Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File:                     BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier:          9ACnz+e3FjrrzGYr9Vh5tprll44O74NoqH0tQNGIErg=
Subject key identifier:   26:67:D0:3A:5B:4F:75:6E:46:CD:FA:20:8B:F2:0D:83:89:BA:24:B8
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer:       /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial:       2FF39DEA12374253C4AE60557FC95F3E4AE92DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number:          BE
Signing time:             Wed 26 Aug 2026 22:49:19 +0000
Manifest this update:     Wed 26 Aug 2026 22:44:19 +0000
Manifest next update:     Thu 27 Aug 2026 23:30:19 +0000
Files and hashes:         1: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: 8W+F4K9AfNau8ZAtuw9MWiCjlfOAriYkwkiRGbzKSDM=)
                          2: AS11967.asa (hash: 3G71/8YzgM4CTftmey2qsl+DI5Cry2OneqPjAmyn8TM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f3:9d:ea:12:37:42:53:c4:ae:60:55:7f:c9:5f:3e:4a:e9:2d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
        Validity
            Not Before: Aug 26 22:44:19 2026 GMT
            Not After : Aug 27 23:30:19 2026 GMT
        Subject: CN=2667D03A5B4F756E46CDFA208BF20D8389BA24B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:d8:73:ab:53:ab:3e:36:dc:86:8e:36:67:
                    09:28:3d:9e:9c:7e:0e:09:7d:86:3a:d4:71:9d:d9:
                    9e:81:5c:b1:0b:1f:cd:e9:0e:64:a7:91:cf:37:d2:
                    cd:46:f6:cd:0c:5c:f3:28:af:98:72:bf:1c:df:a8:
                    7b:97:8e:34:d6:9a:8c:bd:20:16:d2:af:f1:82:56:
                    c2:cb:e2:d9:db:29:6c:4c:7a:af:2e:f2:96:4c:ad:
                    e4:a2:a8:a8:19:3b:f0:d1:d0:47:37:f2:2e:c7:28:
                    f6:30:f0:a2:0b:be:5f:2c:db:cc:68:e1:ee:49:bf:
                    19:2f:19:a5:62:02:79:9a:66:4f:60:1c:4f:93:7e:
                    a1:c0:a4:e8:74:cb:54:d7:4a:60:2b:b6:f0:c5:12:
                    a6:e8:f4:6e:79:7c:3d:69:0e:a9:17:5e:a4:b6:66:
                    fd:f3:97:d8:b8:35:76:b2:c4:01:3d:03:2f:11:6d:
                    ff:5a:91:61:e1:4b:59:41:7b:57:c6:4b:51:33:f0:
                    d0:c1:a8:d1:68:0a:88:72:69:3e:86:d6:b4:7c:3e:
                    2e:ca:00:17:a5:f1:8b:ea:d5:b3:8e:03:c8:dc:e6:
                    d4:5a:94:68:7b:f8:fe:ab:ab:54:9f:8f:e8:97:e1:
                    a6:4b:e2:2b:81:d9:ca:48:a2:9e:a2:7e:1e:a8:a5:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:D0:3A:5B:4F:75:6E:46:CD:FA:20:8B:F2:0D:83:89:BA:24:B8
            X509v3 Authority Key Identifier:
                keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:24:13:fa:43:96:1f:40:d8:d6:4f:0d:53:fd:99:99:f0:
         15:95:85:ac:c1:f0:ee:0c:bf:f4:29:9a:52:97:bc:f5:d2:c7:
         bf:ff:71:1d:09:85:d8:98:fb:cb:01:f2:d7:28:c4:03:89:a7:
         68:df:d6:4b:26:f6:42:b0:f8:35:a2:38:4e:9a:69:57:7b:d1:
         8d:5d:e8:8c:da:b8:4f:d6:51:63:86:26:06:3a:40:8e:c7:eb:
         e8:2f:22:2b:49:b8:62:6d:3e:08:26:e1:ae:a0:26:6e:3e:f6:
         7a:dc:d1:db:c7:ee:03:ca:71:95:9c:f2:94:13:5c:56:ad:93:
         0b:3a:94:7d:b5:d1:b1:1d:9f:1f:46:09:c9:9f:6c:a6:0c:7c:
         83:18:fc:65:76:37:25:c0:1c:39:af:6f:1d:95:c0:67:1b:ba:
         99:d9:2c:5a:2d:0b:7d:c0:dd:00:27:4a:2b:6e:91:bb:51:56:
         fe:f5:29:ce:39:c0:fc:cb:59:e9:b8:a3:27:dc:3f:87:c0:4b:
         55:4f:2b:75:66:05:98:3c:34:52:02:bf:f2:b0:33:14:a8:c9:
         96:9a:58:67:02:7f:ae:b5:80:9f:68:e4:14:75:45:8f:4e:9e:
         f5:b4:29:a9:72:1d:60:a8:c4:37:3a:8a:05:32:48:55:6f:92:
         22:6b:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:10:52 2026 by rpki-client