Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          KMjq8cHKpp7weFaeqYRBF/tySlPs+9iy24uUbaxuQTQ=
Subject key identifier:   96:E9:9A:02:AC:72:52:EC:94:91:48:53:DB:18:55:07:F0:BB:A2:11
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       019E303B396CFC1EC86A37306E10929F84BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          143C
Signing time:             Sat 16 May 2026 10:00:48 +0000
Manifest this update:     Sat 16 May 2026 10:00:48 +0000
Manifest next update:     Sun 17 May 2026 10:00:48 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: 10A8S2sXUzzU744wwqqC55gYqMKT9geOEwY/JzZvk8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:39:6c:fc:1e:c8:6a:37:30:6e:10:92:9f:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: May 16 10:00:48 2026 GMT
            Not After : May 17 10:00:48 2026 GMT
        Subject: CN=96e99a02ac7252ec94914853db185507f0bba211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:28:9b:31:a0:1f:77:5f:36:c4:e9:1c:92:
                    76:50:d9:91:31:d4:a1:d0:a5:3e:54:1d:f9:3a:fb:
                    95:8a:05:4e:d5:14:66:95:16:e4:a5:58:3c:c7:48:
                    35:93:cd:81:cb:ef:9b:70:72:19:36:21:54:47:79:
                    2a:5b:94:df:4d:63:2c:15:d6:03:17:7d:3c:6d:95:
                    d6:5b:27:eb:43:5f:bb:27:dd:51:f2:c3:83:fb:47:
                    5c:97:d1:94:5e:6c:08:2c:ee:49:cf:0e:73:50:76:
                    4a:00:17:3e:9c:9d:10:8e:04:3b:01:40:24:44:58:
                    d6:9e:9b:52:69:9c:87:41:38:62:b4:21:0b:04:b1:
                    cd:f2:5b:8b:ad:09:ab:c3:8f:23:bc:85:9c:fd:2f:
                    04:e8:75:dd:f1:06:cb:12:01:42:84:4a:68:c6:1f:
                    cf:02:7b:ce:5b:0f:52:87:1c:e7:76:21:5d:6a:b8:
                    c2:8b:f3:e8:19:90:43:93:a8:aa:32:c0:d0:46:bb:
                    c7:4c:49:82:e3:d2:7c:d8:1a:ae:6e:22:6b:71:bf:
                    c9:3a:58:9a:4e:93:6d:fa:7b:bd:75:10:d1:e0:92:
                    05:34:d4:03:d2:48:70:0e:f4:5d:0a:a0:b0:28:e4:
                    86:a3:b6:aa:7a:26:bf:82:90:59:96:ce:45:ac:fb:
                    75:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E9:9A:02:AC:72:52:EC:94:91:48:53:DB:18:55:07:F0:BB:A2:11
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:fa:bf:43:3d:1f:d1:33:1e:38:a8:fb:c4:ab:c7:35:c8:
         79:0b:0a:55:e2:b2:55:b6:9d:67:09:2b:60:3c:ce:e6:a3:c8:
         09:20:ee:59:68:b0:29:b4:dc:58:87:e0:19:dc:5c:4d:b4:9e:
         04:fe:2c:4c:66:51:b2:3c:ad:45:e6:1a:16:b3:e0:8f:a1:a1:
         bd:f0:2e:ed:13:07:a6:66:cb:b1:05:f1:77:99:08:4d:7c:1c:
         d0:37:90:4d:d3:a6:5e:b1:29:3d:00:4b:f4:57:ec:39:1d:26:
         97:b1:4c:69:8b:f1:6e:e9:bc:c1:4b:1a:5f:77:f3:be:06:13:
         ed:51:8c:e1:a0:14:c0:e1:4f:8a:39:a9:f4:2c:7d:bf:d2:94:
         8f:3c:15:eb:96:f3:68:52:02:82:6c:a2:b7:5a:40:02:ee:c7:
         3a:10:78:c2:f5:9f:47:c2:26:ca:0d:81:05:28:06:36:4c:12:
         cd:76:97:a2:b3:f8:cb:e6:07:85:ab:d8:88:fa:28:f9:22:ff:
         02:d6:06:49:a5:d4:db:6f:de:69:0c:e4:fd:75:f6:b2:fb:43:
         a6:b7:5e:91:03:f8:35:13:c2:bd:ee:2d:7b:57:70:8a:b0:ba:
         47:e4:9e:36:98:5d:f9:5e:ed:89:8c:ff:74:61:ef:49:92:cb:
         5f:77:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:54 2026 by rpki-client