Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          t+SRepQ88bsPQzW6NibpvEycp3/qI7CR86YohE+vuyE=
Subject key identifier:   21:04:E0:7F:69:62:36:6B:4A:96:6E:78:CF:71:E4:42:1A:4D:D2:53
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A01074C74AB4EE030DF36F7FFD42F489A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A09
Signing time:             Mon 17 Aug 2026 16:01:23 +0000
Manifest this update:     Mon 17 Aug 2026 16:01:23 +0000
Manifest next update:     Tue 18 Aug 2026 16:01:23 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: Z2Wudsr4w2pjjOOh/JTvhTwyp0wtMEhdSOBoZxcQgTw=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:10:74:c7:4a:b4:ee:03:0d:f3:6f:7f:fd:42:f4:89:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug 17 16:01:23 2026 GMT
            Not After : Aug 18 16:01:23 2026 GMT
        Subject: CN=2104e07f6962366b4a966e78cf71e4421a4dd253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:74:5f:37:60:18:28:74:48:2a:f8:c0:c5:
                    57:5d:bb:03:aa:fe:4f:06:5a:a3:74:fd:47:56:7c:
                    2b:7e:88:fe:aa:7d:5c:c5:08:cb:1e:46:b5:a1:77:
                    69:ad:84:1c:4a:d6:de:58:73:c6:c3:f0:a4:3e:98:
                    58:7e:6b:e7:b5:8f:de:a0:65:14:d1:64:f4:f7:f1:
                    80:7f:62:20:f8:91:65:cd:79:e6:e9:a4:f9:1e:bb:
                    79:d3:a8:35:3f:e0:65:04:64:50:c0:d7:4b:4e:6a:
                    25:a7:b5:e8:9b:cf:83:fb:5a:38:12:4c:de:c1:73:
                    1a:e2:d4:6c:9c:73:c6:0b:1c:ff:89:92:66:71:02:
                    d7:53:d3:be:d8:7e:86:fc:f0:30:b6:1b:c1:aa:4b:
                    d1:5e:2d:96:5f:12:29:7c:eb:02:3c:99:df:3e:64:
                    cd:b8:bc:d5:75:cf:84:bf:ee:2a:a6:b6:c0:14:5e:
                    c1:55:f8:5a:ac:71:db:ba:1b:b3:ea:d4:80:29:fd:
                    49:8d:4a:e3:a5:ad:15:fc:ac:8d:ca:6f:88:76:07:
                    8f:28:24:1f:c2:df:42:e5:ba:8d:7e:93:86:24:de:
                    7f:28:7e:2f:94:11:20:d9:3b:cf:d4:88:dd:55:3e:
                    bf:dd:75:0a:69:32:55:81:20:ba:87:68:c6:ad:53:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:04:E0:7F:69:62:36:6B:4A:96:6E:78:CF:71:E4:42:1A:4D:D2:53
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:dc:7c:8b:ce:1c:4e:da:2a:8e:bb:6a:d9:47:d9:4a:22:
         84:94:30:97:0b:20:8d:6a:54:ab:5a:be:22:e1:be:bd:36:3e:
         85:0b:54:3c:19:6e:4e:3a:98:ed:5e:14:3e:a1:ce:d6:27:2d:
         5b:a6:48:6c:b4:ac:b4:19:1a:1d:80:74:b9:78:04:62:ae:a3:
         74:95:4e:fb:29:67:84:e5:88:72:1f:90:4a:3a:20:92:ae:b7:
         2a:0c:3b:d0:dc:de:05:7c:ce:b0:5f:23:7f:40:f7:f4:e8:6a:
         26:3a:63:bd:af:fa:49:8c:42:00:45:b2:cd:c4:c7:b8:28:b6:
         ef:15:ec:90:5c:6a:8d:5a:b2:5b:65:63:56:9a:2c:2e:5e:88:
         39:bb:2d:b5:88:7b:ab:66:1c:89:20:a1:d6:2f:64:c3:57:df:
         0b:d0:a9:c8:cb:55:db:4e:e5:c7:a4:2a:f8:65:e9:a4:17:8e:
         22:fa:1e:19:c4:3b:6b:72:f0:c1:03:9b:1e:d7:0e:8e:27:91:
         76:77:d5:ef:55:ca:f3:50:4e:52:83:95:5d:1c:60:55:88:2c:
         a6:ad:2d:bf:bd:73:00:b4:c8:6c:c8:d6:82:00:99:39:c1:90:
         4d:00:ca:6b:93:5b:fa:93:58:8e:61:6e:97:14:0e:ed:53:da:
         bd:eb:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:47:37 2026 by rpki-client