Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          RPmeYLaLPz+t7t+gdRty4wnE+k3o9AKuhKPql/DINNg=
Subject key identifier:   40:48:B3:69:4F:A6:C8:AD:18:DA:B5:81:74:8C:C6:C7:00:F7:E0:34
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A0D19268FAA5CFEF1D22A5AAA9D570A4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 04:00:28 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:28 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:28 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: hKDfE4pFV6S5CnMRJIQZ6lN2rWKOHLCdvJwG56EpU4A=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:68:fa:a5:cf:ef:1d:22:a5:aa:a9:d5:70:a4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep 24 04:00:28 2026 GMT
            Not After : Sep 25 04:00:28 2026 GMT
        Subject: CN=4048b3694fa6c8ad18dab581748cc6c700f7e034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:6c:ce:50:af:bf:19:7d:ab:ac:31:3f:43:
                    f4:5c:85:12:10:ff:a8:85:18:87:6c:21:46:c3:3e:
                    fa:51:60:15:1b:a4:68:a3:71:12:9b:09:7a:76:f7:
                    89:5a:74:97:d5:19:b5:1d:8d:99:47:67:91:16:b1:
                    1c:33:24:f4:95:29:62:d1:6f:12:5f:8b:d2:c3:15:
                    d0:e8:28:d6:e0:0c:70:b2:2c:f0:ba:79:fb:5e:de:
                    53:f8:3f:34:9f:82:00:07:bb:84:5a:53:89:91:f4:
                    10:e1:56:f3:6b:b6:c3:bd:09:db:8c:02:1d:86:2a:
                    c3:e1:a9:a2:78:cc:ca:38:bc:9e:26:99:0a:8e:bd:
                    f9:a3:2a:b0:6c:f7:9d:22:4f:ae:42:26:cd:60:f2:
                    a1:6c:b8:cc:25:0b:88:f3:b1:75:90:d9:4b:82:70:
                    97:72:53:33:ae:e9:d1:0e:01:f2:8e:f0:bb:20:46:
                    70:82:b0:95:d7:af:5b:23:2d:cf:51:bf:d4:0d:26:
                    65:c8:d6:f8:87:d8:05:cf:3f:3c:44:75:5b:37:3a:
                    e2:65:18:40:b0:8c:08:24:be:6f:4b:b8:ca:90:11:
                    7c:0d:ae:de:cb:c1:c5:1b:2d:5f:64:54:5b:20:b2:
                    46:1b:03:64:7d:cc:5a:c6:d1:8c:7e:66:8b:9d:5e:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:48:B3:69:4F:A6:C8:AD:18:DA:B5:81:74:8C:C6:C7:00:F7:E0:34
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:36:0d:64:83:58:4e:37:00:f8:cd:f1:3e:7e:1d:b4:d2:
         6c:68:58:9f:11:2a:94:0d:1b:4a:41:f8:78:0d:ff:34:f5:8a:
         4e:46:fe:95:24:84:8a:fa:9a:26:48:30:68:ae:49:bc:ac:fa:
         24:f1:05:9f:78:dc:31:34:aa:d2:5e:92:71:d6:17:2d:37:4b:
         61:53:bf:db:d1:fe:a6:a6:4b:ac:28:57:23:50:f9:62:d6:d7:
         1e:83:ef:8b:e5:34:fb:4b:e6:e5:24:21:eb:49:b7:ef:fd:17:
         64:d8:5f:8c:0b:6e:5c:7b:e6:c2:ec:f1:f5:56:56:8b:d1:e5:
         5d:66:b8:6f:69:03:4a:b8:c3:4b:77:b4:94:90:55:27:13:19:
         e8:f8:6e:a5:fc:2c:26:38:f4:c3:5d:ed:6b:9a:93:b2:bf:d4:
         77:6b:4c:3c:fa:ce:7b:ff:76:51:ec:14:c7:c7:03:b5:48:30:
         46:85:1c:54:cb:30:0a:98:95:6f:cb:75:75:dc:1a:92:94:65:
         28:ed:03:91:6c:11:18:0c:55:17:4a:24:da:b1:13:8d:ee:e1:
         23:8c:0d:4d:7d:98:76:86:15:63:c4:99:e5:35:4e:99:e1:b9:
         c3:30:64:ab:bc:74:e1:24:b6:47:28:38:5e:a4:25:95:6e:14:
         8c:44:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:16:37 2026 by rpki-client