Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          vfjf/sNNAj1geNWuSbNeORTiUyghUF20Nukmvn0kvwA=
Subject key identifier:   50:C8:B8:C1:A6:AB:AF:0A:15:32:69:8B:72:CA:5A:BC:0D:C2:F5:F5
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       01A151AD4A5F0C6827F0713B5FB0D850FA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          15DB
Signing time:             Mon 19 Oct 2026 01:01:13 +0000
Manifest this update:     Mon 19 Oct 2026 01:01:13 +0000
Manifest next update:     Tue 20 Oct 2026 01:01:13 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: iykGihTYX498hVnTy8fsI1HlSM4onqrOKCQ99WopKGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:ad:4a:5f:0c:68:27:f0:71:3b:5f:b0:d8:50:fa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Oct 19 01:01:13 2026 GMT
            Not After : Oct 20 01:01:13 2026 GMT
        Subject: CN=50c8b8c1a6abaf0a1532698b72ca5abc0dc2f5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:34:2d:e7:53:5b:56:5e:00:07:71:71:99:
                    1e:bc:1d:f1:a1:1d:04:f2:9b:fa:15:27:ad:cb:b6:
                    02:3d:42:e9:91:2b:c9:29:4a:b7:ba:b2:dd:4f:65:
                    89:4e:3f:8e:d6:50:0e:4d:82:43:08:39:3b:ce:ec:
                    76:0d:5c:a6:15:8d:30:85:10:83:eb:6e:51:4d:9e:
                    d7:a8:8f:3a:90:34:11:bd:f4:28:bb:46:e7:f8:94:
                    44:40:f3:fa:f4:f6:cc:4e:0b:a3:6a:33:3b:39:19:
                    87:ad:57:99:26:95:0d:73:89:5d:85:3a:30:e0:91:
                    fb:b6:36:bc:5b:31:43:1c:17:19:d7:10:ce:98:d2:
                    04:33:bc:ea:87:42:10:74:90:a8:2e:60:6a:57:ed:
                    00:1b:24:d1:8a:d3:7e:5f:97:33:77:43:d2:26:0b:
                    8f:80:06:3b:ae:6e:6a:59:52:60:55:64:a2:92:62:
                    3f:6c:89:17:cf:04:4d:87:2d:a5:a1:11:0a:ef:07:
                    e6:2e:dd:7f:f6:52:43:47:ea:72:c3:53:05:12:2f:
                    82:22:6f:f2:e5:72:8a:59:80:04:8b:f2:af:c4:e6:
                    68:f0:ef:dc:52:23:2e:21:04:45:96:65:5b:a6:99:
                    9b:d5:48:0c:2a:23:cb:6f:ae:07:db:71:f3:c8:b4:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:B8:C1:A6:AB:AF:0A:15:32:69:8B:72:CA:5A:BC:0D:C2:F5:F5
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:04:0b:41:db:db:e9:67:3b:fa:54:ed:e4:22:9b:1b:49:
         51:8d:41:b5:7f:87:37:38:0a:cf:ab:f4:df:f3:37:8b:1e:31:
         60:d2:7f:c4:5c:0c:1f:0c:fa:27:42:e1:13:e8:4b:ed:70:c9:
         f1:39:0f:22:7d:66:fe:e3:24:29:73:ce:9d:19:66:75:09:87:
         80:39:7b:42:7e:93:0a:be:9e:94:7b:55:e1:2f:1c:97:df:5d:
         75:94:40:2f:65:29:cc:fd:0a:e3:a0:f3:14:41:1a:7d:03:53:
         66:f7:29:f3:e2:b2:32:d1:e1:3d:12:dd:a6:d2:c0:35:ae:e0:
         89:8a:f0:5e:87:58:4b:c1:0d:c6:32:ec:87:09:ca:f1:7d:48:
         7d:cf:99:12:d8:50:34:a8:fd:58:68:4f:9a:b8:33:70:a9:b0:
         8f:e9:6f:9f:03:1b:ee:ba:e2:fb:c2:0c:97:15:75:c3:3a:46:
         26:ef:1d:12:e2:ba:b6:c9:c6:b5:67:65:c7:c3:9f:ff:15:99:
         66:4a:1e:71:03:73:13:ba:70:f3:fe:ba:89:f7:ed:77:5a:5a:
         54:a1:31:a8:10:57:cd:69:e1:b2:41:bc:06:78:f3:34:21:5a:
         87:c0:81:d3:96:85:29:c8:01:fb:eb:7a:62:8a:84:34:e2:34:
         9e:b8:f0:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRrUpfDGgn8HE7X7DYUPpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWQzNmM2NTY0NmRhY2IxMTRhYTcyYzFiYmNiNzQxODFi
N2ZmNDMwHhcNMjYxMDE5MDEwMTEzWhcNMjYxMDIwMDEwMTEzWjAzMTEwLwYDVQQD
Eyg1MGM4YjhjMWE2YWJhZjBhMTUzMjY5OGI3MmNhNWFiYzBkYzJmNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtU0LedTW1ZeAAdxcZkevB3xoR0E
8pv6FSety7YCPULpkSvJKUq3urLdT2WJTj+O1lAOTYJDCDk7zux2DVymFY0whRCD
625RTZ7XqI86kDQRvfQou0bn+JREQPP69PbMTgujajM7ORmHrVeZJpUNc4ldhTow
4JH7tja8WzFDHBcZ1xDOmNIEM7zqh0IQdJCoLmBqV+0AGyTRitN+X5czd0PSJguP
gAY7rm5qWVJgVWSikmI/bIkXzwRNhy2loREK7wfmLt1/9lJDR+pyw1MFEi+CIm/y
5XKKWYAEi/KvxOZo8O/cUiMuIQRFlmVbppmb1UgMKiPLb64H23HzyLT+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDIuMGmq68KFTJpi3LKWrwNwvX1MB8GA1UdIwQY
MBaAFAXtNsZWRtrLEUqnLBu8t0GBt/9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQt
OGRkZGI5YzM0ZDk3LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQtOGRkZGI5YzM0ZDk3
LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaUEC0Hb
2+lnO/pU7eQimxtJUY1BtX+HNzgKz6v03/M3ix4xYNJ/xFwMHwz6J0LhE+hL7XDJ
8TkPIn1m/uMkKXPOnRlmdQmHgDl7Qn6TCr6elHtV4S8cl99ddZRAL2UpzP0K46Dz
FEEafQNTZvcp8+KyMtHhPRLdptLANa7giYrwXodYS8ENxjLshwnK8X1Ifc+ZEthQ
NKj9WGhPmrgzcKmwj+lvnwMb7rri+8IMlxV1wzpGJu8dEuK6tsnGtWdlx8Of/xWZ
ZkoecQNzE7pw8/66ifftd1paVKExqBBXzWnhskG8BnjzNCFah8CB05aFKcgB++t6
YoqENOI0nrjwlw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:39 2026 by rpki-client