Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File:                     beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier:          Rl6cD3EsMlbqC2GPnUXz1i+oD5FpMmeu+hmdzzn4j/w=
Subject key identifier:   62:BF:10:05:8A:27:BF:56:BF:F4:0C:39:25:DD:1E:7B:14:23:EB:57
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer:       /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial:       019FF94831C62C89C94E40B47A6F47CCAD58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number:          01C9
Signing time:             Thu 13 Aug 2026 04:01:25 +0000
Manifest this update:     Thu 13 Aug 2026 04:01:25 +0000
Manifest next update:     Fri 14 Aug 2026 04:01:25 +0000
Files and hashes:         1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
                          2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: H593svIfRcTAy4WPRbNLYHYOB/bYxTUlTzaAArhAi4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:48:31:c6:2c:89:c9:4e:40:b4:7a:6f:47:cc:ad:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
        Validity
            Not Before: Aug 13 04:01:25 2026 GMT
            Not After : Aug 14 04:01:25 2026 GMT
        Subject: CN=62bf10058a27bf56bff40c3925dd1e7b1423eb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:52:99:1b:81:97:71:2c:21:78:34:3f:3b:
                    16:54:25:83:e6:94:01:76:98:2a:e7:78:d1:ae:e5:
                    8c:f7:40:e4:e2:68:88:49:97:42:33:99:0c:10:fd:
                    c6:81:d3:cb:06:4a:4f:99:ae:a6:0c:78:da:61:8b:
                    ba:ca:a5:67:15:ad:df:e1:b0:1b:58:c3:de:36:48:
                    e8:15:a9:f3:06:75:e7:55:51:e3:94:33:93:b6:c6:
                    cc:6b:55:c8:f3:c0:76:48:07:a9:d4:f5:70:c3:f7:
                    69:77:eb:e9:2a:65:52:03:2f:8a:19:50:7f:68:a3:
                    b0:21:28:2b:1c:3c:c8:27:68:df:e1:e1:f3:5c:fb:
                    51:8b:5c:d1:39:2b:65:68:c4:56:78:0c:82:cd:dd:
                    27:95:81:9b:11:a2:b3:b0:51:cd:fa:8e:88:68:d6:
                    95:c9:b7:05:52:d0:a9:da:55:d0:e7:41:18:50:0a:
                    7f:09:a0:a5:7a:36:c1:41:05:5b:20:f4:b1:fb:ee:
                    17:c7:99:18:25:a2:e3:e1:52:75:14:c9:d3:8b:77:
                    91:27:2a:f9:e9:80:38:2c:3b:ac:3c:56:60:47:a4:
                    79:cb:aa:62:a2:69:30:55:3d:3e:5c:a3:ac:71:69:
                    f3:79:15:fd:88:7c:5f:26:d2:91:2c:8e:eb:de:63:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:10:05:8A:27:BF:56:BF:F4:0C:39:25:DD:1E:7B:14:23:EB:57
            X509v3 Authority Key Identifier:
                keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3b:dc:d7:95:67:da:7d:52:f7:21:97:77:49:dc:7b:e3:64:
         6c:4d:d7:a3:1f:6c:0e:ba:99:6f:3b:b7:09:c6:73:ad:fa:2a:
         ad:05:99:6d:fe:d2:88:03:15:f4:f4:24:17:70:9b:66:52:67:
         07:a9:d4:1d:e4:a4:cf:14:cc:03:68:2c:53:af:f8:da:f7:b6:
         3b:0b:18:8c:5e:ad:03:6c:1d:64:54:72:31:a4:14:fc:e1:35:
         b6:7e:c0:72:b9:a2:ec:52:6f:ef:ca:d3:ed:29:fe:e9:0e:d3:
         d9:bb:5d:42:79:a4:40:bf:e9:fd:ab:68:3b:7f:63:1b:54:f7:
         a8:89:d0:c6:4c:be:ab:d0:2c:1a:60:ce:5b:e1:e5:9d:56:01:
         f1:a5:5d:62:e5:09:67:9d:82:d7:ae:b8:fb:82:33:0b:f1:c0:
         a3:34:56:ab:0f:f2:58:07:37:42:c8:b5:c7:f0:38:e7:d8:b8:
         42:20:d2:3f:f6:75:51:a2:c7:62:77:e1:a3:5e:f7:4e:1f:3d:
         9c:40:93:f3:16:e3:9c:05:2e:ff:74:57:e4:f4:21:f5:d7:81:
         69:ba:2a:14:64:9f:74:08:76:bb:ed:03:55:11:84:16:9f:1c:
         2d:9c:ce:21:a8:42:a4:7a:db:b8:bd:65:7f:72:01:5e:d1:e1:
         d2:01:6f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5SDHGLInJTkC0em9HzK1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZWE5NzVmYmIwM2ZjMjVmYjgwNDRiMmRhMzg4MTRjNmFm
MWNmZGUwHhcNMjYwODEzMDQwMTI1WhcNMjYwODE0MDQwMTI1WjAzMTEwLwYDVQQD
Eyg2MmJmMTAwNThhMjdiZjU2YmZmNDBjMzkyNWRkMWU3YjE0MjNlYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZBSmRuBl3EsIXg0PzsWVCWD5pQB
dpgq53jRruWM90Dk4miISZdCM5kMEP3GgdPLBkpPma6mDHjaYYu6yqVnFa3f4bAb
WMPeNkjoFanzBnXnVVHjlDOTtsbMa1XI88B2SAep1PVww/dpd+vpKmVSAy+KGVB/
aKOwISgrHDzIJ2jf4eHzXPtRi1zROStlaMRWeAyCzd0nlYGbEaKzsFHN+o6IaNaV
ybcFUtCp2lXQ50EYUAp/CaClejbBQQVbIPSx++4Xx5kYJaLj4VJ1FMnTi3eRJyr5
6YA4LDusPFZgR6R5y6piomkwVT0+XKOscWnzeRX9iHxfJtKRLI7r3mOHCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGK/EAWKJ79Wv/QMOSXdHnsUI+tXMB8GA1UdIwQY
MBaAFG3ql1+7A/wl+4BEsto4gUxq8c/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNDQwMGEtZTFhYi00MjExLWI5M2It
YzUxN2UzMDdlNTY3LzEvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNDQwMGEtZTFhYi00MjExLWI5M2ItYzUxN2UzMDdlNTY3
LzEvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzvc15Vn
2n1S9yGXd0nce+NkbE3Xox9sDrqZbzu3CcZzrfoqrQWZbf7SiAMV9PQkF3CbZlJn
B6nUHeSkzxTMA2gsU6/42ve2OwsYjF6tA2wdZFRyMaQU/OE1tn7Acrmi7FJv78rT
7Sn+6Q7T2btdQnmkQL/p/atoO39jG1T3qInQxky+q9AsGmDOW+HlnVYB8aVdYuUJ
Z52C1664+4IzC/HAozRWqw/yWAc3Qsi1x/A459i4QiDSP/Z1UaLHYnfho173Th89
nECT8xbjnAUu/3RX5PQh9deBaboqFGSfdAh2u+0DVRGEFp8cLZzOIahCpHrbuL1l
f3IBXtHh0gFvzg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:56 2026 by rpki-client