Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          87CW8jGzzzi1uOIYUHcag/RUO99gI/b8Ree/my+m5Bg=
Subject key identifier:   56:24:8A:90:2B:01:94:F5:28:91:3D:8C:7D:1F:F8:06:87:BF:E9:A2
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       01A08DFC20D961FA1238F54B32FCE6081687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          1A4A
Signing time:             Fri 11 Sep 2026 01:01:45 +0000
Manifest this update:     Fri 11 Sep 2026 01:01:45 +0000
Manifest next update:     Sat 12 Sep 2026 01:01:45 +0000
Files and hashes:         1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: hcrH5hU/L3t/4IZkYhFHIrQgqRWwFpl4x+h4hsyhXac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:fc:20:d9:61:fa:12:38:f5:4b:32:fc:e6:08:16:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Sep 11 01:01:45 2026 GMT
            Not After : Sep 12 01:01:45 2026 GMT
        Subject: CN=56248a902b0194f528913d8c7d1ff80687bfe9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:87:b7:c9:ab:7a:c3:87:94:4f:b0:85:c9:
                    fb:07:79:15:f0:50:ae:0a:bb:d8:25:ac:57:14:6d:
                    39:e1:b5:fa:19:19:56:3c:8b:09:b0:4a:62:2c:91:
                    bc:42:49:4c:b6:0e:b8:44:6c:cc:08:85:96:0b:cf:
                    81:c0:01:fc:85:3f:2c:f3:20:61:0f:83:9d:6b:71:
                    d7:e8:55:7f:97:b5:1a:d5:27:a4:ee:a6:1f:52:61:
                    7c:10:99:12:15:1e:b9:8a:a8:e2:1d:c2:20:ab:32:
                    62:20:27:aa:b3:51:5f:3e:58:41:6f:f7:ea:ec:f1:
                    d5:39:48:15:c4:0c:e7:a7:b0:9b:e5:92:19:c1:69:
                    3b:4b:f7:55:f8:3e:80:8f:2c:7a:c5:5d:ec:93:4d:
                    b7:c1:62:a7:b7:ee:08:f6:a3:e1:e0:65:7d:13:10:
                    1b:dc:bf:fe:b2:a6:08:4c:9e:8d:be:51:32:c4:ab:
                    cb:fe:c6:7e:0e:18:8a:b4:17:b9:0e:0d:43:c5:3d:
                    98:ac:61:ce:da:2a:e9:9e:09:77:e5:53:99:39:1b:
                    40:82:9e:e6:e8:a0:12:61:1d:62:61:02:09:2d:6a:
                    78:a8:ca:b7:ae:d1:27:38:ac:72:66:18:79:1b:b2:
                    a8:11:69:ab:ec:93:5d:c4:d9:68:9e:5a:b7:a7:95:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:24:8A:90:2B:01:94:F5:28:91:3D:8C:7D:1F:F8:06:87:BF:E9:A2
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4e:d8:6c:f9:31:f6:41:8c:0d:66:49:52:44:23:d5:66:8c:
         a2:75:c3:87:0b:a4:df:95:43:55:83:42:55:89:64:fb:91:8d:
         96:b3:dd:cc:ea:96:6d:94:9b:d3:70:e9:bb:74:37:90:67:b8:
         68:5a:f6:30:35:35:f7:10:2d:83:55:23:e5:6c:4e:42:cc:fe:
         fd:da:5a:5e:fe:3b:32:19:b2:43:b9:3b:0a:27:d7:c0:4b:20:
         b5:49:a5:de:60:ea:c3:fc:e4:2e:32:f0:eb:88:f0:d7:9b:51:
         32:59:01:4d:68:5c:43:fa:11:c5:3c:3f:4b:6d:a9:3f:01:ec:
         7a:ea:f9:15:45:7d:48:43:d5:df:b9:58:6d:c8:70:65:6a:18:
         9a:15:f6:71:a7:2b:95:82:71:80:e8:df:49:d2:a3:67:02:fd:
         c3:1b:1a:94:d0:79:f5:63:b2:a2:a7:8e:88:71:9c:d6:72:cb:
         fe:f1:c7:9a:0f:0f:02:6a:41:d3:2b:58:a0:a7:1d:b7:a0:53:
         ef:ee:66:00:80:5d:cd:20:85:ee:da:2d:01:6d:12:05:6d:d6:
         e0:4b:b0:cc:f5:46:86:cb:e7:59:88:83:0d:af:0c:c9:ed:c5:
         a1:0b:8e:b3:7b:09:7a:12:95:b7:d4:9e:1f:aa:80:a8:82:a4:
         e1:48:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:24 2026 by rpki-client