Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          9BAKsgzmlF8WorRfAvRb+QAS9DDIvDGqhuhUn0i1hiU=
Subject key identifier:   A3:67:00:29:04:07:4B:4B:25:83:FA:DE:EC:35:86:43:5F:BD:33:52
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A120C05FA4023A32159B39A76CE8893F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A96
Signing time:             Fri 09 Oct 2026 13:00:40 +0000
Manifest this update:     Fri 09 Oct 2026 13:00:40 +0000
Manifest next update:     Sat 10 Oct 2026 13:00:40 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: GRtndk8E8vsLHtNxH+u34/22NqIVZiuDudbK8yUzFcA=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c0:5f:a4:02:3a:32:15:9b:39:a7:6c:e8:89:3f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Oct  9 13:00:40 2026 GMT
            Not After : Oct 10 13:00:40 2026 GMT
        Subject: CN=a367002904074b4b2583fadeec3586435fbd3352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:0c:c6:87:ae:97:8b:cd:3b:cf:02:e1:2e:
                    dd:56:5e:9f:6a:33:23:e6:47:8b:c6:0f:6d:c7:89:
                    e2:8a:e1:2f:4d:b4:52:dd:28:39:b3:6b:32:7b:19:
                    fe:23:e6:e3:94:51:c4:da:89:2f:09:8a:c3:ef:bf:
                    30:32:72:21:bf:6a:8e:91:54:68:4a:b9:5e:49:44:
                    a0:ef:57:c6:b5:4b:db:06:6c:b7:ea:40:d9:83:bb:
                    5f:53:13:aa:ca:3f:21:fb:c4:5f:b1:13:58:cc:82:
                    c7:fe:78:2b:82:4a:b4:c5:b3:56:15:f3:1b:8c:39:
                    60:87:5e:78:c1:80:47:d8:13:3d:61:c4:38:34:ec:
                    cf:e1:18:d2:71:2d:61:3c:45:92:52:ba:f6:5c:fe:
                    60:92:b4:51:e7:bf:08:dd:2f:4d:10:60:76:fe:ae:
                    34:58:5a:3d:a6:6c:a1:4a:ca:cf:44:00:0a:c7:a6:
                    8b:c9:b6:d7:08:1c:00:de:cc:41:00:a1:78:a4:78:
                    43:d9:f1:37:04:63:a0:3b:a0:82:e4:07:ea:0a:f2:
                    11:50:e4:94:d9:ad:f3:d3:e6:52:f7:12:eb:0b:07:
                    dd:02:08:87:3f:30:3d:1e:a0:0f:b8:44:2b:0d:88:
                    30:46:93:a3:ec:b6:3f:40:22:05:60:8a:22:c4:14:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:67:00:29:04:07:4B:4B:25:83:FA:DE:EC:35:86:43:5F:BD:33:52
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:53:4a:93:e8:bb:04:f8:0d:54:7b:55:bf:b0:7d:65:12:96:
         8c:d5:ae:53:c1:6b:18:53:b6:5e:eb:de:62:fe:14:1c:c9:d5:
         4c:72:f0:62:f8:6e:9f:2d:3d:e1:39:80:0f:bb:9f:6a:a9:c2:
         c1:ed:67:fc:40:18:d6:85:8d:8b:4a:9e:16:5c:ec:38:eb:78:
         16:e3:87:17:a7:4b:35:32:e7:f7:0d:6d:2b:c8:8b:b4:ed:48:
         b1:c2:b5:bb:d5:d1:8c:27:3b:20:8e:5b:11:2e:bf:82:f3:20:
         b3:2b:9a:fa:de:1a:4e:bb:77:57:2d:99:f9:08:c2:8e:1e:96:
         29:e1:4f:d1:fd:be:fa:81:fa:ab:72:55:9c:08:18:12:ac:6e:
         d3:80:2d:8b:2f:e7:95:82:54:e4:d5:a2:bd:47:da:16:f4:ea:
         6e:ef:9f:5f:34:8d:b8:27:d4:e5:49:78:a6:4c:95:fa:cf:a4:
         85:32:07:68:0c:83:4b:78:4a:6c:dc:3b:91:b4:3f:59:e5:f5:
         56:eb:ca:92:cf:20:95:e2:cf:69:ab:81:d1:38:36:34:b9:4c:
         7d:cf:e0:4c:d0:18:ae:78:60:28:8e:65:31:1f:1f:8f:b2:df:
         34:4b:75:37:1c:84:02:8d:2b:44:60:d2:e4:cb:70:d5:17:74:
         69:51:48:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgwF+kAjoyFZs5p2zoiT+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYxMDA5MTMwMDQwWhcNMjYxMDEwMTMwMDQwWjAzMTEwLwYDVQQD
EyhhMzY3MDAyOTA0MDc0YjRiMjU4M2ZhZGVlYzM1ODY0MzVmYmQzMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozAMxoeul4vNO88C4S7dVl6fajMj
5keLxg9tx4niiuEvTbRS3Sg5s2syexn+I+bjlFHE2okvCYrD778wMnIhv2qOkVRo
SrleSUSg71fGtUvbBmy36kDZg7tfUxOqyj8h+8RfsRNYzILH/ngrgkq0xbNWFfMb
jDlgh154wYBH2BM9YcQ4NOzP4RjScS1hPEWSUrr2XP5gkrRR578I3S9NEGB2/q40
WFo9pmyhSsrPRAAKx6aLybbXCBwA3sxBAKF4pHhD2fE3BGOgO6CC5AfqCvIRUOSU
2a3z0+ZS9xLrCwfdAgiHPzA9HqAPuEQrDYgwRpOj7LY/QCIFYIoixBS11wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNnACkEB0tLJYP63uw1hkNfvTNSMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFNKk+i7
BPgNVHtVv7B9ZRKWjNWuU8FrGFO2XuveYv4UHMnVTHLwYvhuny094TmAD7ufaqnC
we1n/EAY1oWNi0qeFlzsOOt4FuOHF6dLNTLn9w1tK8iLtO1IscK1u9XRjCc7II5b
ES6/gvMgsyua+t4aTrt3Vy2Z+QjCjh6WKeFP0f2++oH6q3JVnAgYEqxu04Atiy/n
lYJU5NWivUfaFvTqbu+fXzSNuCfU5Ul4pkyV+s+khTIHaAyDS3hKbNw7kbQ/WeX1
VuvKks8gleLPaauB0Tg2NLlMfc/gTNAYrnhgKI5lMR8fj7LfNEt1NxyEAo0rRGDS
5Mtw1Rd0aVFIRA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:03:12 2026 by rpki-client