Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          MrY4ArQ1xVPN/mqdZH+JQ3mOjmc0Vgx2YHl+NjxcJGo=
Subject key identifier:   72:18:21:CD:27:38:F2:37:57:07:59:0C:8C:44:C2:35:7A:E1:CF:6E
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019FA82B1EFCA09D491DE05D7D04FC4B572C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 10:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:26 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: W1ZJz0s9XsWm8g7kr/SjYoBjehnWM/Pk8ZD/f2qFsms=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:1e:fc:a0:9d:49:1d:e0:5d:7d:04:fc:4b:57:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 28 10:00:26 2026 GMT
            Not After : Jul 29 10:00:26 2026 GMT
        Subject: CN=721821cd2738f2375707590c8c44c2357ae1cf6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:24:85:8d:5f:3b:6a:2f:03:93:07:2e:07:
                    f7:2c:11:13:19:78:9f:93:29:31:e0:9c:51:49:2a:
                    8e:85:8b:1e:2b:27:26:d4:30:e2:e0:ab:f9:b3:8f:
                    04:5a:f5:7c:cd:72:c5:a0:04:75:29:9e:2a:67:fb:
                    5f:85:6f:5e:91:f3:b5:f4:6c:ab:cc:f8:66:bd:e0:
                    70:3e:76:8a:47:0f:41:4b:d2:8b:d8:a6:fd:02:a8:
                    22:ae:d1:6e:2a:48:36:5e:a5:ae:4b:ca:c0:4e:3a:
                    05:d7:52:e7:01:b3:68:2b:86:92:66:ce:d1:ae:cb:
                    44:a5:39:5d:67:eb:c1:d5:f2:37:36:69:31:97:a4:
                    52:91:51:19:48:15:e9:d9:3d:1b:43:68:a6:0b:74:
                    ea:a9:0d:09:74:3e:e7:dd:72:86:75:ff:97:1e:7b:
                    bb:8d:65:0d:7d:d9:eb:e8:fc:d4:90:84:23:53:0e:
                    69:fc:d9:66:b6:ec:b2:55:f2:c3:91:c2:a4:c1:ca:
                    ca:05:82:3d:12:60:5e:95:b8:3e:fc:e9:a2:73:65:
                    7c:48:1b:4c:dd:f9:6b:3e:d4:12:db:62:49:92:c7:
                    61:96:a2:76:e2:13:ca:ea:d0:1c:18:2f:b5:34:bf:
                    30:91:fe:fc:be:7b:e9:da:9c:a8:6a:81:32:74:17:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:21:CD:27:38:F2:37:57:07:59:0C:8C:44:C2:35:7A:E1:CF:6E
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:01:a4:c8:d3:a3:b6:d8:da:b9:34:9f:80:a5:f0:f9:54:
         2f:66:a0:01:7f:f0:9c:4b:fe:f1:4e:42:b8:31:13:d2:0b:de:
         de:51:2a:85:ac:80:20:1b:61:a8:e1:6a:07:a0:be:1f:06:3d:
         6c:ab:e7:be:3b:c6:1b:26:dc:d2:04:73:fb:ba:2d:4d:f6:3c:
         de:27:2f:31:f5:6d:fa:af:d1:25:1b:98:4c:e6:b6:0c:05:d4:
         29:ec:41:06:ee:73:e7:76:5c:c5:32:dc:ce:11:fe:2f:70:98:
         db:f0:c1:54:f4:7b:3f:dd:73:d8:32:e5:36:07:fb:be:de:63:
         62:21:95:dd:a9:0d:4b:fe:39:fc:31:28:58:70:ac:d3:7a:65:
         e0:6b:e3:f9:a7:0f:c3:1b:f3:a9:81:3e:64:d2:05:3f:85:a6:
         c5:8d:52:35:50:f1:7a:b5:26:f7:f2:c6:07:31:41:fb:1c:d8:
         33:ce:6a:94:09:89:ab:92:07:7d:60:f4:4e:b3:0d:f2:18:c3:
         c2:ad:2b:62:65:a1:5b:a3:4c:75:4f:5b:a6:c0:f0:42:6c:cd:
         be:cf:86:36:7d:4d:3d:f5:d8:7e:7d:86:55:5d:fd:87:c6:41:
         41:97:aa:8e:c2:8f:85:3a:fb:32:39:2f:56:0b:d6:f5:6b:24:
         2b:c4:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:21:29 2026 by rpki-client