Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          cgOqjz3HcDNZcGprrl3gSY4n6tU2I8IpFxP38gQKXYg=
Subject key identifier:   D0:C3:58:3B:B0:B4:87:F0:2D:6F:08:31:FA:22:76:B5:6E:D8:E4:6E
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019E63BB64F7B4EC52749CABB8CB3ECE36CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          192B
Signing time:             Tue 26 May 2026 10:01:25 +0000
Manifest this update:     Tue 26 May 2026 10:01:25 +0000
Manifest next update:     Wed 27 May 2026 10:01:25 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: xQoFL4Ml8pGlWSLOgc8bIFC9uhzFiO9zl++iLPtNDF4=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 May 2026 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:63:bb:64:f7:b4:ec:52:74:9c:ab:b8:cb:3e:ce:36:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: May 26 10:01:25 2026 GMT
            Not After : May 27 10:01:25 2026 GMT
        Subject: CN=d0c3583bb0b487f02d6f0831fa2276b56ed8e46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:18:3c:4e:d9:18:77:a7:cd:87:04:d3:07:
                    70:8f:00:c1:40:06:41:d6:81:aa:71:27:1b:98:2d:
                    ed:dd:5d:1f:36:1f:9d:12:91:91:cd:54:43:b8:ad:
                    3e:95:ef:f2:f8:b7:6e:ef:60:81:14:2e:ea:2c:15:
                    28:9e:b8:4d:d3:cb:2c:1d:ae:2b:73:36:b6:97:90:
                    df:fc:86:a9:67:38:e6:6b:cc:f3:81:6e:e1:f8:ac:
                    b7:11:84:fc:74:7d:05:3f:88:f0:58:a1:02:40:80:
                    b3:d4:89:2e:c4:b1:ab:a8:73:6e:fd:28:c5:c9:16:
                    77:c8:ed:ec:d2:dd:51:34:cb:02:db:68:c3:3a:66:
                    22:94:7b:99:4c:a6:b1:45:9f:4a:07:3a:a3:25:eb:
                    b1:11:58:19:e0:23:4f:fb:e0:07:73:ee:04:53:01:
                    bb:31:f7:8a:d8:8d:68:e3:57:eb:01:25:c4:26:ab:
                    fd:86:70:6e:e4:53:ea:0c:de:a4:6b:9e:1e:ae:d2:
                    0b:ba:31:75:03:3c:3f:3d:85:9c:54:bb:c8:e3:02:
                    a3:59:6a:9a:93:03:49:c7:c1:d0:5d:fa:15:0e:83:
                    70:d6:f7:7a:d2:65:67:f4:5f:e3:d6:24:35:76:c1:
                    f2:2e:cd:2b:41:6f:8c:ef:b6:9a:f6:7e:35:48:a1:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C3:58:3B:B0:B4:87:F0:2D:6F:08:31:FA:22:76:B5:6E:D8:E4:6E
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:70:f6:03:26:b6:64:d1:df:c6:eb:e0:c9:76:dd:58:b9:ee:
         8d:56:e2:2b:79:f6:03:0a:3f:18:fb:00:6a:a8:2e:04:6c:13:
         7e:bd:1a:1e:a8:8d:53:b6:f1:b4:24:45:1e:3a:95:38:09:ac:
         d3:32:2e:39:f2:79:ae:eb:6e:00:58:0e:03:87:d3:97:67:73:
         da:a3:c8:8d:1d:2b:a5:e4:97:08:39:1e:aa:44:af:d2:06:00:
         23:41:0a:38:36:63:24:4e:1b:05:3a:06:d6:d4:f2:f3:1a:bd:
         a1:84:4f:eb:43:39:ff:46:e9:95:43:d2:f5:41:57:79:a9:30:
         db:50:e0:02:15:2e:d9:9e:d3:c7:54:60:f7:b4:99:7b:db:7d:
         8f:da:7f:84:fb:1a:53:88:fc:8e:39:24:40:fa:ed:4b:6c:97:
         63:db:31:1d:11:fa:ab:2d:25:b6:65:e4:c2:01:d5:7d:8a:b1:
         89:4a:81:8e:47:c4:3e:37:c9:a8:7c:be:ac:3f:cf:f9:8d:d7:
         f1:4f:85:71:16:d4:f4:e9:37:cf:c3:29:b3:b4:e3:e7:1a:b9:
         88:3a:dc:ce:4f:12:ea:b9:0c:85:aa:ba:80:7e:0d:15:70:9a:
         e4:ba:48:f8:97:b9:5b:b5:4a:3c:12:a0:f6:8e:6f:13:f5:64:
         c9:fe:1d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5ju2T3tOxSdJyruMs+zjbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwNTI2MTAwMTI1WhcNMjYwNTI3MTAwMTI1WjAzMTEwLwYDVQQD
EyhkMGMzNTgzYmIwYjQ4N2YwMmQ2ZjA4MzFmYTIyNzZiNTZlZDhlNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl4YPE7ZGHenzYcE0wdwjwDBQAZB
1oGqcScbmC3t3V0fNh+dEpGRzVRDuK0+le/y+Ldu72CBFC7qLBUonrhN08ssHa4r
cza2l5Df/IapZzjma8zzgW7h+Ky3EYT8dH0FP4jwWKECQICz1IkuxLGrqHNu/SjF
yRZ3yO3s0t1RNMsC22jDOmYilHuZTKaxRZ9KBzqjJeuxEVgZ4CNP++AHc+4EUwG7
MfeK2I1o41frASXEJqv9hnBu5FPqDN6ka54ertILujF1Azw/PYWcVLvI4wKjWWqa
kwNJx8HQXfoVDoNw1vd60mVn9F/j1iQ1dsHyLs0rQW+M77aa9n41SKEUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDDWDuwtIfwLW8IMfoidrVu2ORuMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXD2Aya2
ZNHfxuvgyXbdWLnujVbiK3n2Awo/GPsAaqguBGwTfr0aHqiNU7bxtCRFHjqVOAms
0zIuOfJ5rutuAFgOA4fTl2dz2qPIjR0rpeSXCDkeqkSv0gYAI0EKODZjJE4bBToG
1tTy8xq9oYRP60M5/0bplUPS9UFXeakw21DgAhUu2Z7Tx1Rg97SZe9t9j9p/hPsa
U4j8jjkkQPrtS2yXY9sxHRH6qy0ltmXkwgHVfYqxiUqBjkfEPjfJqHy+rD/P+Y3X
8U+FcRbU9Ok3z8Mps7Tj5xq5iDrczk8S6rkMhaq6gH4NFXCa5LpI+Je5W7VKPBKg
9o5vE/Vkyf4dHw==
-----END CERTIFICATE-----
Generated at Tue May 26 18:12:08 2026 by rpki-client