Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File:                     BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier:          2xDCTSJ8wiNV46ujUZ0ZUBsGKHPS89iP1FkkgwypzOs=
Subject key identifier:   A0:85:5D:66:6D:2F:2C:D3:D7:F3:32:1F:FD:77:55:5A:F6:E0:AC:41
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer:       /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial:       01A13E94A680E26A346EE13432BDC995D5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number:          0C64
Signing time:             Thu 15 Oct 2026 08:01:31 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:31 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:31 +0000
Files and hashes:         1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: kWJukGika3Iiqb1i9YNMtj9riIx5UoW+vsKz5l6LYM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:a6:80:e2:6a:34:6e:e1:34:32:bd:c9:95:d5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
        Validity
            Not Before: Oct 15 08:01:31 2026 GMT
            Not After : Oct 16 08:01:31 2026 GMT
        Subject: CN=a0855d666d2f2cd3d7f3321ffd77555af6e0ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:55:6f:08:00:62:eb:b1:d3:96:f8:bf:e0:
                    5c:55:48:81:57:e9:92:de:14:0e:b8:20:67:37:dd:
                    c5:0e:59:1b:4d:38:6e:7a:e3:91:a7:88:cd:c2:ca:
                    7f:97:4e:be:0f:07:af:38:78:6a:39:e0:22:ba:e8:
                    25:29:ea:e0:90:7d:3a:ce:87:58:4c:f9:99:a6:c8:
                    a5:e7:cd:a9:3d:4f:96:72:ae:94:3a:ca:dc:9e:03:
                    37:29:dd:2f:f4:54:dd:c9:bb:7f:51:f1:cc:a8:66:
                    f4:aa:0a:64:6c:e6:40:ac:be:d8:5a:c7:db:ef:95:
                    53:21:01:24:b7:d8:a3:c4:37:96:15:14:d8:65:01:
                    20:92:b1:3d:66:70:04:19:c0:9b:dc:52:8f:c3:1e:
                    07:17:55:16:fa:56:e3:25:eb:06:28:7f:20:88:00:
                    95:05:5e:eb:a4:11:b5:67:99:99:68:94:86:27:c6:
                    b3:17:e8:bd:a6:7d:f5:2b:fb:c8:ee:75:21:a6:ef:
                    0a:14:9e:cd:28:41:3e:48:2f:7f:d0:51:e5:82:49:
                    56:2e:8b:93:10:74:63:34:62:93:f0:e3:22:7c:73:
                    90:eb:33:cc:aa:54:2f:e3:47:37:b8:2c:2d:31:98:
                    03:14:5b:b0:32:e7:4f:07:35:16:19:9c:b2:bc:02:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:85:5D:66:6D:2F:2C:D3:D7:F3:32:1F:FD:77:55:5A:F6:E0:AC:41
            X509v3 Authority Key Identifier:
                keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:32:15:a5:1e:db:a5:60:09:26:06:47:0e:5d:1a:74:c9:2b:
         4c:41:b7:2a:6c:4a:5a:3d:f5:a2:ef:74:2f:25:60:c8:72:7a:
         68:5b:10:8f:33:2f:27:6e:28:d4:95:67:0e:4f:64:29:74:c8:
         5f:75:fd:6c:bc:3e:62:fd:b8:57:2f:15:da:9d:72:0d:f1:51:
         db:82:f2:9a:9e:5d:f7:42:45:f5:4d:a4:24:63:3f:93:8b:a9:
         08:8e:c6:9e:22:04:3f:dd:d6:06:06:9b:20:01:59:7c:72:5b:
         01:8f:63:ce:57:73:92:66:19:c2:89:c5:cc:34:e3:a5:36:60:
         6f:0c:79:3b:15:2b:4a:16:b7:d1:c3:c2:3f:dd:b8:84:ea:aa:
         90:ec:20:d8:35:56:fe:12:77:e2:1f:5d:72:e7:f4:fb:bf:ed:
         2c:38:19:fc:40:aa:76:4e:bb:97:af:44:65:9c:e3:b5:af:3d:
         ba:42:fa:b9:b8:c6:00:cc:83:24:cb:e8:c8:5e:f5:40:5b:80:
         2d:10:ff:d4:b7:51:47:0e:ed:f6:ee:a1:ab:8b:53:c0:eb:07:
         29:81:6a:15:ad:01:13:e6:9e:6a:85:fb:c9:11:d9:b4:41:63:
         d8:68:76:f5:67:a9:a0:0f:75:f4:83:00:fb:46:46:9f:52:f3:
         f4:d9:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client