Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          B2SuPnPW4XCiL5LBsJJUhAvELYCl0A4kX3+d7xlfHPg=
Subject key identifier:   61:EE:7E:C0:BD:A1:9E:27:A3:5B:91:58:2D:98:08:E0:F4:72:36:8A
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A035258BFD963E840504A3962E79354E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A1C
Signing time:             Mon 24 Aug 2026 19:00:48 +0000
Manifest this update:     Mon 24 Aug 2026 19:00:48 +0000
Manifest next update:     Tue 25 Aug 2026 19:00:48 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: a/xRMon3zVtWvt0sstIpnzw0+xMnzcZe8jyEkg1yEsw=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:35:25:8b:fd:96:3e:84:05:04:a3:96:2e:79:35:4e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug 24 19:00:48 2026 GMT
            Not After : Aug 25 19:00:48 2026 GMT
        Subject: CN=61ee7ec0bda19e27a35b91582d9808e0f472368a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:7c:2f:8b:be:98:c8:32:6e:ae:99:4d:c6:
                    cb:27:c2:10:02:9a:bb:18:f2:09:33:df:79:7f:9a:
                    e1:39:10:97:36:ce:8c:e7:bc:0a:c3:67:19:9e:d7:
                    d2:74:bf:7d:d0:90:8a:28:2b:26:e7:2e:6d:11:7b:
                    4d:7a:b8:1b:86:24:a0:a6:28:44:1c:ee:ac:87:fc:
                    77:2a:ff:74:43:7d:0f:fe:e9:3d:b6:18:ca:83:4b:
                    3b:21:60:c6:4e:0b:17:31:d7:0f:ea:f5:55:b8:9b:
                    ec:2c:a8:85:34:53:2d:53:0f:66:bf:d3:35:30:fd:
                    a2:e1:ea:69:04:42:be:cf:94:ed:54:70:58:1c:cb:
                    7e:e0:e6:c4:c2:8e:c6:7a:31:6c:39:2f:3e:1e:ca:
                    d4:4d:84:42:69:f8:32:6f:88:3e:72:ae:46:15:1c:
                    46:93:54:f7:05:3f:e1:1e:80:67:59:85:41:d9:d2:
                    f1:7b:be:c5:f9:8c:69:3c:33:da:79:d3:0c:ec:93:
                    05:86:0a:b5:14:a6:9f:5e:2f:8a:1d:ba:a1:0f:fd:
                    96:e4:1a:f1:e5:ac:1a:ec:77:c3:0b:14:65:07:51:
                    7f:d1:19:de:36:53:ff:90:37:15:02:97:c2:16:e2:
                    66:40:08:8d:f0:b5:e8:29:91:e3:23:11:40:8b:2c:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EE:7E:C0:BD:A1:9E:27:A3:5B:91:58:2D:98:08:E0:F4:72:36:8A
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:f7:27:55:f1:dd:a4:22:f6:39:e8:42:dc:b8:0b:75:dd:
         68:1b:c7:c3:f3:1f:f6:c0:17:5a:09:a7:47:92:30:ca:93:e1:
         de:a1:c3:5b:a3:a2:56:6b:dc:3e:89:d5:67:36:5e:88:4e:c2:
         d3:05:d4:bb:c8:f9:c3:a9:7b:a3:9e:84:5f:d0:b8:a1:bc:df:
         58:33:4d:84:7f:d3:40:f8:9e:e0:cc:07:3f:1a:fe:1a:79:12:
         de:0f:c2:d3:37:c7:d1:02:bb:1a:ea:bd:4b:1c:21:09:91:b3:
         b5:08:62:17:2a:d3:a2:9f:bc:f1:79:9c:de:04:89:aa:ff:a9:
         5f:2a:07:26:38:bd:17:df:b8:cc:59:d3:70:8d:2f:28:91:f3:
         0c:8a:5f:4d:37:7d:d8:8e:8d:0d:ff:3d:8f:ef:28:13:9e:b3:
         7d:cc:91:35:ca:c8:79:a1:ec:08:7f:b1:76:47:9b:1e:a0:f4:
         63:88:7c:c7:77:1c:45:20:bb:66:69:b8:38:65:81:23:50:cb:
         40:61:39:cd:35:82:05:fe:2d:49:0e:c6:41:c5:33:07:3b:a9:
         bd:81:4b:82:d6:7e:e6:a8:a2:98:77:b5:cd:58:a2:18:05:b3:
         ff:10:91:00:1a:79:83:57:43:f1:c4:ed:f0:bf:82:1a:c3:d9:
         0f:c1:d8:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA1JYv9lj6EBQSjli55NU4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwODI0MTkwMDQ4WhcNMjYwODI1MTkwMDQ4WjAzMTEwLwYDVQQD
Eyg2MWVlN2VjMGJkYTE5ZTI3YTM1YjkxNTgyZDk4MDhlMGY0NzIzNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PR8L4u+mMgybq6ZTcbLJ8IQApq7
GPIJM995f5rhORCXNs6M57wKw2cZntfSdL990JCKKCsm5y5tEXtNergbhiSgpihE
HO6sh/x3Kv90Q30P/uk9thjKg0s7IWDGTgsXMdcP6vVVuJvsLKiFNFMtUw9mv9M1
MP2i4eppBEK+z5TtVHBYHMt+4ObEwo7GejFsOS8+HsrUTYRCafgyb4g+cq5GFRxG
k1T3BT/hHoBnWYVB2dLxe77F+YxpPDPaedMM7JMFhgq1FKafXi+KHbqhD/2W5Brx
5awa7HfDCxRlB1F/0RneNlP/kDcVApfCFuJmQAiN8LXoKZHjIxFAiyyXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHufsC9oZ4no1uRWC2YCOD0cjaKMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoP3J1Xx
3aQi9jnoQty4C3XdaBvHw/Mf9sAXWgmnR5IwypPh3qHDW6OiVmvcPonVZzZeiE7C
0wXUu8j5w6l7o56EX9C4obzfWDNNhH/TQPie4MwHPxr+GnkS3g/C0zfH0QK7Guq9
SxwhCZGztQhiFyrTop+88Xmc3gSJqv+pXyoHJji9F9+4zFnTcI0vKJHzDIpfTTd9
2I6NDf89j+8oE56zfcyRNcrIeaHsCH+xdkebHqD0Y4h8x3ccRSC7Zmm4OGWBI1DL
QGE5zTWCBf4tSQ7GQcUzBzupvYFLgtZ+5qiimHe1zViiGAWz/xCRABp5g1dD8cTt
8L+CGsPZD8HYXw==
-----END CERTIFICATE-----
Generated at Mon Aug 24 20:59:38 2026 by rpki-client