Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          ofPvUPjYOvbWNpdeJ1ICEt8zxSiPA8N6Pj8VKf5e/gA=
Subject key identifier:   7D:76:D9:88:35:72:B6:AC:6F:22:7A:3B:2F:F5:25:53:B6:42:77:7D
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A091D7CA036BE58493BBED5675C592EC34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A4C
Signing time:             Fri 11 Sep 2026 19:00:33 +0000
Manifest this update:     Fri 11 Sep 2026 19:00:33 +0000
Manifest next update:     Sat 12 Sep 2026 19:00:33 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: +f1YRFjJNYPFrVnhYI0dmg2jud3/hP0ywW70Q73Np4M=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:91:d7:ca:03:6b:e5:84:93:bb:ed:56:75:c5:92:ec:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep 11 19:00:33 2026 GMT
            Not After : Sep 12 19:00:33 2026 GMT
        Subject: CN=7d76d9883572b6ac6f227a3b2ff52553b642777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:a6:25:05:1c:2a:ce:da:d6:4d:63:6b:3b:
                    f6:36:bc:43:dc:da:30:af:75:d8:93:58:aa:e7:7f:
                    59:3b:ca:66:da:46:6a:e7:4d:f1:7a:af:22:9b:93:
                    91:20:09:39:f9:79:84:29:83:a2:b1:1f:50:b8:01:
                    28:0b:15:8b:b4:ce:fd:6e:8d:f7:12:29:5e:dd:91:
                    81:71:ff:c3:e0:81:00:ad:06:90:5a:f8:94:ce:0a:
                    0c:e9:82:83:0c:8c:dd:63:ee:1b:0e:51:91:94:36:
                    9b:fd:13:f6:d6:16:61:56:f8:d4:19:da:ad:fa:d1:
                    33:8c:31:f7:2c:6c:ca:90:bf:6e:2e:b2:11:5c:3b:
                    35:8d:9f:e5:62:1a:c5:e3:41:c6:c8:ad:90:1b:f8:
                    f5:23:b8:4c:79:c7:c2:80:c7:e7:b0:98:2b:ee:1b:
                    f1:12:8e:58:20:b4:2d:bb:d4:3f:47:e0:62:ca:6f:
                    13:00:93:4b:d3:52:7b:b4:84:37:66:17:0a:74:d2:
                    d0:5d:47:f7:30:d9:ec:28:13:07:5c:f1:25:ea:01:
                    7c:61:93:2f:95:ea:6b:2b:81:4b:24:ad:67:67:35:
                    09:57:ee:be:1b:af:71:73:7a:e8:f6:91:58:71:29:
                    79:c0:31:5b:85:20:d3:6b:48:88:ec:d3:73:09:64:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:D9:88:35:72:B6:AC:6F:22:7A:3B:2F:F5:25:53:B6:42:77:7D
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:b9:4f:36:5a:60:d7:91:b1:12:34:f0:95:e9:30:09:21:
         15:74:f7:21:1a:d3:c5:2f:56:e8:3f:cb:6a:9f:b0:2e:7d:6c:
         57:b6:4d:84:7b:3c:30:ec:61:55:16:60:34:9a:20:02:fc:8c:
         34:eb:9f:6f:81:14:bc:be:b2:43:2b:7f:dc:22:7d:c5:ef:de:
         2c:21:61:5c:0a:4f:cb:0e:fb:d1:3e:98:c5:f5:cc:ff:38:07:
         26:6c:12:d3:94:8c:52:a2:52:f3:4b:0b:a1:7c:a7:81:15:5b:
         42:1b:26:a9:4a:b5:a7:15:00:48:66:24:af:99:aa:8e:60:9a:
         bb:d8:7f:c9:14:ca:d5:e9:bc:82:4c:cb:1d:e5:1e:79:46:ff:
         d2:28:07:6c:17:83:57:2e:18:59:21:87:bd:35:7a:f7:c7:97:
         6f:b6:95:4d:e3:d9:49:9b:27:26:44:46:56:53:d8:35:ff:cb:
         4a:2c:18:64:29:10:f6:3d:43:51:a9:5d:89:bd:e4:f0:c0:b4:
         50:24:44:01:f0:1f:5f:54:fc:48:b7:bc:ac:c3:e5:22:d0:e7:
         9c:e8:43:3e:cb:d1:c7:16:03:43:a5:63:f3:c6:af:9b:a8:d4:
         cd:e5:cb:5f:73:d6:cb:2d:30:70:52:07:55:30:87:e9:c6:2c:
         72:55:87:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCR18oDa+WEk7vtVnXFkuw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwOTExMTkwMDMzWhcNMjYwOTEyMTkwMDMzWjAzMTEwLwYDVQQD
Eyg3ZDc2ZDk4ODM1NzJiNmFjNmYyMjdhM2IyZmY1MjU1M2I2NDI3NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeqmJQUcKs7a1k1jazv2NrxD3Now
r3XYk1iq539ZO8pm2kZq503xeq8im5ORIAk5+XmEKYOisR9QuAEoCxWLtM79bo33
Eile3ZGBcf/D4IEArQaQWviUzgoM6YKDDIzdY+4bDlGRlDab/RP21hZhVvjUGdqt
+tEzjDH3LGzKkL9uLrIRXDs1jZ/lYhrF40HGyK2QG/j1I7hMecfCgMfnsJgr7hvx
Eo5YILQtu9Q/R+Biym8TAJNL01J7tIQ3ZhcKdNLQXUf3MNnsKBMHXPEl6gF8YZMv
leprK4FLJK1nZzUJV+6+G69xc3ro9pFYcSl5wDFbhSDTa0iI7NNzCWRm/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH122Yg1crasbyJ6Oy/1JVO2Qnd9MB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAW5TzZa
YNeRsRI08JXpMAkhFXT3IRrTxS9W6D/Lap+wLn1sV7ZNhHs8MOxhVRZgNJogAvyM
NOufb4EUvL6yQyt/3CJ9xe/eLCFhXApPyw770T6YxfXM/zgHJmwS05SMUqJS80sL
oXyngRVbQhsmqUq1pxUASGYkr5mqjmCau9h/yRTK1em8gkzLHeUeeUb/0igHbBeD
Vy4YWSGHvTV698eXb7aVTePZSZsnJkRGVlPYNf/LSiwYZCkQ9j1DUaldib3k8MC0
UCREAfAfX1T8SLe8rMPlItDnnOhDPsvRxxYDQ6Vj88avm6jUzeXLX3PWyy0wcFIH
VTCH6cYsclWHdA==
-----END CERTIFICATE-----
Generated at Sat Sep 12 00:06:26 2026 by rpki-client