Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File:                     BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier:          N2n/edMf2pFIs0nq3vAQTGYgVbAG3cCuJpnhVR71fNk=
Subject key identifier:   BB:CB:73:03:84:02:A8:F9:91:C5:A5:FC:DD:86:28:FC:2C:0F:BF:CA
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer:       /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial:       019E23C9391B5CC16D5F2BEE7AFFD171DD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number:          0899
Signing time:             Thu 14 May 2026 00:00:50 +0000
Manifest this update:     Thu 14 May 2026 00:00:50 +0000
Manifest next update:     Fri 15 May 2026 00:00:50 +0000
Files and hashes:         1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: TswITl0VtDOddXLLb3GkQdryXodiygRiEAqF72B5T94=)
                          2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:23:c9:39:1b:5c:c1:6d:5f:2b:ee:7a:ff:d1:71:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
        Validity
            Not Before: May 14 00:00:50 2026 GMT
            Not After : May 15 00:00:50 2026 GMT
        Subject: CN=bbcb73038402a8f991c5a5fcdd8628fc2c0fbfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:3e:a6:90:8d:06:71:9d:67:8b:2c:a6:47:
                    ae:c8:24:a8:41:01:c9:6f:8f:ef:d3:f1:e6:9e:84:
                    63:97:b3:95:58:0c:7e:94:ff:e2:3d:ab:86:23:e3:
                    1b:4f:58:18:fb:8a:c9:e4:03:66:5f:fe:1a:bc:80:
                    c1:40:e0:10:43:67:73:99:a3:4f:8b:2f:e9:e0:c5:
                    64:15:fd:7a:38:f1:70:ac:61:bd:89:df:0f:59:0f:
                    a9:cd:23:92:bd:59:f4:5d:14:9c:7f:e8:31:d8:13:
                    ff:6e:11:8f:3e:dc:80:01:4a:ae:df:bf:de:d1:24:
                    11:25:50:17:81:09:8f:9b:7f:ee:4c:a2:74:04:82:
                    2f:72:11:71:d2:f3:6b:8b:d7:e8:e1:ab:59:6b:1d:
                    48:44:ff:14:0e:b8:56:ef:c7:f3:2a:20:44:c9:c1:
                    a6:7a:d1:5e:36:53:6e:ca:f9:0f:76:68:cd:16:e6:
                    1c:c0:b2:ba:3c:47:4d:e8:03:19:85:c2:52:50:54:
                    e0:93:29:ad:a0:1f:78:56:c9:0d:17:28:16:ef:01:
                    a6:3a:0d:fc:5e:fb:52:87:06:56:96:b2:29:d8:7a:
                    9d:f5:b9:79:9f:8f:0e:12:90:e3:49:c6:48:dd:76:
                    08:eb:16:d5:19:73:1e:ba:c8:16:d9:21:f8:11:dd:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:73:03:84:02:A8:F9:91:C5:A5:FC:DD:86:28:FC:2C:0F:BF:CA
            X509v3 Authority Key Identifier:
                keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:a1:91:47:fa:e3:75:de:8f:2c:b2:a8:82:73:b6:9b:b5:
         a1:f3:8e:68:f9:9b:f0:da:b8:c7:2f:bc:21:21:69:f0:c9:b6:
         d3:01:c1:d0:23:ae:e8:79:0d:65:cc:e9:1f:5e:87:78:86:52:
         df:6b:dd:a7:15:b7:2e:74:6f:61:f4:2c:99:3b:e4:2b:b0:ee:
         53:37:6c:7f:a9:93:23:ab:27:ef:e5:4d:56:a7:02:dd:42:4d:
         3e:3d:5a:33:63:31:70:72:4b:e6:41:19:2f:00:87:62:c2:cb:
         cf:5b:d5:0d:39:ee:8e:9c:71:54:61:d4:91:96:76:8e:57:d7:
         4f:fb:18:5a:1f:c2:e7:e6:5d:b0:53:ac:0c:4b:2b:4b:8f:1c:
         8b:5a:84:95:5a:71:9a:e4:cd:3c:17:af:06:e4:22:3f:47:0d:
         33:be:ca:ea:9a:96:a7:6e:df:37:36:c5:4c:7f:7e:4b:f7:2a:
         9b:54:79:5e:7e:4c:7e:84:c3:20:6f:01:3d:a9:41:a1:3b:e3:
         f7:0f:75:b0:1e:1c:a5:52:e2:51:98:c8:2d:8d:5f:9a:88:31:
         04:7e:4b:75:9c:0b:52:80:93:ee:38:1c:c7:7c:3a:d5:ee:6f:
         80:a1:74:d0:fe:0f:97:1e:dc:80:45:67:31:d5:12:e3:02:91:
         ba:a5:56:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4jyTkbXMFtXyvuev/Rcd06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk
NWI0ZjYwHhcNMjYwNTE0MDAwMDUwWhcNMjYwNTE1MDAwMDUwWjAzMTEwLwYDVQQD
EyhiYmNiNzMwMzg0MDJhOGY5OTFjNWE1ZmNkZDg2MjhmYzJjMGZiZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL8+ppCNBnGdZ4sspkeuyCSoQQHJ
b4/v0/HmnoRjl7OVWAx+lP/iPauGI+MbT1gY+4rJ5ANmX/4avIDBQOAQQ2dzmaNP
iy/p4MVkFf16OPFwrGG9id8PWQ+pzSOSvVn0XRScf+gx2BP/bhGPPtyAAUqu37/e
0SQRJVAXgQmPm3/uTKJ0BIIvchFx0vNri9fo4atZax1IRP8UDrhW78fzKiBEycGm
etFeNlNuyvkPdmjNFuYcwLK6PEdN6AMZhcJSUFTgkymtoB94VskNFygW7wGmOg38
XvtShwZWlrIp2Hqd9bl5n48OEpDjScZI3XYI6xbVGXMeusgW2SH4Ed0U4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvLcwOEAqj5kcWl/N2GKPwsD7/KMB8GA1UdIwQY
MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt
YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx
LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq2hkUf6
43XejyyyqIJztpu1ofOOaPmb8Nq4xy+8ISFp8Mm20wHB0COu6HkNZczpH16HeIZS
32vdpxW3LnRvYfQsmTvkK7DuUzdsf6mTI6sn7+VNVqcC3UJNPj1aM2MxcHJL5kEZ
LwCHYsLLz1vVDTnujpxxVGHUkZZ2jlfXT/sYWh/C5+ZdsFOsDEsrS48ci1qElVpx
muTNPBevBuQiP0cNM77K6pqWp27fNzbFTH9+S/cqm1R5Xn5MfoTDIG8BPalBoTvj
9w91sB4cpVLiUZjILY1fmogxBH5LdZwLUoCT7jgcx3w61e5vgKF00P4Plx7cgEVn
MdUS4wKRuqVWMw==
-----END CERTIFICATE-----
Generated at Thu May 14 10:47:35 2026 by rpki-client