Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          t7OyJ4nLhrR2l1+NAuPQYsOutzpX6q90XyvpBPeZ+Wc=
Subject key identifier:   29:F6:6C:C6:9E:0B:6E:7A:77:D3:A2:07:52:E6:AD:E0:8C:91:29:C5
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019ED79AB451DC5B02BFC044B5253D69FA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1967
Signing time:             Wed 17 Jun 2026 22:01:40 +0000
Manifest this update:     Wed 17 Jun 2026 22:01:40 +0000
Manifest next update:     Thu 18 Jun 2026 22:01:40 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: uq/nxlmb5DhZfpHLmAhvPgDSSFAPN3aOG5zFKEPFNZA=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d7:9a:b4:51:dc:5b:02:bf:c0:44:b5:25:3d:69:fa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jun 17 22:01:40 2026 GMT
            Not After : Jun 18 22:01:40 2026 GMT
        Subject: CN=29f66cc69e0b6e7a77d3a20752e6ade08c9129c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:93:f8:77:a1:7d:c4:7d:a7:07:30:e3:8c:
                    3d:91:fd:f5:26:61:77:29:82:01:cf:cc:6a:b4:2b:
                    cc:ab:24:ee:b3:bd:b6:96:e6:a7:26:c9:40:98:db:
                    2e:c9:51:ec:5f:bc:f0:fd:4b:3b:71:f6:93:aa:97:
                    bd:61:c6:7b:d3:43:8e:ba:d5:69:1e:16:1d:39:18:
                    46:6d:44:f2:12:8e:fe:84:01:a9:8d:7c:af:2d:c2:
                    93:1d:58:3c:6c:13:40:ad:15:07:09:63:a7:75:ce:
                    b8:80:e0:de:23:3d:94:b2:16:18:9c:ac:2b:d2:d3:
                    2d:b7:9e:f2:0d:3b:e7:69:d9:cb:b6:3b:27:5e:7f:
                    d9:21:2f:f3:8a:d9:2e:72:fd:9a:39:fc:4b:3d:d3:
                    d2:13:6e:f6:f6:4a:c9:a6:5b:54:21:47:e7:9d:50:
                    15:07:33:fc:e2:72:6b:d6:ac:2b:a0:e4:f3:df:31:
                    50:99:86:73:72:de:b5:75:90:37:da:8b:47:db:d6:
                    68:04:28:b9:1b:e4:64:9a:53:a9:9a:16:a1:d2:bf:
                    01:9b:21:b0:21:5c:52:6a:a6:d5:b9:84:d3:38:e9:
                    21:cc:1f:30:6f:95:14:4c:b8:31:c3:09:24:55:9a:
                    2f:09:9d:9a:61:e5:13:0c:69:69:fa:a2:59:5e:5b:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:6C:C6:9E:0B:6E:7A:77:D3:A2:07:52:E6:AD:E0:8C:91:29:C5
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:f6:1f:63:fc:29:50:dd:5e:d3:10:ef:be:1f:94:11:d0:
         46:70:6e:87:f9:7b:86:bf:62:d1:8b:aa:c9:ae:cb:e8:62:7c:
         27:4f:87:4c:d7:34:90:db:8d:51:60:38:2c:17:77:9a:ed:1e:
         c0:ef:97:02:5a:6e:66:d2:3a:83:91:96:73:ba:79:e0:d2:d4:
         99:39:d2:b9:7c:d1:d2:44:8b:86:05:a5:25:f3:ab:aa:33:78:
         40:7d:1e:1c:47:87:fb:93:56:bc:a9:a8:eb:b7:0e:83:6b:a2:
         94:7a:0e:e5:62:b2:9c:2a:2f:25:42:dc:85:f1:2c:af:f5:3a:
         48:f6:98:ab:0c:eb:00:bc:d2:95:88:eb:f2:fd:c1:d6:15:37:
         28:c5:31:1d:c9:ea:ca:45:01:68:2c:97:43:23:11:84:bc:f0:
         d3:c5:17:ff:a7:62:f9:62:35:4e:7e:b9:53:52:3e:c0:24:53:
         fe:49:71:62:0d:6b:75:82:0d:3d:c7:32:54:be:ad:00:cd:65:
         41:3e:42:f2:39:3b:c5:0f:f7:a6:b9:b4:9b:d8:a3:ed:e0:00:
         9a:4f:dd:bb:78:f1:d8:24:73:db:22:7b:27:b7:79:fb:5b:74:
         f7:4e:db:6f:1b:12:37:df:be:d3:d3:a2:b2:da:d2:57:ec:65:
         2d:dd:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 00:14:00 2026 by rpki-client