Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          wyvUg4bGhdyZwdJhnyBYb70+d/47hIJQ5+2ZZGvwbGg=
Subject key identifier:   FC:2E:C2:CF:79:5D:8D:E5:0F:99:22:8D:80:B0:6B:03:F9:1F:5A:19
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A01FE7235AD900FC51951BBB2EFC0D44C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A11
Signing time:             Thu 20 Aug 2026 16:00:36 +0000
Manifest this update:     Thu 20 Aug 2026 16:00:36 +0000
Manifest next update:     Fri 21 Aug 2026 16:00:36 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: y3TnkfCihKEhbEaLVd5V/gqcBWniOqPcMAwJ+A1fBh4=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:e7:23:5a:d9:00:fc:51:95:1b:bb:2e:fc:0d:44:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug 20 16:00:36 2026 GMT
            Not After : Aug 21 16:00:36 2026 GMT
        Subject: CN=fc2ec2cf795d8de50f99228d80b06b03f91f5a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:68:82:3b:eb:5a:12:cd:a2:1d:65:db:e8:
                    35:5a:9b:da:f0:a1:c2:11:7a:81:5e:84:0a:57:98:
                    91:69:dd:d1:ee:63:e3:49:ef:a3:4c:3a:cc:6f:c1:
                    ad:e3:64:62:17:17:95:8a:47:cb:ed:14:8d:ae:5d:
                    b0:51:41:d8:f1:10:6b:51:29:ef:1e:5d:a9:a0:71:
                    d5:e5:c4:cf:3b:f2:bf:44:ba:ac:58:68:f6:cb:c5:
                    7d:cb:53:30:89:06:78:df:5e:d2:66:55:f2:45:90:
                    af:df:0d:3d:cc:ce:90:0e:75:b3:f9:a5:b4:e4:1d:
                    0b:96:b2:26:dc:d9:48:08:b6:98:28:f4:5c:0b:2f:
                    93:57:e8:41:86:c9:fc:45:6e:d7:4f:09:fc:e9:6b:
                    a7:03:cf:12:10:9b:c4:54:8f:23:fb:f5:c2:bc:3b:
                    a3:ef:20:bc:28:b7:98:6b:2c:bc:73:5c:57:f5:67:
                    51:22:27:92:3b:00:49:57:d4:7b:04:54:74:1b:c7:
                    3b:6a:97:f8:10:c9:b8:7a:bf:97:53:7e:8c:af:0f:
                    eb:ff:e4:a8:c0:cf:13:16:0f:d4:9b:12:22:7e:86:
                    c2:0a:7e:6b:24:7f:b6:9d:14:85:7c:ec:63:b7:c8:
                    4a:37:20:34:56:58:3f:f7:06:e7:f4:39:c1:f3:80:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:C2:CF:79:5D:8D:E5:0F:99:22:8D:80:B0:6B:03:F9:1F:5A:19
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:96:6d:a6:53:33:23:d4:5d:96:98:bd:a9:5f:23:47:30:
         55:60:57:78:ce:44:7c:40:8f:42:dc:19:d9:08:70:28:77:d7:
         4d:90:81:08:93:11:8b:26:d3:d1:3a:f3:6b:b1:07:99:9d:b9:
         9a:e3:90:8e:8c:7c:d8:e0:38:37:45:16:a8:1d:16:c8:ad:e6:
         6d:03:5f:9f:f3:b8:70:78:5b:c4:1d:7e:0c:d7:87:3b:ff:67:
         b2:45:4d:b3:bf:30:4c:a7:02:48:fb:2e:18:44:5b:47:e3:cc:
         90:d6:a7:fa:17:ca:fe:7d:52:f1:f8:d2:b9:99:ae:c6:f3:e6:
         40:e6:d0:e7:f2:0d:ee:66:01:06:47:81:a5:0c:99:b9:02:06:
         e4:fb:ef:93:14:e3:48:49:d0:21:10:21:44:21:fd:8a:59:23:
         79:4d:57:90:44:4a:5d:d6:2a:77:4a:0e:a3:2b:29:39:c2:54:
         58:ea:5f:4f:c2:6c:4f:82:e8:9a:fb:97:87:ab:31:2a:99:3d:
         8d:2d:58:02:14:3d:b5:38:80:95:b4:d7:b2:d2:a8:9c:92:af:
         58:8c:5e:a6:ba:01:e8:89:1c:2d:d6:e0:22:3b:5b:c1:d1:d6:
         e7:b8:58:dc:b8:a6:44:5f:58:61:a3:40:9e:36:2f:b1:d2:5b:
         2c:86:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:54:02 2026 by rpki-client