7:AF:C4:D0:C2:E3:D6:B0:9B:C1:2B:38:F4:0E:E9:5E:51
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer:       /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial:       019F94A51C71A2650F12611ECECADE0EC62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 15:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 15:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 15:01:16 +0000
Files and hashes:         1: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (hash: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8=)
                          2: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (hash: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4=)
                          3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: DNrMydFk8QdEtwawEEmF4gaXtGDQLSCFC2iWlmQBP/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a5:1c:71:a2:65:0f:12:61:1e:ce:ca:de:0e:c6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
        Validity
            Not Before: Jul 24 15:01:16 2026 GMT
            Not After : Jul 25 15:01:16 2026 GMT
        Subject: CN=6e4226e7afc4d0c2e3d6b09bc12b38f40ee95e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:93:74:9a:0e:8c:11:01:97:3f:8f:dd:74:
                    ea:21:56:56:46:17:dc:ed:9c:d3:af:8f:0d:f1:6c:
                    0a:7b:bf:9f:6d:6b:80:81:6d:0f:40:97:81:01:99:
                    57:e0:28:c6:e9:de:b5:ee:9a:b5:49:0a:c5:a7:e7:
                    1f:60:5c:44:68:76:9d:d0:92:d1:c6:5c:be:c6:1d:
                    1a:20:0d:0a:ee:e7:3a:6f:38:77:54:50:a5:4e:d1:
                    53:05:92:cc:9d:c4:76:53:23:d4:9c:4e:c5:58:81:
                    30:86:38:8f:d5:2f:c2:98:cc:88:11:24:d2:e9:08:
                    a0:95:08:6a:97:25:25:6f:e5:7d:85:3d:c1:5c:35:
                    07:6e:b5:51:9f:9f:b3:a6:66:8f:66:52:e5:10:65:
                    8f:c6:21:32:f8:9f:a7:38:00:a7:c0:25:96:96:44:
                    e3:fb:b6:2f:6a:54:6e:e7:d2:3b:44:01:da:4e:f1:
                    90:16:7b:3e:73:6f:aa:8d:00:78:8a:60:f2:65:f9:
                    10:10:ef:ac:c7:83:42:db:74:76:6a:d2:b7:ef:90:
                    c2:48:12:17:3a:e7:65:56:a0:6e:c2:b9:9e:1d:fa:
                    e2:4c:aa:02:3a:1b:3e:78:0c:19:1d:0c:e6:90:17:
                    af:6f:11:4f:67:dd:13:8e:2c:c6:ff:9e:b3:4b:bc:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:42:26:E7:AF:C4:D0:C2:E3:D6:B0:9B:C1:2B:38:F4:0E:E9:5E:51
            X509v3 Authority Key Identifier:
                keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:fa:d8:49:86:09:e6:fa:b4:f9:bf:6e:b9:26:11:ec:0a:
         ad:1c:41:02:d5:f3:3a:f4:02:78:29:64:9f:18:27:4b:6c:c3:
         5c:ae:13:b6:17:a5:40:a2:f5:1c:12:c1:9e:13:9f:08:70:a3:
         56:d1:70:e8:22:89:c9:86:06:70:8d:34:08:33:e1:8c:e8:75:
         51:e9:e6:e6:ae:f9:56:b0:50:e9:e4:96:e1:ae:81:27:99:d6:
         81:84:d5:d5:b5:17:64:72:7d:cf:da:9f:71:db:af:22:1c:c9:
         9b:1a:5e:d6:d3:8d:20:87:db:08:a8:c8:26:0b:05:ea:e8:a6:
         4f:48:8d:08:74:1c:8a:ea:17:91:76:e9:ea:2d:44:31:20:ef:
         eb:6f:04:db:4b:73:bb:87:ef:2c:ac:dd:af:89:6f:a0:45:b6:
         5a:56:1c:f8:db:b3:05:92:01:e1:7d:94:c4:ae:ef:f2:46:d4:
         d3:d2:12:23:60:5e:be:be:0f:35:48:d9:73:d1:78:ee:c2:c4:
         53:bb:06:c1:5a:36:ab:52:13:21:33:b8:6c:1b:02:30:1c:a1:
         d3:3f:6e:0e:f9:f0:c2:10:5d:65:cd:0a:06:11:2f:90:5f:f9:
         02:62:94:82:d3:4e:6a:2f:30:2b:6c:81:df:c5:8b:8b:54:9a:
         3d:6d:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:31 2026 by rpki-client