Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          QChZH9sG5sqQbO725MddR+ca5LlvnUXirwbdYWowtyc=
Subject key identifier:   68:B8:AB:C4:08:55:C8:7A:8F:3E:B8:83:1F:6F:9F:36:1E:57:AD:FF
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019FB1D31694C37DE8D2F54BCEC917144764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19D8
Signing time:             Thu 30 Jul 2026 07:00:28 +0000
Manifest this update:     Thu 30 Jul 2026 07:00:28 +0000
Manifest next update:     Fri 31 Jul 2026 07:00:28 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: +VI2Hz+mqLuVeedIsanSFvUpnOdtApzkmdV0I4Lf/d8=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Jul 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b1:d3:16:94:c3:7d:e8:d2:f5:4b:ce:c9:17:14:47:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 30 07:00:28 2026 GMT
            Not After : Jul 31 07:00:28 2026 GMT
        Subject: CN=68b8abc40855c87a8f3eb8831f6f9f361e57adff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:f7:8d:ae:8c:9b:32:ad:19:88:e6:2c:8a:
                    93:2b:8e:ec:aa:f2:6f:66:37:fd:67:0e:d6:8a:69:
                    00:aa:65:4f:e2:e0:1d:57:d5:32:c8:0c:9f:08:6d:
                    83:90:44:e9:db:12:01:a8:d7:08:6e:a1:ba:77:b7:
                    80:3a:3e:70:56:97:60:c2:84:17:60:92:a9:c0:94:
                    28:55:54:5e:17:8b:aa:a8:b5:72:90:02:8a:5f:cc:
                    27:04:ff:ab:ae:76:77:96:98:be:9b:f3:a0:05:3a:
                    dc:ee:e0:95:b1:5b:ca:1b:17:07:75:35:77:b3:a8:
                    4a:9f:18:eb:3b:8e:a5:4b:c8:2c:65:20:63:d5:24:
                    c1:37:81:b8:9f:6a:1e:0c:ed:b3:0c:f3:2e:ba:c2:
                    7b:ce:d2:76:72:12:6b:40:bf:a9:98:5c:7e:df:c0:
                    c9:d4:f6:5a:37:e9:88:dc:2b:18:a4:39:d2:3d:06:
                    63:5a:7a:b5:26:3d:89:db:8d:97:24:83:a5:9f:45:
                    53:7d:bc:e2:10:d6:95:b2:79:50:6b:74:d2:16:50:
                    21:ce:af:d8:fe:b4:62:52:ac:f4:02:48:0d:fa:d0:
                    e5:2f:26:3b:91:c1:29:8b:62:a2:8f:fb:6b:fd:f6:
                    6f:c4:a7:d6:45:38:c1:46:55:eb:ef:19:c6:d5:4d:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:AB:C4:08:55:C8:7A:8F:3E:B8:83:1F:6F:9F:36:1E:57:AD:FF
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:59:a3:71:c9:a4:34:31:d2:62:56:85:7b:c7:3b:d0:f6:
         04:b7:44:64:04:33:84:17:57:35:2a:b0:79:5d:8f:8f:2d:5e:
         c7:14:4b:79:c5:dd:a5:25:24:9e:2b:73:6b:17:26:3e:bc:e4:
         dc:e7:4f:59:6d:ab:9f:0c:d1:3d:b5:a1:5b:ba:62:fb:08:6b:
         24:8c:31:41:e2:6d:af:88:0f:a0:64:43:8e:b5:77:4b:6c:6a:
         cb:16:3c:32:9b:b0:27:01:99:26:98:a0:d4:6f:c7:54:bd:91:
         df:f1:82:ad:05:97:53:b1:23:eb:c3:e2:1f:8e:15:df:2d:8a:
         13:4c:e6:26:86:35:fc:d9:ae:b4:74:5d:d0:8e:1d:62:b9:90:
         50:0a:a7:d7:fa:2a:04:ef:0f:b5:61:c8:1e:77:38:5c:9b:22:
         2c:17:16:a5:13:66:a9:1e:99:b3:7c:87:56:3e:f1:41:9c:94:
         10:e0:dc:14:fc:51:93:34:08:eb:32:f3:d4:2d:9d:58:7b:94:
         b5:dd:65:3b:a9:c1:ee:bb:7b:7e:50:a0:26:1b:80:f5:22:cc:
         e9:92:82:fd:ea:18:d6:b7:45:11:8e:13:28:d7:05:8d:37:9b:
         11:33:13:a9:92:f8:bd:ac:54:18:c0:25:2a:d0:6a:93:44:b2:
         65:b2:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 14:40:10 2026 by rpki-client