Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          Ct/m6uX2qw6cp8sRWGfN69KTlalAqJm/pGKh4o/6X08=
Subject key identifier:   DC:C3:92:04:12:BC:79:7C:F5:67:AA:F6:4D:0F:A3:43:1C:D0:9B:35
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A175B94C129B67D1AFAA12778025447652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1AC2
Signing time:             Mon 26 Oct 2026 01:00:40 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:40 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:40 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 2qHQFNZW0ks1oBCR5b0NwO0qiEM4+ub7uW67Its94N8=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:4c:12:9b:67:d1:af:aa:12:77:80:25:44:76:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Oct 26 01:00:40 2026 GMT
            Not After : Oct 27 01:00:40 2026 GMT
        Subject: CN=dcc3920412bc797cf567aaf64d0fa3431cd09b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:40:cc:21:93:46:4a:53:30:99:e6:fe:db:
                    a4:80:e4:42:60:a6:45:1b:56:9c:f9:5c:34:34:a8:
                    74:22:36:e6:7d:5a:80:90:51:59:74:45:1f:bb:b9:
                    13:74:08:1f:bf:a3:55:02:a9:c5:6d:d3:0f:8f:05:
                    7f:88:d5:87:d7:81:2d:b9:f6:d9:96:85:d9:01:8d:
                    a4:ab:7c:6d:e8:c6:75:45:eb:62:c2:25:73:31:ea:
                    7d:c7:43:f7:8c:d4:36:d9:97:1a:a6:bd:db:f5:37:
                    d5:ee:c0:03:34:40:85:2f:77:c6:2c:b1:45:bb:df:
                    e1:cf:91:46:3b:2b:95:d2:6f:56:4c:11:e7:3d:8f:
                    3c:60:c3:86:77:8e:60:be:72:8e:c3:aa:e4:01:8e:
                    fb:c5:9c:f3:e7:5a:09:ce:3f:b8:ea:b6:92:ac:c1:
                    35:b0:77:bb:ae:86:04:b5:7b:cb:b7:d2:90:90:18:
                    0c:dd:2e:8b:ec:69:2b:9b:98:8e:69:3b:09:57:60:
                    51:5e:bc:d7:b4:5f:9e:ce:f5:50:0f:e6:af:bf:80:
                    8d:66:b0:d7:bc:92:fa:d6:36:f7:33:8b:22:a2:7e:
                    95:d3:f5:f2:11:92:74:44:2b:04:5c:3d:43:66:7c:
                    9d:78:8c:05:d4:4f:33:d7:68:81:43:85:45:72:bc:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:92:04:12:BC:79:7C:F5:67:AA:F6:4D:0F:A3:43:1C:D0:9B:35
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d0:5c:b2:9d:7f:ea:60:3b:ba:ac:1e:2a:25:d2:4e:78:e8:
         20:21:68:a4:bb:e2:9c:0f:f5:53:06:a8:03:d8:a4:db:af:0e:
         c8:d8:32:1b:48:b1:5e:ed:b6:c8:7c:87:87:8f:4b:ff:9e:7f:
         da:fa:99:ed:09:7b:68:45:fa:6c:68:50:a6:b8:e5:c8:65:01:
         27:ae:a1:dc:c6:d8:98:36:65:8a:43:47:ce:58:6a:d3:e8:ad:
         78:5b:50:7f:bb:49:e5:ff:ae:5c:ba:46:5a:fe:2f:c4:07:cb:
         97:30:11:fe:e0:8f:84:38:c1:bc:bd:5b:10:09:4c:9b:2f:25:
         cc:83:c7:b8:be:b9:b2:fd:6d:7a:86:b9:1d:f9:af:4f:64:c1:
         e4:37:4b:9e:2e:22:7a:a6:94:70:ed:8f:88:89:5b:2a:33:49:
         5e:11:29:62:12:c7:b5:4f:09:81:28:21:c7:0f:ac:9f:50:da:
         6e:3b:eb:70:88:0c:65:9c:cc:01:b3:d5:80:97:b7:93:f9:09:
         ff:72:f0:b0:96:60:92:a5:cf:b3:99:a0:05:c1:af:2a:ba:90:
         0a:8c:36:4e:d2:95:72:b6:2f:52:ce:f2:72:2d:80:7a:fb:60:
         77:9e:66:2e:69:89:86:3e:40:d2:b6:c7:48:dd:89:0e:a1:14:
         ae:ef:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:29:30 2026 by rpki-client