Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          CCg2aQeCC/tZe3RQWfUW/4B6bpVJezyxoIzlIkyo7ok=
Subject key identifier:   34:8C:6C:F4:52:C4:B8:1B:90:93:39:BB:FC:7E:62:89:64:5A:5D:3F
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F2AA4A40CCABAAD91C56662A182DC10EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1992
Signing time:             Sat 04 Jul 2026 01:01:00 +0000
Manifest this update:     Sat 04 Jul 2026 01:01:00 +0000
Manifest next update:     Sun 05 Jul 2026 01:01:00 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: Dfn4/eDUN7gO7tFflwy5d+Mi5TeBe8oxiG2j66IcHow=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:2a:a4:a4:0c:ca:ba:ad:91:c5:66:62:a1:82:dc:10:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul  4 01:01:00 2026 GMT
            Not After : Jul  5 01:01:00 2026 GMT
        Subject: CN=348c6cf452c4b81b909339bbfc7e6289645a5d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:1d:77:68:cd:9a:8e:6a:f1:f2:79:7c:49:
                    19:7b:2f:7e:68:df:15:a4:ba:8d:6e:75:ec:88:a5:
                    5b:b4:14:13:37:4b:ff:1a:6e:c2:d6:bb:04:33:86:
                    1d:df:a9:bd:cb:c2:54:a0:3d:ce:84:b2:5c:7e:dc:
                    ca:6a:09:36:ec:77:5a:65:41:03:f2:d6:11:8d:62:
                    80:cf:b2:94:3f:10:2b:52:07:fa:5f:6b:46:f7:4a:
                    40:de:bf:a6:af:e6:63:96:c6:66:6b:ee:d1:9d:5e:
                    0a:e0:b9:1c:56:9c:0a:35:52:a1:1f:c9:5c:30:0e:
                    9b:22:f2:5a:89:ff:9c:b5:85:a0:88:7b:aa:54:14:
                    68:6b:6e:19:90:55:c4:12:5a:e6:a4:0a:a4:d2:dc:
                    07:33:a3:46:15:71:8f:f3:62:32:3e:e4:7d:16:38:
                    75:60:ff:70:ea:55:85:93:7d:75:2a:6f:a8:53:43:
                    f9:12:77:1d:b4:2e:a5:9b:35:99:28:ea:e7:2c:9c:
                    3e:a9:9c:2e:36:a3:71:23:c4:1b:9a:dc:95:ef:f4:
                    39:e0:14:7d:6d:f0:da:1c:43:83:7c:c3:00:1a:ef:
                    42:10:f0:d1:c3:15:26:4a:e3:41:2f:46:42:5a:8a:
                    38:78:08:de:3c:9e:cc:95:79:01:1a:bd:ae:be:82:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:6C:F4:52:C4:B8:1B:90:93:39:BB:FC:7E:62:89:64:5A:5D:3F
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:99:47:44:b3:f2:34:a2:44:ac:d6:32:88:23:6f:d0:e2:
         e4:6c:c1:ec:43:ea:6b:5b:33:d6:27:18:76:de:cb:96:74:ef:
         b2:c0:b7:0c:fa:94:e3:d1:d1:ea:c0:ce:16:11:bb:fa:a3:57:
         7f:78:b0:47:79:7d:93:0c:f4:3a:9a:06:0c:bd:77:7a:ce:e9:
         fb:06:ce:65:db:0a:e4:a0:58:0a:de:f4:8c:29:c0:7d:49:1e:
         87:d4:87:fd:84:29:5c:6b:65:0e:cf:7d:8e:ec:b7:e5:fd:6c:
         d4:d2:85:47:2d:af:eb:3d:fc:a7:51:90:b5:08:df:de:67:a3:
         e6:1c:10:a6:e3:97:0b:aa:05:76:69:81:ea:d0:1b:2e:10:55:
         da:b9:ef:9f:27:5a:19:bb:2d:4c:ba:ca:f9:a0:c8:42:33:87:
         59:2f:f6:7e:44:8f:8a:2d:97:24:d8:8b:b5:89:9b:53:cf:9f:
         4e:dd:ce:5c:70:23:26:da:ff:0d:96:2f:05:af:25:09:0d:7d:
         4b:d6:54:43:14:ab:cc:bc:2a:bf:af:c5:bf:e5:94:d0:f7:d2:
         1c:6a:68:0b:4f:94:fa:85:8b:c4:8a:3f:d0:af:41:05:de:bf:
         35:b8:59:aa:9c:82:31:60:9d:47:f2:85:a2:5f:ca:81:7f:30:
         fa:15:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 05:24:35 2026 by rpki-client