Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          X74gmvg2IujUMJqTcRAv99l7gvUtj6PO2oGL8wtjMo8=
Subject key identifier:   9A:1A:17:6E:21:44:E3:3E:FA:E8:0F:73:A6:D8:29:DC:BC:B5:26:F4
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F894561806AA7308B688F8DBF6E775A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19C3
Signing time:             Wed 22 Jul 2026 10:00:53 +0000
Manifest this update:     Wed 22 Jul 2026 10:00:53 +0000
Manifest next update:     Thu 23 Jul 2026 10:00:53 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: iLvJ8m5Z9dPQ4Dxo0CRBT7VY0N21fzI5/z6Q+n7kVZA=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:89:45:61:80:6a:a7:30:8b:68:8f:8d:bf:6e:77:5a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 22 10:00:53 2026 GMT
            Not After : Jul 23 10:00:53 2026 GMT
        Subject: CN=9a1a176e2144e33efae80f73a6d829dcbcb526f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:84:32:78:3c:ac:77:e8:85:08:ff:ad:90:
                    cb:d7:db:d8:a8:1e:42:6f:e6:f5:be:62:96:ef:69:
                    b6:7a:33:c9:fa:fb:be:35:b8:9d:09:8c:ef:f9:d0:
                    84:a7:1e:dd:1e:3f:c0:66:6b:7a:ac:42:67:70:bc:
                    47:8d:37:04:47:78:0d:b5:4c:cd:90:d5:d1:ab:7b:
                    e4:5d:4a:a5:04:e1:e1:05:28:f7:ed:c9:14:17:a7:
                    77:04:10:cf:a1:1b:cc:97:98:0f:e4:86:d7:33:d2:
                    74:5b:1c:7c:21:52:45:b5:48:38:e4:c4:8e:a1:58:
                    42:95:51:04:7c:74:0f:61:be:e2:82:fd:7c:f4:fb:
                    e4:ac:2a:d7:de:1c:93:ce:9d:77:27:fa:cc:93:75:
                    84:f6:b7:4c:9c:4e:ce:a2:a9:92:36:35:4d:8f:bd:
                    fe:20:26:8c:4d:94:f6:cc:e9:6b:43:27:01:fd:60:
                    a1:9a:1d:2d:24:21:d0:44:50:1b:9e:0a:21:33:f7:
                    2b:5e:89:2d:c1:a8:6e:a6:ec:ac:d5:48:5f:38:59:
                    f5:88:25:d6:88:74:a4:ef:53:6b:c5:ec:64:97:ec:
                    67:f0:6d:90:19:19:1e:e2:d3:62:f3:f4:1b:35:7c:
                    7f:49:e3:6f:0e:5b:a2:1e:b5:c5:65:98:bf:6b:9c:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:17:6E:21:44:E3:3E:FA:E8:0F:73:A6:D8:29:DC:BC:B5:26:F4
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:f5:43:f4:2d:88:b0:92:a9:34:c2:9a:e6:46:60:7e:8f:
         8a:d7:ff:19:45:70:f5:57:58:fb:77:49:00:b2:cb:0a:3d:b0:
         a2:c1:51:39:d8:79:d9:1d:9f:ab:79:21:b8:5a:24:c3:f3:a7:
         60:4a:81:98:45:ec:78:09:3e:17:e2:43:d7:6a:54:56:c0:fe:
         0b:6d:ef:42:b4:d0:36:09:9d:80:66:4b:ac:e5:34:04:45:e7:
         6e:9a:f0:f1:ca:45:de:c0:15:49:a3:39:e7:fa:80:29:90:09:
         67:9e:c7:8a:dd:14:8b:e4:61:ff:c5:89:f1:a5:cd:cf:6c:32:
         0d:68:e5:ec:cd:7a:7e:ee:39:09:b6:7c:7f:44:1f:af:05:60:
         ec:f7:05:df:a7:fb:f9:d5:4b:dd:c7:cf:5a:89:d9:9c:c6:35:
         3b:b1:93:82:4c:33:13:87:5e:a9:64:41:a5:69:59:06:2a:eb:
         b2:66:cf:8c:bd:d0:d2:58:ce:ac:bc:c4:cf:3a:17:04:2d:6e:
         a8:7e:c7:d0:2e:03:c3:97:19:e6:0d:31:38:91:cd:a4:5a:85:
         24:c6:ad:05:6d:df:27:68:6b:09:28:25:01:d2:9b:f0:a7:b1:
         2b:17:a2:b9:a8:bc:c0:89:23:62:5b:d3:88:f3:0c:2b:1a:ce:
         3f:45:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 11:57:10 2026 by rpki-client