Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          j7Z623DvASPerngaohXKjyOCSvcluz4CUN+UkZ7ckN8=
Subject key identifier:   17:3C:42:AC:F3:4B:99:1B:AC:0D:B8:EC:A9:23:17:BA:BC:23:E2:6A
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F98B7DE6E908049C74FC1FB7FCD21F064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19CB
Signing time:             Sat 25 Jul 2026 10:00:14 +0000
Manifest this update:     Sat 25 Jul 2026 10:00:14 +0000
Manifest next update:     Sun 26 Jul 2026 10:00:14 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 4zhjheyFyzm/eY15fF44Bltk5gKWWjqAGC/1EWziIZ0=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:98:b7:de:6e:90:80:49:c7:4f:c1:fb:7f:cd:21:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 25 10:00:14 2026 GMT
            Not After : Jul 26 10:00:14 2026 GMT
        Subject: CN=173c42acf34b991bac0db8eca92317babc23e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:a7:29:61:74:ab:2e:0f:c3:64:4b:5f:1d:
                    b9:26:8e:e7:62:8b:2c:ca:cd:2b:b2:08:83:e4:5c:
                    06:5c:16:3d:20:c7:ee:a7:c5:d6:60:be:15:69:87:
                    b7:98:08:c3:dc:27:d2:43:52:2e:0d:8b:68:77:77:
                    52:81:9a:42:65:a1:ce:3f:2c:23:ac:bb:97:9f:2a:
                    84:c7:ab:d8:40:5e:f0:34:9c:a2:d6:0b:8a:8a:9f:
                    c8:9c:c3:f9:db:8b:20:d0:a6:77:76:26:5f:7a:fe:
                    68:67:71:6e:33:a0:77:5d:4b:39:a4:48:53:95:b5:
                    89:ee:42:d9:8f:04:92:68:7c:31:cb:28:da:45:a4:
                    ab:de:b6:f7:33:be:a9:4a:58:e8:79:ee:1d:bb:5b:
                    07:b8:a2:31:f7:e8:24:88:07:20:4c:a9:5c:a8:0c:
                    10:30:3b:5d:66:e6:63:09:23:f7:8c:b0:26:7e:de:
                    e6:be:c4:ac:21:c9:85:b7:f9:93:f6:48:a4:58:fd:
                    af:19:84:ce:45:b2:94:31:60:76:c0:58:80:ab:d2:
                    9a:a7:2d:f1:1a:8e:91:46:68:e8:72:82:ae:b3:12:
                    ec:df:01:1a:be:8c:34:5d:e6:e6:8c:11:12:52:12:
                    9e:89:18:1d:29:4d:e4:f1:28:11:44:7a:da:72:dd:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3C:42:AC:F3:4B:99:1B:AC:0D:B8:EC:A9:23:17:BA:BC:23:E2:6A
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:11:49:64:76:c8:64:63:c8:8b:e1:84:5b:f7:7b:37:09:
         bf:c7:70:1a:12:97:c0:d2:cd:99:81:97:a7:e8:d4:2b:d4:48:
         4e:ad:9b:3d:74:f1:44:cb:31:25:7c:a8:c2:34:11:c7:7a:ee:
         d5:14:3e:d1:5a:a2:f5:2a:30:97:fe:04:8c:ce:ac:bb:d4:e7:
         8c:3c:eb:26:3c:8d:4d:ba:d0:c1:ca:2a:53:af:03:8d:4b:b1:
         98:04:55:07:ad:85:45:59:0f:bc:c1:5e:06:65:8c:65:9f:ad:
         bf:65:18:86:7f:aa:cd:6a:6c:89:f5:b1:40:22:57:ca:41:c7:
         96:fe:c2:8b:d5:1e:dd:cb:6d:4d:9f:6e:50:93:89:b2:b3:57:
         03:2a:e2:72:50:2c:06:b3:c6:76:18:f1:41:b1:67:8a:da:89:
         52:2c:7f:bf:2e:ea:0f:c2:3b:66:4f:aa:ac:1a:51:12:52:25:
         84:94:7d:96:7d:17:0b:27:4b:fa:7a:2f:44:b2:05:6d:0e:3e:
         14:43:01:c7:9e:ef:fc:44:c7:5b:33:66:67:44:17:ae:42:d5:
         ce:24:6b:74:95:85:d8:83:5a:e4:2a:bf:04:55:9e:76:be:1e:
         38:4c:a6:11:37:d4:58:8b:1c:f6:c8:d8:a9:0d:82:a8:1b:7f:
         eb:d9:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 12:24:03 2026 by rpki-client