Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
File:                     bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json)
Hash identifier:          HCuOf7lWWxpb/NTBcKL+HbJuA1gZmCPk5dqOvWiZt1U=
Subject key identifier:   A0:FB:8E:A2:16:08:D9:18:1B:22:23:D7:64:5D:D6:2C:74:BB:D0:93
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Certificate issuer:       /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial:       01A0B98A8229BE2C9821C51B802AD9D8754E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
Manifest number:          1A62
Signing time:             Sat 19 Sep 2026 12:00:57 +0000
Manifest this update:     Sat 19 Sep 2026 12:00:57 +0000
Manifest next update:     Sun 20 Sep 2026 12:00:57 +0000
Files and hashes:         1: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (hash: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA=)
                          2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: w/uoeEm2xPWQACpQ+dPJH7VSgRFir5zqYyrxNJmvnUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b9:8a:82:29:be:2c:98:21:c5:1b:80:2a:d9:d8:75:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
        Validity
            Not Before: Sep 19 12:00:57 2026 GMT
            Not After : Sep 20 12:00:57 2026 GMT
        Subject: CN=a0fb8ea21608d9181b2223d7645dd62c74bbd093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:d2:9b:70:4d:c6:0e:88:2d:eb:c7:45:a5:
                    d7:ce:c6:59:cc:4f:ea:e1:03:bb:3d:54:f5:97:e8:
                    62:a6:b7:c0:d9:cf:5f:6c:7a:cc:e2:9e:db:95:35:
                    80:cb:72:c0:0c:1f:22:92:3e:2e:66:eb:36:09:ec:
                    0d:07:47:52:06:64:df:fc:4e:69:7d:a6:ea:21:b2:
                    53:8a:b4:69:b0:f0:13:5c:81:ba:41:14:c4:6b:a0:
                    c0:6d:dd:98:f8:32:c5:bb:70:17:1a:fd:49:f9:c2:
                    4f:3d:99:32:c0:30:0f:a4:a2:24:c2:02:43:64:72:
                    49:71:69:f5:d3:d5:25:1b:56:ec:16:cf:26:0e:0a:
                    3b:b1:3c:b5:56:a5:a8:1c:0e:ed:ce:35:b6:9f:73:
                    c9:5f:35:48:2f:45:fb:7f:08:22:24:7d:87:55:76:
                    85:03:38:a8:f0:33:af:fc:52:4c:84:9c:d6:25:cd:
                    09:a5:76:a9:44:15:b6:31:f3:b9:f8:64:88:b9:4d:
                    a7:7f:7f:11:bf:da:8c:33:f5:5d:1a:3c:c6:a1:d5:
                    4c:e9:94:ca:56:63:14:16:90:88:6c:a0:e9:15:5e:
                    1e:90:c8:21:d8:05:2c:c2:0b:af:08:0d:15:e5:1c:
                    ee:2a:6e:6e:ea:c2:ba:d5:01:81:42:e9:f4:52:de:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:8E:A2:16:08:D9:18:1B:22:23:D7:64:5D:D6:2C:74:BB:D0:93
            X509v3 Authority Key Identifier:
                keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:58:ec:51:3c:02:55:7a:07:b5:0f:dd:d6:00:0d:04:2a:
         a6:14:83:0c:12:88:aa:b4:f2:39:a5:4c:02:9d:c5:ff:ca:98:
         76:6f:b0:02:e6:ca:0f:26:1d:6e:f0:2e:e4:8d:ca:c7:88:65:
         0b:5d:8c:10:0f:a2:af:38:72:83:e9:a2:f2:b6:75:d7:e4:3d:
         db:08:a4:37:85:db:95:f6:eb:1e:82:5b:e7:1c:04:0a:ef:2e:
         60:62:31:20:f2:29:92:e1:59:c7:dc:c3:06:7b:f9:53:cb:90:
         a6:0a:df:36:80:79:41:05:dd:47:a1:fb:cc:ec:78:b6:2e:77:
         0d:d8:7e:92:9e:b6:ea:9b:22:21:f3:24:c3:91:79:34:30:62:
         c5:1d:54:3a:42:2f:54:73:5f:b0:c9:f0:af:67:ee:14:f8:e1:
         03:38:64:bf:96:ec:91:9a:77:14:31:54:00:0d:e1:21:28:97:
         2f:ca:84:58:0c:44:18:7a:46:ea:70:bf:dc:fd:8d:49:0e:c9:
         57:1f:0a:a0:85:6e:c2:5c:49:48:57:f1:2e:9e:ae:61:d0:47:
         74:b4:75:18:4d:da:2b:fd:ef:49:59:c4:d4:2f:fd:a2:3a:3a:
         39:54:05:4a:fe:6e:2a:6d:8f:97:d6:3b:db:5f:de:05:c9:cb:
         8a:e8:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 17:52:56 2026 by rpki-client