Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          Atx+hDzROql4268KyaiEHNct+wtHSl9ONfYTcNC+Pl4=
Subject key identifier:   AB:9E:91:A2:AA:83:09:7F:43:E3:08:68:20:45:DF:72:18:29:96:01
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019E9DAAA3E22F9E52506F8FD47E32507D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1949
Signing time:             Sat 06 Jun 2026 16:01:06 +0000
Manifest this update:     Sat 06 Jun 2026 16:01:06 +0000
Manifest next update:     Sun 07 Jun 2026 16:01:06 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: yhZRCP628kZ551YsMREQ9Kek8tsWDbmgw5fgC8JjPXk=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:aa:a3:e2:2f:9e:52:50:6f:8f:d4:7e:32:50:7d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jun  6 16:01:06 2026 GMT
            Not After : Jun  7 16:01:06 2026 GMT
        Subject: CN=ab9e91a2aa83097f43e308682045df7218299601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:1d:a9:4e:a6:87:1e:51:95:6e:8f:33:bb:
                    1a:62:b9:64:bc:c7:fa:44:54:e3:45:1d:61:4d:ac:
                    7e:43:4f:09:3f:ff:e8:52:ff:61:ff:44:ad:a4:ca:
                    dc:32:a9:7e:ca:d8:63:e6:9e:f0:85:77:8c:fc:fc:
                    b9:7e:13:e6:64:18:1b:6c:5a:80:67:62:a4:ec:fa:
                    b9:b7:58:4e:8b:aa:ed:8a:d0:b0:54:86:4d:a7:08:
                    df:e1:33:05:d7:87:65:1d:2e:f2:20:9c:f4:af:15:
                    ff:d5:85:87:28:e9:57:d0:56:3c:ee:ea:55:c7:b2:
                    1d:b4:d1:a5:cf:10:ae:fe:9c:d9:5f:07:08:74:5b:
                    23:de:5a:45:a4:13:10:0b:a8:47:f9:a2:46:11:a6:
                    bc:80:22:ba:f2:2b:b4:ee:b4:8d:19:a1:af:86:1e:
                    2a:69:db:b8:d3:66:d9:39:17:81:38:5b:bd:d6:34:
                    76:01:72:e2:bf:52:fd:2c:29:f7:82:9a:20:80:cc:
                    13:99:1a:4c:ea:39:7f:f2:63:db:ee:14:7c:8e:43:
                    83:b3:7b:4c:54:b3:64:ad:fb:b4:88:8b:fa:68:35:
                    07:cb:6e:7d:00:15:8d:28:0c:d7:16:32:80:6a:b4:
                    2e:2a:5b:db:8d:73:78:15:20:2b:24:38:53:d6:aa:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:91:A2:AA:83:09:7F:43:E3:08:68:20:45:DF:72:18:29:96:01
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:50:83:7e:a0:29:7d:df:0a:ae:8b:eb:ce:1e:3c:f8:09:ce:
         9c:06:ee:95:76:f1:f7:15:50:59:2b:62:fc:f4:48:ea:52:2c:
         a9:80:36:bb:e1:af:41:31:3a:18:48:c9:66:26:48:53:30:09:
         d5:45:7a:67:45:49:8b:c1:b6:c3:1f:f3:14:95:a4:ed:92:14:
         1a:fe:a7:2a:5a:6a:8c:4b:63:cd:95:9e:41:11:92:51:80:fc:
         c7:c6:a1:ef:f9:7f:8f:28:4e:d9:cb:e8:fa:b1:a0:ef:62:47:
         14:b9:4f:4a:62:48:12:6e:86:94:dd:0b:0c:bf:09:9e:bb:fd:
         c0:0e:36:8b:01:eb:da:5a:0e:51:38:6b:fb:ef:dc:ea:91:9c:
         9c:7d:3b:c8:03:57:38:26:f2:19:61:98:81:79:b6:aa:d2:6d:
         84:17:38:82:42:28:a0:43:76:25:86:6a:2c:c4:c1:27:ef:9a:
         a9:f3:65:1a:77:f5:22:90:38:ae:64:74:f8:b6:04:ec:37:89:
         31:d0:82:5a:be:59:c0:5e:b5:ee:43:b8:61:70:33:5c:ba:68:
         97:d5:e7:59:da:94:05:cd:35:95:4d:0c:4b:59:d1:d2:5c:4f:
         01:5c:26:af:68:19:2c:c9:a7:5e:a3:2c:9b:88:06:cd:02:cf:
         8e:95:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 22:00:45 2026 by rpki-client