Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          wUZCCkPrpFwdkYpYAPzScVwL4dlI7libi2LMojH13XA=
Subject key identifier:   6B:BF:21:72:E1:68:72:5D:12:8C:21:3E:FC:9F:5B:65:BB:41:F4:B4
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F77E48618D6D6ED2F106565E3D5F8F7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19BA
Signing time:             Sun 19 Jul 2026 01:01:33 +0000
Manifest this update:     Sun 19 Jul 2026 01:01:33 +0000
Manifest next update:     Mon 20 Jul 2026 01:01:33 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: vtizZbBCZtazrSYNxDkYYmVLAoXuBWHfRRpz0xPg2ic=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 01:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:77:e4:86:18:d6:d6:ed:2f:10:65:65:e3:d5:f8:f7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 19 01:01:33 2026 GMT
            Not After : Jul 20 01:01:33 2026 GMT
        Subject: CN=6bbf2172e168725d128c213efc9f5b65bb41f4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:74:a3:db:55:78:c8:d2:36:8d:f9:04:af:
                    32:ec:bd:4d:bc:3e:61:a5:71:fe:ce:f4:86:4a:17:
                    07:0b:b1:b9:5c:3d:24:23:3f:04:ef:23:6f:f2:d9:
                    81:38:fe:7a:84:b2:8a:46:88:c6:10:05:ee:94:2c:
                    e3:e1:3a:69:d9:27:54:37:03:6d:9c:b5:9e:8f:20:
                    e6:c7:a4:e6:e3:5b:2d:cf:00:56:ae:63:22:8b:93:
                    e8:4a:ae:07:ca:15:66:87:9f:ac:29:da:5b:6b:24:
                    c7:9a:7a:3c:7e:f1:d3:b9:72:4f:1e:ba:5e:49:e2:
                    b0:0d:0f:d9:d3:c0:04:33:e7:54:8e:c6:3f:0a:77:
                    b7:d0:36:9d:3a:e7:9f:79:6f:f3:6c:9a:f4:9a:f4:
                    f0:8a:e0:ec:60:23:5a:e7:4b:dd:ad:ab:a4:9e:4c:
                    d3:d3:70:8e:50:23:af:67:93:cc:a5:bb:6f:fe:6f:
                    20:11:cb:19:22:11:42:c1:ca:61:9f:dc:28:b1:b8:
                    c0:de:de:b1:a1:01:b1:91:8d:4c:99:a6:04:61:be:
                    f8:81:a9:42:89:c7:fc:0e:9f:02:cb:e1:0c:1e:d7:
                    03:44:9d:83:49:c8:11:de:f4:2f:55:d7:ee:53:2f:
                    73:07:df:3e:d2:42:f5:2e:dd:07:25:1a:5e:20:22:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BF:21:72:E1:68:72:5D:12:8C:21:3E:FC:9F:5B:65:BB:41:F4:B4
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:9a:5c:3f:4b:9a:0d:6d:d0:9d:d4:cb:1b:d6:2f:7d:56:
         58:e2:fb:b3:ce:b3:21:37:24:17:26:b5:2f:bb:8a:74:0f:ae:
         52:5f:66:3a:17:7d:e0:3e:69:e9:e9:f4:b6:cc:ca:d5:65:12:
         88:2e:8f:37:d3:66:7e:84:5a:f5:59:87:c1:90:a6:7a:f7:cd:
         ef:f5:3d:9f:b6:92:77:ab:90:80:b2:67:f6:30:d3:01:e2:b9:
         a5:3d:f0:29:e7:f4:a1:6b:3f:d0:e7:de:59:28:ec:6b:15:ee:
         05:22:1b:31:41:9d:52:a9:6c:d8:77:80:57:81:a0:10:c6:d7:
         50:06:90:77:4b:b3:48:5e:9e:c5:ca:74:50:e9:d4:f9:67:7d:
         96:d7:ad:b0:72:dc:de:46:f9:51:ba:63:66:ab:a8:11:ea:56:
         f5:41:46:8b:3f:9f:ca:ef:24:6e:8b:9f:f5:ce:98:80:c2:dc:
         dc:bd:16:22:c5:96:22:8e:51:02:e7:51:74:f1:f0:f6:23:f8:
         a7:dc:ae:70:bf:d1:b5:7e:e9:86:82:0f:48:53:46:ed:a3:e9:
         18:fe:be:6c:83:aa:3b:77:8f:68:6a:5a:ed:4a:f5:24:ff:40:
         79:5b:d6:50:67:8c:35:e8:a5:9f:35:21:1e:65:b1:be:44:c7:
         30:19:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 08:18:33 2026 by rpki-client