Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          /qQ7Irh3q+LYjZqFVtzN1jz8ar9Cjraqouqn0rgLqIc=
Subject key identifier:   F2:78:78:41:9F:2D:66:C4:B8:16:A4:5B:5C:66:C9:C2:D8:A5:B0:1C
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F58FDF51F0065057AA08976BF5587AFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19AA
Signing time:             Mon 13 Jul 2026 01:01:05 +0000
Manifest this update:     Mon 13 Jul 2026 01:01:05 +0000
Manifest next update:     Tue 14 Jul 2026 01:01:05 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: LDajXqBZSo0S83nbrTQvZ7vzoBRxT+VQWq8mBE1sC9E=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:58:fd:f5:1f:00:65:05:7a:a0:89:76:bf:55:87:af:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 13 01:01:05 2026 GMT
            Not After : Jul 14 01:01:05 2026 GMT
        Subject: CN=f27878419f2d66c4b816a45b5c66c9c2d8a5b01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:31:94:38:d4:0c:4c:37:ee:ee:8d:e0:52:
                    70:9d:f0:1f:65:cb:aa:f2:04:ed:8d:76:1f:a1:0d:
                    e8:98:93:af:45:e6:9c:43:28:aa:f5:77:0b:88:3b:
                    d7:85:18:ce:3b:a6:b0:8d:32:5c:6d:8a:e5:34:35:
                    bd:85:df:fa:d3:50:90:43:96:b9:33:01:c0:f5:78:
                    e2:84:7d:ea:1a:20:ad:2a:07:e2:c6:6c:75:54:df:
                    f3:9b:cc:ff:df:c8:21:a7:b6:2b:d3:3f:90:d3:f8:
                    24:f4:c9:72:bc:d9:80:1f:11:ef:df:6b:6a:9f:49:
                    3b:be:02:65:48:eb:f9:fc:67:1d:34:12:d2:b9:1d:
                    87:ed:a1:82:71:26:c9:53:62:5a:a1:4d:94:a2:f3:
                    3e:5d:93:c1:c2:e1:cb:3f:aa:db:1d:b4:bd:d9:43:
                    cd:50:b5:3c:6c:7e:e7:f1:b9:b6:5f:ad:59:9e:1d:
                    f0:b8:cf:56:44:a1:98:53:9b:76:14:79:d6:48:0d:
                    b8:f0:b6:dc:d5:b8:49:e5:97:81:7f:4a:b6:24:25:
                    5c:e4:4a:13:83:be:94:2d:cb:8e:63:66:90:05:79:
                    51:a1:d9:47:32:74:94:24:40:fb:58:48:3f:c1:e3:
                    ed:e7:da:07:82:35:0f:df:27:01:fe:9d:a5:77:6e:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:78:41:9F:2D:66:C4:B8:16:A4:5B:5C:66:C9:C2:D8:A5:B0:1C
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3b:f8:be:52:35:d5:59:ce:60:3a:5e:b5:c8:c0:91:b9:ed:
         7e:35:dc:8b:c0:7c:d1:78:c0:1b:65:13:2c:42:b1:72:41:c7:
         e8:c8:2a:20:d6:fe:4e:74:d2:8a:0d:36:b4:24:14:d9:35:dd:
         82:60:bf:dd:cc:25:a5:79:64:85:6d:a2:c2:7f:44:2b:7d:3f:
         e0:88:76:da:c7:ac:5f:97:81:47:b5:21:23:77:29:36:c1:b6:
         8a:4a:3e:ae:a7:7e:92:10:1a:5b:8c:ab:84:1f:21:d6:70:a3:
         5e:96:76:e4:85:5e:27:f8:2d:f2:91:30:c7:fe:55:57:4e:23:
         7a:72:cd:2f:47:f0:ce:6a:aa:76:3d:58:12:f0:d3:8d:52:1b:
         bd:33:bc:32:01:3a:cd:5d:60:2e:82:69:6d:13:47:07:17:ba:
         d3:3f:58:a0:fc:a8:af:c6:fe:86:e9:58:ae:59:08:81:92:48:
         d4:cb:6f:e6:ae:da:46:25:27:2e:dc:e8:6c:ba:72:5b:bc:c8:
         c1:35:dd:0d:3d:06:09:b8:f6:6b:a6:ef:b2:81:dd:67:55:93:
         99:7f:f0:00:32:2a:82:7c:e7:9b:55:b0:11:87:00:0e:07:e7:
         4d:3b:cf:1e:42:9e:c7:33:0f:9c:42:17:6d:95:0d:4a:69:54:
         8f:83:1d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:35:33 2026 by rpki-client