Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          XX1cVGZz8HjgN8DITHorjJ01pptL2U8tOlQ1E22lrGQ=
Subject key identifier:   71:37:D3:BD:E6:5C:30:6B:AF:33:24:5E:98:67:00:45:09:1F:7F:44
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019EE70D55E551D769658F95124535157869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          196F
Signing time:             Sat 20 Jun 2026 22:01:11 +0000
Manifest this update:     Sat 20 Jun 2026 22:01:11 +0000
Manifest next update:     Sun 21 Jun 2026 22:01:11 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: HJQRjulxk12eNTIJJcelBJz8/HEq5b20C2UG5AIQxP0=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:0d:55:e5:51:d7:69:65:8f:95:12:45:35:15:78:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jun 20 22:01:11 2026 GMT
            Not After : Jun 21 22:01:11 2026 GMT
        Subject: CN=7137d3bde65c306baf33245e98670045091f7f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:41:75:e8:7c:65:93:8e:51:21:6b:4a:53:
                    74:b9:70:de:aa:b8:11:4c:31:79:b0:5a:46:4a:77:
                    07:a8:92:ce:14:fc:ff:3c:8d:ab:a9:af:1e:76:f4:
                    8f:1d:82:2c:86:8b:69:7d:36:7e:73:31:a8:ac:25:
                    db:a0:8e:51:e4:b5:76:ed:dd:81:7d:f8:05:f5:c9:
                    98:1e:3a:dd:bb:5a:99:97:81:b8:39:79:b9:64:54:
                    85:35:6c:7b:68:b5:69:a5:c1:da:c6:93:02:48:df:
                    fd:8c:90:e5:bd:2d:46:44:21:28:a9:28:6f:46:a2:
                    ec:0c:dc:f9:2c:ee:77:44:2b:1c:e0:ff:7e:11:e7:
                    ec:de:97:7d:c7:ec:f5:84:91:26:99:af:12:36:e7:
                    30:50:78:25:3d:97:69:c3:c6:54:df:0b:ab:ca:7c:
                    38:95:be:02:4c:35:e9:d6:0d:d0:76:1d:a8:ce:2e:
                    cd:a9:c2:f4:0c:9a:5c:1c:2a:1f:4e:0b:63:1c:b1:
                    05:5d:5a:a2:ee:83:80:2d:2b:3d:6b:11:f4:b6:1b:
                    05:d8:39:13:ab:8e:55:c9:2d:9b:59:dc:03:e9:34:
                    5e:e8:15:8a:97:b2:1a:42:26:e4:b0:85:89:b2:89:
                    15:97:ec:57:52:65:ea:3e:60:bc:df:ab:68:4f:72:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:37:D3:BD:E6:5C:30:6B:AF:33:24:5E:98:67:00:45:09:1F:7F:44
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:23:13:d9:f6:d5:0f:c0:f8:6b:df:fe:d6:df:6c:e1:96:11:
         c0:bc:e2:d0:2b:85:7e:cc:aa:83:bd:23:f7:e7:3c:4a:0e:5c:
         c4:c2:6c:c4:5f:07:7d:4a:12:12:64:c7:62:77:3b:28:c2:fb:
         a7:81:98:67:4f:96:1f:25:04:01:e8:9f:70:89:66:79:81:6b:
         0f:c6:40:1b:15:64:ae:5b:8d:d5:0a:8b:a1:b9:e2:29:8a:c5:
         c2:75:e2:27:ed:a7:78:4d:01:b4:c2:7e:6f:47:5a:f1:97:f9:
         cf:f3:87:41:ae:75:a4:b3:34:e5:8e:83:38:83:ad:16:30:1a:
         42:f4:b0:fc:b9:6d:3e:81:a8:d2:d1:ea:8c:0f:5a:13:f3:65:
         81:8f:53:b7:b9:f2:32:40:b0:3a:30:f1:c4:68:ba:97:9f:8a:
         64:bc:12:10:9c:e0:c0:ef:78:ba:d5:fa:38:3d:63:84:96:c6:
         ee:b8:0d:ae:e9:06:10:63:fa:be:a8:bb:f0:80:5a:f4:7c:8e:
         12:aa:0c:70:5e:ef:d4:fd:77:1e:62:93:39:3a:26:a9:19:ea:
         53:d6:f2:19:9b:cb:39:9f:fa:a2:8f:dc:33:85:3f:90:39:4b:
         cd:ef:ee:6e:c6:be:24:a8:c3:d2:87:9f:2b:a0:13:ea:7f:47:
         81:09:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:29:02 2026 by rpki-client