Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          ka45+vuQo+IqhbEeXw8INEMWTzLbaUw1bmH4KqKQEpc=
Subject key identifier:   7A:52:B2:14:AA:96:0D:07:22:AA:AD:E8:C7:ED:27:41:70:AE:0D:0D
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A01451638728810C7E21050DFE320AED9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A0B
Signing time:             Tue 18 Aug 2026 10:01:13 +0000
Manifest this update:     Tue 18 Aug 2026 10:01:13 +0000
Manifest next update:     Wed 19 Aug 2026 10:01:13 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: Li96qfaz3WaX+1H4qs4rKnDD5dhmBPXXmDCrvqn/AVc=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Aug 2026 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:14:51:63:87:28:81:0c:7e:21:05:0d:fe:32:0a:ed:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug 18 10:01:13 2026 GMT
            Not After : Aug 19 10:01:13 2026 GMT
        Subject: CN=7a52b214aa960d0722aaade8c7ed274170ae0d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bd:3f:31:4e:8b:cc:2c:7a:9e:a2:64:90:a4:
                    2e:65:b1:24:3c:7a:a8:7b:7d:02:f9:39:ec:a8:83:
                    2d:58:fa:5e:54:02:2a:b1:bd:89:0b:22:ad:61:3f:
                    75:3b:72:b0:20:09:a1:59:4d:f3:62:7b:1b:47:c3:
                    40:e5:21:2f:fb:ed:05:d3:ae:d5:c1:e2:fb:a8:eb:
                    2b:1f:28:13:45:f8:f5:e5:1e:bd:22:5d:41:22:74:
                    48:ec:54:0e:8b:43:37:7c:c0:48:34:aa:91:32:e6:
                    7d:83:ec:eb:c4:b4:7a:b7:70:21:44:25:04:38:1c:
                    da:2f:6d:70:fb:ab:72:c8:ad:64:8d:72:ba:ee:13:
                    63:df:ce:95:84:74:5d:c4:df:2a:9b:09:82:8e:7e:
                    c0:d7:8a:ad:88:4d:c4:27:10:bb:5d:25:ec:5a:65:
                    72:07:0c:ec:e5:f2:b9:f2:a3:1a:61:33:3b:6b:df:
                    90:3e:6a:6d:f4:08:ef:2b:21:6d:97:37:53:e6:1d:
                    29:86:5b:d9:e3:a1:ca:b1:21:de:24:0b:26:2a:16:
                    55:09:f3:d7:1f:e5:77:23:84:08:e7:08:ec:19:db:
                    0c:de:a7:b8:aa:05:41:b7:c7:cd:eb:19:bf:fd:4c:
                    3f:8b:d6:18:eb:3a:c9:79:0d:80:3d:fc:35:1f:b2:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:52:B2:14:AA:96:0D:07:22:AA:AD:E8:C7:ED:27:41:70:AE:0D:0D
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:39:47:d2:93:07:7a:d9:03:71:16:34:a0:1f:f7:42:63:
         f2:64:d5:45:e7:71:29:16:30:8c:9b:01:bb:a5:87:50:8b:f8:
         a9:15:fc:42:08:c5:62:28:e3:71:0a:ea:a2:9e:ad:94:2b:d6:
         3b:5f:d8:bd:c0:35:85:02:e4:ee:a0:7d:27:f0:14:fb:d4:b1:
         bb:f4:62:3d:a6:5a:f5:5e:49:55:84:40:bf:12:79:49:41:7b:
         b9:09:e4:99:45:fa:7c:79:16:af:28:de:9c:16:00:e8:2e:c9:
         f2:d8:31:ff:88:70:6e:64:43:ec:09:e0:70:85:e0:26:1b:e5:
         17:0c:4f:97:25:c2:6d:7a:2b:d1:bf:22:ba:9f:d4:cf:19:44:
         a9:3b:67:54:b5:c3:1d:cc:b3:de:21:7b:f2:c2:6a:f0:f0:19:
         1e:d3:44:3f:86:e7:1f:80:23:ad:78:1a:a5:89:e4:cc:f9:89:
         39:0f:cd:f7:51:b1:1c:f6:41:b0:0c:d9:6c:52:e2:45:c6:61:
         ef:0f:cd:66:4f:91:8e:72:d5:86:e7:a2:4e:b5:95:8f:b1:f4:
         41:0e:18:cc:74:8e:79:14:56:a5:56:8c:17:d0:de:cc:5f:b5:
         67:15:d9:b4:5d:61:80:af:09:ff:17:35:94:f9:7f:22:61:73:
         23:8f:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 15:35:56 2026 by rpki-client