Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          naz0c0BLh2FJeuoEYwG7BaVSEn47b4sFOlBD99bdXNI=
Subject key identifier:   F8:FF:34:0C:99:6D:CA:4C:C6:E0:B1:CE:83:1E:1E:C7:1D:47:9B:EC
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F09D0C463653A85655C1CEE57CF9E1C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1981
Signing time:             Sat 27 Jun 2026 16:01:44 +0000
Manifest this update:     Sat 27 Jun 2026 16:01:44 +0000
Manifest next update:     Sun 28 Jun 2026 16:01:44 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: FgJn5or37mI99xV7HL7uxzHVsTHAiZ8fcB6VzgTeUqc=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:09:d0:c4:63:65:3a:85:65:5c:1c:ee:57:cf:9e:1c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jun 27 16:01:44 2026 GMT
            Not After : Jun 28 16:01:44 2026 GMT
        Subject: CN=f8ff340c996dca4cc6e0b1ce831e1ec71d479bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:20:80:ba:9e:b1:6b:56:ee:49:66:77:65:
                    f5:97:d3:65:ca:07:a2:b8:db:1a:41:f0:d1:3e:49:
                    c8:23:a8:b1:dc:8f:1e:cf:10:c3:20:22:72:e1:06:
                    ee:78:de:19:6e:a1:79:f2:bd:26:d7:be:45:53:72:
                    70:74:bb:eb:ad:51:64:af:08:6a:75:e2:9a:e4:84:
                    24:45:0b:f4:e3:65:86:ec:97:90:cf:5a:31:43:79:
                    ec:73:66:d3:d8:9a:e1:a6:a2:cd:3d:4d:6e:88:e4:
                    d5:30:29:7f:6b:f4:22:3b:01:57:c1:0c:4a:77:37:
                    7e:86:79:2d:10:1c:5f:37:ce:57:df:1b:1c:d5:e8:
                    dd:b3:3d:3f:a3:ff:6d:87:17:15:a6:29:f7:b7:01:
                    ce:5f:5c:bc:0f:06:50:98:f4:ec:38:b8:e5:41:06:
                    99:5d:2d:b1:4b:26:f4:44:bf:f0:4e:29:b0:9b:15:
                    2f:c8:18:ad:56:99:52:4a:ab:45:94:90:ed:05:ac:
                    09:b9:36:a8:82:35:cb:1b:19:f6:37:18:94:d4:ea:
                    f0:12:cd:d5:3c:6a:96:58:28:5a:fc:ad:00:a5:19:
                    ef:07:40:d5:4e:96:b8:2b:a4:dd:e3:85:42:73:7d:
                    a0:91:14:4f:a7:f5:7f:6d:30:19:ec:55:53:9d:83:
                    64:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FF:34:0C:99:6D:CA:4C:C6:E0:B1:CE:83:1E:1E:C7:1D:47:9B:EC
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:9d:cc:18:df:5f:2b:0b:90:0c:04:ce:32:70:2b:5f:1d:
         74:09:e7:18:c5:d8:4c:29:36:63:ea:1f:9f:f0:79:6f:a3:bd:
         0f:c7:1b:c4:d2:aa:d5:18:99:98:8f:70:9a:a5:63:ea:f0:45:
         59:2f:a9:d0:dd:42:9e:02:8c:2b:05:c2:66:d2:c1:59:04:3a:
         14:0d:87:3c:cd:48:79:c7:bf:6b:f0:82:0b:df:49:b0:a5:b7:
         14:5b:e5:51:55:11:27:26:19:9b:cb:f2:de:de:b9:1d:c9:d2:
         c5:d2:66:8a:49:8a:90:28:8e:8a:19:95:3f:c6:f3:31:50:60:
         d7:a9:ba:0e:cb:74:06:84:b0:68:2d:9a:0d:27:70:e4:ef:0d:
         b4:5e:33:40:fb:5a:35:cb:e7:5d:a3:0c:62:8a:f2:ca:2c:99:
         dc:a8:a4:34:2d:c7:1f:a3:f5:c0:6a:d0:98:cb:b9:46:3e:d2:
         2e:27:e5:5a:5b:e0:8c:ff:5d:47:29:65:c4:fe:ce:4c:60:eb:
         b7:b0:47:99:77:6e:3d:c7:af:2b:e5:8f:5f:ca:45:c7:f2:d3:
         c5:de:8f:96:4f:55:22:f2:e7:3e:af:c2:8d:6f:09:ad:4f:9c:
         5b:8e:e3:02:c8:cd:f9:b2:8d:58:50:c0:85:18:f4:3d:0d:ed:
         75:a4:2f:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8J0MRjZTqFZVwc7lfPnhxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwNjI3MTYwMTQ0WhcNMjYwNjI4MTYwMTQ0WjAzMTEwLwYDVQQD
EyhmOGZmMzQwYzk5NmRjYTRjYzZlMGIxY2U4MzFlMWVjNzFkNDc5YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0QggLqesWtW7klmd2X1l9Nlygei
uNsaQfDRPknII6ix3I8ezxDDICJy4QbueN4ZbqF58r0m175FU3JwdLvrrVFkrwhq
deKa5IQkRQv042WG7JeQz1oxQ3nsc2bT2JrhpqLNPU1uiOTVMCl/a/QiOwFXwQxK
dzd+hnktEBxfN85X3xsc1ejdsz0/o/9thxcVpin3twHOX1y8DwZQmPTsOLjlQQaZ
XS2xSyb0RL/wTimwmxUvyBitVplSSqtFlJDtBawJuTaogjXLGxn2NxiU1OrwEs3V
PGqWWCha/K0ApRnvB0DVTpa4K6Td44VCc32gkRRPp/V/bTAZ7FVTnYNkuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj/NAyZbcpMxuCxzoMeHscdR5vsMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahOdzBjf
XysLkAwEzjJwK18ddAnnGMXYTCk2Y+ofn/B5b6O9D8cbxNKq1RiZmI9wmqVj6vBF
WS+p0N1CngKMKwXCZtLBWQQ6FA2HPM1Iece/a/CCC99JsKW3FFvlUVURJyYZm8vy
3t65HcnSxdJmikmKkCiOihmVP8bzMVBg16m6Dst0BoSwaC2aDSdw5O8NtF4zQPta
NcvnXaMMYoryyiyZ3KikNC3HH6P1wGrQmMu5Rj7SLiflWlvgjP9dRyllxP7OTGDr
t7BHmXduPcevK+WPX8pFx/LTxd6Plk9VIvLnPq/CjW8JrU+cW47jAsjN+bKNWFDA
hRj0PQ3tdaQvIg==
-----END CERTIFICATE-----
Generated at Sun Jun 28 00:57:25 2026 by rpki-client