Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          +muc3+tlBbex61v96rd/1naUNfF7Y6q2uydVkuRm7m0=
Subject key identifier:   BA:55:62:FB:72:87:7C:63:76:AD:61:CD:1A:0E:AA:5A:A9:61:58:1E
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019FD0BA240DD9C647DA4BB315B89419E7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19E8
Signing time:             Wed 05 Aug 2026 07:01:27 +0000
Manifest this update:     Wed 05 Aug 2026 07:01:27 +0000
Manifest next update:     Thu 06 Aug 2026 07:01:27 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: qbId/FMZr++nkik2cvmt8iEUfKEiR1bkHUitdCpxXXs=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d0:ba:24:0d:d9:c6:47:da:4b:b3:15:b8:94:19:e7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug  5 07:01:27 2026 GMT
            Not After : Aug  6 07:01:27 2026 GMT
        Subject: CN=ba5562fb72877c6376ad61cd1a0eaa5aa961581e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:7b:81:fe:9f:80:9f:39:f3:98:6a:e0:fa:
                    99:4a:69:6c:80:b5:f5:6e:06:7b:d5:ed:77:17:1a:
                    e6:58:65:11:0e:5f:28:0c:9e:4f:57:63:34:71:cc:
                    6f:a8:5c:5a:98:46:f2:85:37:b1:31:44:65:cb:17:
                    df:7d:b4:2d:64:d2:60:d0:a5:5d:26:fe:9b:79:11:
                    00:94:f3:72:3a:03:d3:f4:21:93:f1:bd:89:2c:6d:
                    47:f9:13:f6:0e:c3:23:fd:14:ea:1c:12:9b:05:c0:
                    66:92:1b:48:22:7e:28:cf:79:8d:a0:97:54:e6:58:
                    29:70:17:ac:14:8d:33:9a:14:ab:16:de:74:ab:93:
                    a2:92:a8:36:01:b8:89:9a:cf:87:e4:31:f7:3a:c7:
                    72:12:7f:c0:b6:b0:28:ee:cf:1e:b9:85:15:4b:4a:
                    66:0e:7c:b9:fb:44:8c:98:50:47:0e:e0:87:07:84:
                    99:59:71:c6:db:07:fe:c5:06:07:3c:72:19:cf:b7:
                    93:7a:31:1b:af:8b:07:c1:1f:49:b6:e7:62:aa:ac:
                    e2:77:74:2e:9d:9b:ae:82:92:14:72:1f:b9:b1:11:
                    4f:f3:fb:09:04:cc:11:d6:c7:aa:6d:1f:e4:e9:cc:
                    77:21:8b:0a:d1:16:4c:8c:d7:b4:e6:6d:39:9c:57:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:55:62:FB:72:87:7C:63:76:AD:61:CD:1A:0E:AA:5A:A9:61:58:1E
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:d5:c2:76:13:57:ae:39:23:c0:d9:f1:25:18:b2:9d:5f:
         52:37:a6:9a:cf:e8:d0:7a:ed:7f:6b:62:4a:58:52:d6:22:98:
         48:d9:b1:65:14:7c:9d:29:65:da:e7:14:fb:51:e1:d2:95:b2:
         d6:7c:4a:bd:83:f9:1d:08:7a:e3:07:ac:b4:56:a5:03:30:26:
         1d:90:9d:73:ec:94:ce:bd:a9:cd:c8:f7:d0:34:26:a7:e8:dc:
         08:b8:e7:f9:1d:aa:e7:63:e3:99:f2:18:6c:8c:4b:e1:8a:18:
         e5:6d:3f:c2:62:ac:06:6d:30:a0:ed:0b:60:72:3a:15:c3:52:
         2d:21:17:c2:9b:b7:6c:22:7b:16:ac:e2:ee:60:45:da:02:6d:
         97:9b:33:5b:d4:d7:dc:76:42:d4:92:e5:15:02:94:83:70:69:
         bb:69:c0:da:48:a9:49:3f:ba:6b:6f:33:d2:d2:07:c7:0f:1b:
         a3:47:b4:5a:cc:68:a5:3d:55:bb:a4:91:33:3b:6e:2f:80:e5:
         2f:23:cd:63:93:a3:c2:5c:81:51:22:54:87:46:11:16:d7:f0:
         77:91:2a:7e:fe:32:7b:ca:67:d9:1f:64:f4:8a:ab:20:1b:4b:
         97:09:cf:70:a2:87:cb:38:dd:2c:71:d8:5c:67:83:93:c4:a5:
         0f:6e:70:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/QuiQN2cZH2kuzFbiUGeexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwODA1MDcwMTI3WhcNMjYwODA2MDcwMTI3WjAzMTEwLwYDVQQD
EyhiYTU1NjJmYjcyODc3YzYzNzZhZDYxY2QxYTBlYWE1YWE5NjE1ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb17gf6fgJ8585hq4PqZSmlsgLX1
bgZ71e13FxrmWGURDl8oDJ5PV2M0ccxvqFxamEbyhTexMURlyxfffbQtZNJg0KVd
Jv6beREAlPNyOgPT9CGT8b2JLG1H+RP2DsMj/RTqHBKbBcBmkhtIIn4oz3mNoJdU
5lgpcBesFI0zmhSrFt50q5Oikqg2AbiJms+H5DH3OsdyEn/AtrAo7s8euYUVS0pm
Dny5+0SMmFBHDuCHB4SZWXHG2wf+xQYHPHIZz7eTejEbr4sHwR9Jtudiqqzid3Qu
nZuugpIUch+5sRFP8/sJBMwR1seqbR/k6cx3IYsK0RZMjNe05m05nFc84QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpVYvtyh3xjdq1hzRoOqlqpYVgeMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCzVwnYT
V645I8DZ8SUYsp1fUjemms/o0Hrtf2tiSlhS1iKYSNmxZRR8nSll2ucU+1Hh0pWy
1nxKvYP5HQh64westFalAzAmHZCdc+yUzr2pzcj30DQmp+jcCLjn+R2q52PjmfIY
bIxL4YoY5W0/wmKsBm0woO0LYHI6FcNSLSEXwpu3bCJ7Fqzi7mBF2gJtl5szW9TX
3HZC1JLlFQKUg3Bpu2nA2kipST+6a28z0tIHxw8bo0e0WsxopT1Vu6SRMztuL4Dl
LyPNY5OjwlyBUSJUh0YRFtfwd5Eqfv4ye8pn2R9k9IqrIBtLlwnPcKKHyzjdLHHY
XGeDk8SlD25wlQ==
-----END CERTIFICATE-----
Generated at Wed Aug 5 16:47:25 2026 by rpki-client