Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          kkBsc7yhC9biHp2j3IfSfDFZyleYdRMhX4vP8kNzuXo=
Subject key identifier:   A4:64:92:F7:00:3A:8B:B1:F2:FE:E8:CF:8B:E3:69:22:1A:09:59:8A
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A14F19B9E238F0D1B516FC7BF033BFFA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1AAE
Signing time:             Sun 18 Oct 2026 13:00:48 +0000
Manifest this update:     Sun 18 Oct 2026 13:00:48 +0000
Manifest next update:     Mon 19 Oct 2026 13:00:48 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: lV+jm9G7mRpB4xTa/f1Wqr8Hqy6zU7KIPJi3PW/pTpo=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:19:b9:e2:38:f0:d1:b5:16:fc:7b:f0:33:bf:fa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Oct 18 13:00:48 2026 GMT
            Not After : Oct 19 13:00:48 2026 GMT
        Subject: CN=a46492f7003a8bb1f2fee8cf8be369221a09598a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:1d:6d:b4:11:08:14:0b:34:6a:e6:ae:3e:
                    1c:5a:ad:87:24:e0:ca:18:26:dd:0f:31:8a:e6:ea:
                    59:33:19:a3:0b:59:ec:3f:dd:e1:bf:85:f2:74:ea:
                    61:ff:49:52:aa:0b:c0:bb:9e:21:5a:8f:9c:63:8a:
                    aa:c6:9f:fe:bb:1f:3f:0b:15:13:84:df:8f:48:12:
                    51:32:16:fa:0d:8a:36:08:b5:d3:13:35:6c:85:1d:
                    11:86:37:bb:c3:5a:25:86:0f:fd:f5:d4:e0:9d:43:
                    ed:97:c3:d7:06:61:74:eb:c4:c6:95:71:b3:7d:26:
                    33:66:d9:55:ab:fb:42:5d:7d:e8:e9:64:b3:61:28:
                    95:83:5c:be:b1:72:21:f3:0d:e0:c5:e8:c5:3c:84:
                    04:cd:8a:4c:7c:42:76:bf:ef:14:c1:68:34:b2:1f:
                    fb:1b:fd:81:b9:07:77:5c:fd:3e:b9:de:60:93:f3:
                    25:54:b1:05:20:1a:dc:ce:67:8f:58:24:d6:a7:e9:
                    65:b2:9e:c2:f0:9b:49:f8:74:f9:fd:ef:aa:79:78:
                    14:a9:a4:29:e4:de:d0:0b:f9:15:97:c9:0f:e5:dc:
                    26:b8:80:99:5f:cb:b0:af:d2:e7:9f:1d:5a:8a:58:
                    28:14:22:65:9c:1c:e9:7b:29:9b:7e:bd:79:c8:8f:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:92:F7:00:3A:8B:B1:F2:FE:E8:CF:8B:E3:69:22:1A:09:59:8A
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:63:f8:ce:a3:94:19:ea:fc:5e:e5:0f:aa:73:f7:08:e4:df:
         1e:45:2f:11:7d:fe:c3:c1:2f:af:15:6c:31:26:f4:32:f2:8e:
         18:ed:59:85:e0:41:29:cd:08:4b:06:2e:ae:8a:ae:58:9a:56:
         db:ce:cf:d4:97:49:54:69:83:08:6c:66:5d:ea:43:f9:aa:fa:
         9f:8b:47:0c:c0:83:e7:b1:68:c3:57:ba:4d:a3:68:35:3d:fa:
         47:f4:99:50:47:34:97:9c:3c:98:e0:28:a0:dd:10:4b:0d:06:
         e7:88:97:0b:c8:16:64:02:3c:13:a5:1b:20:db:4f:67:3c:64:
         9d:d0:f7:99:8b:ec:65:1d:02:0e:ef:34:56:18:ff:3f:2a:b0:
         46:f6:c5:0c:45:d3:49:40:ec:7c:c9:a0:a7:b8:fa:b3:1e:e4:
         7f:ea:7b:d9:ff:ab:cf:93:4e:83:2a:9a:d5:f2:39:88:26:a7:
         1d:10:61:78:68:ee:e7:d0:f5:00:36:3f:3c:88:03:99:ff:5e:
         d1:22:ba:11:e6:c5:ab:07:8c:61:5c:55:03:92:6c:cc:29:02:
         07:34:e6:5b:66:56:a4:4e:39:ea:14:bb:f0:fc:b2:28:88:2d:
         1f:f9:03:31:f5:13:c2:ab:b1:cf:3d:f0:bf:dc:d7:18:a6:f3:
         95:ec:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 23:06:37 2026 by rpki-client