Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          m7aVAP8kfmuqx258W/jGH8jZS45QAD/xLxxBkQGYM8o=
Subject key identifier:   B5:57:73:CB:78:51:65:A6:36:53:69:6B:87:F9:C5:07:C9:22:50:8D
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019FD685EBD2898B67D99482E3CECFE1F37E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19EB
Signing time:             Thu 06 Aug 2026 10:02:08 +0000
Manifest this update:     Thu 06 Aug 2026 10:02:08 +0000
Manifest next update:     Fri 07 Aug 2026 10:02:08 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: qlgklxuhG+MYeXvkK9ZmMV9ytlb0Cyx7lfiauQVwATs=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:85:eb:d2:89:8b:67:d9:94:82:e3:ce:cf:e1:f3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug  6 10:02:08 2026 GMT
            Not After : Aug  7 10:02:08 2026 GMT
        Subject: CN=b55773cb785165a63653696b87f9c507c922508d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:10:af:12:77:f5:39:26:73:7a:f7:cb:2e:
                    2b:fa:9c:46:01:fe:3d:c8:c3:f8:a2:aa:6a:99:90:
                    e9:b8:f1:9b:31:78:dc:c7:aa:c6:ae:6e:8b:fd:20:
                    cf:7a:cc:54:1d:4b:5d:4a:fe:65:02:d4:f0:51:5c:
                    6d:eb:13:64:43:1f:71:84:05:76:36:69:9c:7b:1b:
                    33:0c:ce:34:bd:8b:73:70:d9:9f:a8:57:92:a2:13:
                    3a:10:d7:2a:35:8b:51:83:e3:a9:e8:c2:2b:90:74:
                    18:17:6e:9b:7b:b9:c6:32:e4:18:01:04:90:1a:33:
                    b4:d5:64:07:f1:af:cd:26:f4:02:a7:63:b3:2d:02:
                    10:cd:7d:4f:44:3a:ca:92:f3:0b:2b:fd:58:ce:e4:
                    c7:5b:00:12:cc:b6:6f:20:6d:ae:14:b7:bf:5f:94:
                    0a:ce:a7:6d:f3:e0:94:74:d3:19:b1:f8:a8:c1:93:
                    39:57:0a:bf:8d:32:71:03:49:9a:a2:8f:fb:7f:ec:
                    5c:ca:1a:da:8b:5f:ee:d4:ea:4c:b2:29:17:39:9e:
                    d8:d9:90:45:a3:07:e0:c2:71:07:0e:b9:8f:c0:26:
                    1f:1b:7a:61:56:ea:15:2b:42:37:b9:ab:f3:b6:a4:
                    7d:5f:71:84:05:cd:8b:c4:b9:d1:b3:61:41:e4:43:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:57:73:CB:78:51:65:A6:36:53:69:6B:87:F9:C5:07:C9:22:50:8D
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:03:c5:ce:52:a6:03:89:27:91:a7:e0:1b:14:b0:2c:f6:c8:
         27:51:21:8f:fe:92:31:c0:5d:0d:3c:93:ba:64:13:54:5c:c9:
         3e:7a:47:dc:5e:46:72:11:93:84:5f:5c:d4:40:26:39:c4:64:
         f0:58:d0:ea:5a:38:dd:c9:d6:66:fe:98:e9:6f:81:92:68:63:
         a7:55:6c:70:42:d1:14:e8:3c:1b:e9:3e:75:21:9e:9b:8d:74:
         55:f6:4c:2d:80:d4:ec:39:a7:fb:a0:6b:df:f4:85:52:7a:4f:
         16:e4:ec:72:63:c2:6b:d5:4c:27:6c:72:0f:09:e9:da:b1:7b:
         ad:b4:4e:4f:84:2b:8a:ea:1d:15:ee:a1:ef:44:b9:3c:4e:46:
         68:40:59:72:d7:b7:76:cb:6f:c0:54:9c:c0:29:ec:5b:37:b1:
         2d:55:c1:c1:1b:10:eb:87:6d:56:b2:ab:4e:0a:40:63:52:b8:
         85:42:fe:cc:14:da:21:3c:8e:58:96:ce:05:72:cc:f9:4d:71:
         70:77:37:ec:6f:e9:75:a5:de:e2:29:df:81:f3:f9:dd:f1:c8:
         bc:b4:c3:6a:89:2c:f5:61:b8:92:f3:be:1b:85:3c:f7:f9:f8:
         63:ad:7b:01:d1:d6:a1:9c:9d:ab:15:01:0d:8f:63:65:5e:58:
         70:6b:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 13:57:28 2026 by rpki-client