Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File:                     BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier:          ix8BAgzG7/1y4CcTJQItJVyTOv9chrgnSiy+ybGtkw4=
Subject key identifier:   DB:43:F1:DB:5E:1D:31:E9:F2:28:1E:DF:57:A9:29:25:45:C3:ED:92
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer:       /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial:       247F42183061F6ABB2C59F03E6EF60210FB07505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 09:14:30 +0000
Manifest this update:     Wed 23 Sep 2026 09:09:30 +0000
Manifest next update:     Thu 24 Sep 2026 11:38:30 +0000
Files and hashes:         1: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: AY5jeDtiMZ42rPIXrfsmymPEFr/jHYiVkHUsElopHrQ=)
                          2: AS11967.asa (hash: qrZnTIDpiG9un0qsZjyzIzrI+E4EXxLiTHN5tO2HHvI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7f:42:18:30:61:f6:ab:b2:c5:9f:03:e6:ef:60:21:0f:b0:75:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
        Validity
            Not Before: Sep 23 09:09:30 2026 GMT
            Not After : Sep 24 11:38:30 2026 GMT
        Subject: CN=DB43F1DB5E1D31E9F2281EDF57A9292545C3ED92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:23:dc:d7:bd:87:5c:91:eb:e2:ed:1a:05:
                    5c:57:43:0d:d6:a6:90:13:e4:5d:46:a5:90:c7:b8:
                    7d:27:a3:a4:b4:79:ce:bc:8c:34:a5:35:cd:57:06:
                    0e:75:61:aa:5c:13:b5:01:44:38:a8:e4:7c:89:82:
                    f2:47:28:19:58:a8:b7:72:5b:66:08:cb:2c:9f:b2:
                    0a:b1:a5:9d:bd:23:e8:42:32:83:2d:30:6e:5a:8d:
                    da:19:76:a9:3b:ce:e0:36:e7:07:9a:a9:49:1d:f6:
                    2f:3c:be:e8:54:88:31:9f:8e:33:85:b8:47:cd:7c:
                    10:93:d6:15:3a:1e:fc:1d:d7:6c:41:b9:ea:f4:c6:
                    6d:5d:a4:e7:9b:6f:8f:76:07:38:55:9e:b2:e4:8b:
                    3b:d7:8f:1c:1b:01:d6:67:4a:65:9c:c8:5d:76:8f:
                    d7:a7:5f:de:1e:7c:b8:6d:ae:32:e6:09:f0:9e:24:
                    ff:bf:60:16:64:50:5e:5f:73:58:37:09:68:47:62:
                    0b:20:b1:77:05:58:df:37:e9:11:19:69:b8:39:ec:
                    9c:af:69:2b:29:38:2f:71:6c:f7:d5:d9:b5:29:16:
                    7e:5c:4a:e3:2d:0e:89:d3:1b:11:ce:35:29:44:3b:
                    64:19:e1:e1:72:0d:c7:e4:c5:c5:10:6e:5a:46:54:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:F1:DB:5E:1D:31:E9:F2:28:1E:DF:57:A9:29:25:45:C3:ED:92
            X509v3 Authority Key Identifier:
                keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fc:b5:4f:a7:92:59:4d:d9:53:ba:ff:86:90:bc:a6:7c:30:
         31:d5:26:ed:7c:e2:f8:d3:cb:6f:4e:7a:7a:a6:5f:9a:d9:ca:
         c2:e6:c1:82:2a:54:6b:fb:e0:0a:5b:b3:f6:2f:4f:15:0c:9f:
         d8:6a:b2:99:5d:00:5e:41:75:f9:a6:2a:24:d4:92:50:23:38:
         3c:00:f4:b7:ed:d8:10:4d:46:c8:d2:f6:e9:87:0e:b7:ab:9e:
         5f:12:f0:d4:1c:4a:1e:3a:c5:a0:33:97:4d:c7:e9:12:e0:cf:
         ea:da:a6:4b:21:73:57:92:d2:74:00:77:65:66:3c:03:a4:51:
         83:7d:6c:f7:c3:12:05:f3:02:ff:d4:4e:f6:9c:24:63:8c:9b:
         d0:bf:f4:c9:fc:38:d8:42:85:34:b1:de:7e:e0:80:11:9a:db:
         7f:cb:a4:2e:e1:ed:85:1c:56:03:a1:58:4d:86:ea:ac:7d:5f:
         7a:aa:49:dd:e9:3a:7a:a0:26:dc:1d:a5:69:f7:11:28:ec:1a:
         81:17:ac:0e:4a:32:60:b9:8a:b2:ad:90:29:a8:85:ce:f9:f5:
         f3:ea:7f:2c:9a:9b:c3:dd:6d:89:7f:53:41:2e:80:8b:21:92:
         87:7f:a0:db:b4:b2:30:3f:26:75:4e:3e:74:b2:24:2f:fc:76:
         6f:11:e1:d3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJH9CGDBh9quyxZ8D5u9gIQ+wdQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmVjYzgzMGQ3ZTlhYzIyMjU2YWU3Y2VmNzdjNTgxZDg0
YTI1YjJlZDAeFw0yNjA5MjMwOTA5MzBaFw0yNjA5MjQxMTM4MzBaMDMxMTAvBgNV
BAMTKERCNDNGMURCNUUxRDMxRTlGMjI4MUVERjU3QTkyOTI1NDVDM0VEOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNhiPc172HXJHr4u0aBVxXQw3W
ppAT5F1GpZDHuH0no6S0ec68jDSlNc1XBg51YapcE7UBRDio5HyJgvJHKBlYqLdy
W2YIyyyfsgqxpZ29I+hCMoMtMG5ajdoZdqk7zuA25weaqUkd9i88vuhUiDGfjjOF
uEfNfBCT1hU6Hvwd12xBuer0xm1dpOebb492BzhVnrLkizvXjxwbAdZnSmWcyF12
j9enX94efLhtrjLmCfCeJP+/YBZkUF5fc1g3CWhHYgsgsXcFWN836REZabg57Jyv
aSspOC9xbPfV2bUpFn5cSuMtDonTGxHONSlEO2QZ4eFyDcfkxcUQblpGVI0VAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU20Px214dMenyKB7fV6kpJUXD7ZIwHwYDVR0j
BBgwFoAUvsyDDX6awiJWrnzvd8WB2Eolsu0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDBiMGVlOWMtOWM2My00ODFmLWI2ODItZTkxNDY5ZGQ2
NTkyLzAvQkVDQzgzMEQ3RTlBQzIyMjU2QUU3Q0VGNzdDNTgxRDg0QTI1QjJFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZzeUREWDZhd2lKV3JuenZkOFdCMkVv
bHN1MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMGIwZWU5Yy05
YzYzLTQ4MWYtYjY4Mi1lOTE0NjlkZDY1OTIvMC9CRUNDODMwRDdFOUFDMjIyNTZB
RTdDRUY3N0M1ODFEODRBMjVCMkVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvy1T6eSWU3ZU7r/hpC8
pnwwMdUm7Xzi+NPLb056eqZfmtnKwubBgipUa/vgCluz9i9PFQyf2GqymV0AXkF1
+aYqJNSSUCM4PAD0t+3YEE1GyNL26YcOt6ueXxLw1BxKHjrFoDOXTcfpEuDP6tqm
SyFzV5LSdAB3ZWY8A6RRg31s98MSBfMC/9RO9pwkY4yb0L/0yfw42EKFNLHefuCA
EZrbf8ukLuHthRxWA6FYTYbqrH1feqpJ3ek6eqAm3B2lafcRKOwagResDkoyYLmK
sq2QKaiFzvn18+p/LJqbw91tiX9TQS6AiyGSh3+g27SyMD8mdU4+dLIkL/x2bxHh
0w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:15:45 2026 by rpki-client