Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File:                     BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier:          cogIR9V75K+mryMiYVMcVn/54QVDs9HWy2CFdzEfi1I=
Subject key identifier:   B9:18:C9:08:38:95:BB:9E:EA:5A:6F:9C:62:B8:63:54:29:A2:4F:8C
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer:       /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial:       019E2F968450D503D9E6D4F921DEFEF5F624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 07:00:53 +0000
Manifest this update:     Sat 16 May 2026 07:00:53 +0000
Manifest next update:     Sun 17 May 2026 07:00:53 +0000
Files and hashes:         1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: Y9zZI2BJmjDltqsSkEX0vKeRMmmjbnKkxpiTm8+9Frk=)
                          2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:84:50:d5:03:d9:e6:d4:f9:21:de:fe:f5:f6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
        Validity
            Not Before: May 16 07:00:53 2026 GMT
            Not After : May 17 07:00:53 2026 GMT
        Subject: CN=b918c9083895bb9eea5a6f9c62b8635429a24f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:ba:1b:64:d6:72:79:17:4e:09:95:f9:9a:
                    f3:c5:7d:20:3f:6f:77:b9:77:60:06:ef:d6:2c:f6:
                    b0:21:07:42:44:4b:14:4d:73:be:bc:e5:d6:ed:f4:
                    f0:97:2b:ea:74:24:b5:0d:41:1b:19:27:45:86:31:
                    fb:83:fb:0d:5a:ad:2a:dd:89:e1:89:c2:cc:48:a1:
                    56:c4:a1:de:95:a5:dc:92:83:b4:fd:fc:5a:48:9d:
                    0a:1f:53:cd:b3:35:54:48:72:a8:b4:ed:71:2b:06:
                    76:dc:b7:d0:7a:81:56:93:01:d8:3f:40:29:af:00:
                    8c:84:6c:ae:a1:e2:8d:4f:44:f2:ae:47:2f:f0:42:
                    b0:a4:a9:d5:f3:e9:5e:54:b1:95:4d:65:e4:a0:72:
                    9c:24:c0:93:ee:2a:bd:20:2d:1b:e2:e9:3b:cf:53:
                    83:bb:7a:bf:7b:19:2f:06:67:0c:09:1c:12:ab:1e:
                    83:77:39:9c:cf:6e:26:72:e8:40:91:59:a8:66:fe:
                    6d:06:d4:75:16:f3:eb:59:62:b9:3b:75:fc:aa:ce:
                    b6:ab:f0:cd:d3:97:b3:a6:bd:a5:ff:51:8a:17:19:
                    d0:5f:e8:eb:54:10:e5:ce:df:07:19:de:03:cb:6e:
                    05:1a:95:64:bf:75:0b:ec:d2:19:21:56:0a:2d:84:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:18:C9:08:38:95:BB:9E:EA:5A:6F:9C:62:B8:63:54:29:A2:4F:8C
            X509v3 Authority Key Identifier:
                keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:73:7e:35:bf:46:20:0e:c6:38:51:19:dd:a9:4f:29:1a:
         71:77:6b:c4:8b:5c:2f:13:0b:7a:f3:86:2a:86:85:9b:9e:b0:
         39:33:3e:74:ef:6a:ac:73:45:7b:db:d9:68:24:58:88:74:bf:
         56:f4:5a:25:7b:b1:2c:45:6d:ed:a7:f4:aa:b7:08:34:89:f6:
         0a:17:52:d3:5a:0c:b4:7d:24:a1:5d:c8:e8:4b:d5:ff:51:47:
         bf:b7:4f:35:09:bd:76:a4:39:7e:5a:1c:72:bb:41:e1:a3:c3:
         1e:55:3f:19:3e:06:4f:f5:c0:0c:d7:af:bc:3b:e6:f7:e7:a6:
         a9:d6:01:a4:5c:34:1e:e8:41:e0:13:44:1a:b2:fc:a7:a7:99:
         03:a9:c1:00:37:fa:ec:bd:9a:43:ec:0f:67:b8:ff:96:09:3e:
         bc:fa:6a:09:a5:43:7a:c4:47:64:15:8f:f2:53:d7:5e:7a:90:
         9f:05:dd:76:b4:c8:65:1c:90:8a:c9:0c:9a:56:72:d4:86:6d:
         f9:e5:41:8b:f2:6e:61:ad:f2:07:46:20:bd:c0:2c:e2:11:3b:
         2d:d2:0b:65:16:ae:14:eb:2e:c7:5b:50:f5:57:45:85:b5:37:
         fe:5d:78:e3:53:0c:10:b6:02:f1:70:04:0c:09:40:3e:2a:4c:
         8c:ed:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:42 2026 by rpki-client