Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          MQKc5cNYetUif4jTG71m+UrClTfGYjqDBG3YgcMX6nc=
Subject key identifier:   2E:C8:1D:EC:3F:A3:C3:5D:A3:97:77:15:93:F9:47:1F:35:80:B6:49
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A08264DED2772E2ADA74D0ACC1480AF3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A44
Signing time:             Tue 08 Sep 2026 19:00:43 +0000
Manifest this update:     Tue 08 Sep 2026 19:00:43 +0000
Manifest next update:     Wed 09 Sep 2026 19:00:43 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 36j+ZdRC/svqpu7LKZr2COMZtXIvHBrZ4cQ8v9B6oWs=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 13:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:82:64:de:d2:77:2e:2a:da:74:d0:ac:c1:48:0a:f3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep  8 19:00:43 2026 GMT
            Not After : Sep  9 19:00:43 2026 GMT
        Subject: CN=2ec81dec3fa3c35da397771593f9471f3580b649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:58:10:ab:6f:36:e2:2c:c9:13:aa:c4:7d:
                    22:df:12:a5:3e:44:76:8c:0f:f2:f7:db:7e:d1:8c:
                    a1:3d:6b:71:5b:1d:23:4e:0e:fb:d0:79:27:32:94:
                    2d:e9:f1:f0:72:f2:43:57:f1:39:89:39:58:64:ab:
                    f5:2b:50:e2:b9:c0:a8:56:62:a8:54:da:a0:e0:fc:
                    e8:78:a5:0b:24:60:08:33:43:c2:1d:23:10:83:d3:
                    42:c2:ac:97:15:e9:9a:aa:83:f8:71:cc:06:b4:6e:
                    7d:fe:17:03:3d:c7:a1:eb:b3:b0:3f:64:ba:f1:de:
                    47:fd:d4:1e:b6:12:55:89:15:0c:1c:be:9a:d1:3e:
                    45:93:ed:b5:ed:ee:09:c0:0a:85:a7:d4:0c:a5:4b:
                    06:73:83:bb:3a:8f:f5:7e:64:72:b9:30:39:9a:29:
                    41:09:f6:11:42:5e:46:05:54:d8:0b:92:16:cf:28:
                    6e:25:67:38:5b:04:57:49:66:a1:ee:5c:f2:d3:38:
                    17:aa:ae:78:ce:e4:f1:c3:04:91:36:96:6f:25:0a:
                    ec:90:31:f4:d6:19:12:2c:6d:48:bd:f1:51:5e:15:
                    70:aa:6d:db:8e:25:ee:4a:76:ce:37:27:af:46:9f:
                    a7:9c:18:e4:c1:6c:d2:26:be:a5:b2:d6:a5:2e:3e:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C8:1D:EC:3F:A3:C3:5D:A3:97:77:15:93:F9:47:1F:35:80:B6:49
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:f3:91:35:c1:5c:60:50:30:a0:2b:26:c9:68:48:a5:18:
         4b:26:76:84:38:d7:8a:b8:65:b4:6d:04:d2:41:6d:98:c9:4b:
         b9:9e:a4:98:8e:2f:f0:79:43:fc:29:74:8d:07:e5:05:d1:86:
         43:e3:36:55:be:b5:80:c7:fb:7d:28:c0:cd:5d:59:8b:c8:aa:
         15:86:78:fb:a3:87:13:21:fd:07:c9:0e:23:bb:f0:c8:55:fc:
         33:80:c4:77:75:b6:27:88:ae:05:c8:6f:68:20:ed:bc:24:03:
         21:36:f3:d0:6c:89:19:d0:b7:3a:c9:bf:59:76:a5:53:b3:0f:
         89:c0:51:3f:dd:14:e8:1e:87:9b:6f:56:13:7c:58:c0:54:11:
         47:8e:bf:fb:13:30:65:a2:5b:69:9b:af:8a:0f:a5:08:ce:47:
         82:91:5e:0a:ed:34:d2:93:75:10:84:b5:35:d7:ce:9f:2d:36:
         74:97:a7:1e:67:24:7e:b1:00:c3:85:2f:9c:84:95:48:ac:b0:
         90:a0:84:d7:98:b7:99:8b:f7:3f:9a:f6:bf:4d:01:e3:e7:c8:
         e0:be:d9:73:e3:92:ea:50:79:c1:02:91:f2:ff:12:79:fd:12:
         7a:a7:f2:84:bd:4a:d8:2f:05:6d:d2:d9:11:c0:45:02:c2:d7:
         3c:92:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 22:46:23 2026 by rpki-client