Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          9THDOfZT8+EyNcJLdRpaJ7k0zrS4JwtT45AK6JGztqA=
Subject key identifier:   61:35:DA:C8:4D:53:BA:BB:C4:A9:44:B5:2F:EA:B5:2A:35:92:C0:68
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A0A14AD8D3FDEFAA152D59617A5047B54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A54
Signing time:             Mon 14 Sep 2026 19:00:31 +0000
Manifest this update:     Mon 14 Sep 2026 19:00:31 +0000
Manifest next update:     Tue 15 Sep 2026 19:00:31 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: u0IGInXgbi+sTGs2TA+vEjxCG/5wdjlPmbSxvDMVxqI=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a1:4a:d8:d3:fd:ef:aa:15:2d:59:61:7a:50:47:b5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep 14 19:00:31 2026 GMT
            Not After : Sep 15 19:00:31 2026 GMT
        Subject: CN=6135dac84d53babbc4a944b52feab52a3592c068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:84:2e:8b:c1:be:4b:3b:c0:d0:9b:bf:8a:
                    04:1e:1e:0a:79:b1:24:49:70:4b:c5:3d:b7:1f:63:
                    62:e8:8d:72:7a:af:62:17:b4:c7:c9:dd:e9:be:3e:
                    f5:52:70:ae:63:b7:fa:95:b7:27:7c:46:69:cd:f7:
                    df:eb:14:eb:20:0a:5a:16:2c:4f:ba:11:99:da:69:
                    eb:dc:45:8c:a2:1c:2b:7c:47:ca:7f:ad:6c:d6:b1:
                    70:b3:b7:a1:88:e5:3e:b2:02:70:57:a8:8b:5a:8c:
                    39:8f:c2:40:03:dd:84:29:f6:f6:d0:f2:7e:0a:9b:
                    6e:23:94:87:da:5c:51:cb:1a:3e:24:49:5c:68:a9:
                    b9:a4:dd:e6:4b:7d:84:44:ef:87:88:e9:90:d0:57:
                    c5:a5:bf:25:72:12:e2:ca:eb:6f:b9:40:ba:54:0a:
                    52:b9:0b:55:8e:a9:1d:64:60:6e:af:4a:80:69:ab:
                    f9:70:5b:73:2f:f2:23:35:d4:00:18:85:ef:ef:19:
                    19:83:75:c7:aa:ef:a5:1e:4e:49:88:cd:61:05:5e:
                    9c:57:40:36:50:6b:0a:ad:26:aa:06:31:fb:d6:d5:
                    91:52:53:64:ad:c9:0f:92:77:a4:65:bd:97:d3:5e:
                    9b:03:fb:56:da:e6:22:34:76:11:80:dd:28:69:d9:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:DA:C8:4D:53:BA:BB:C4:A9:44:B5:2F:EA:B5:2A:35:92:C0:68
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:15:21:ca:88:f9:62:cb:73:76:01:98:82:2c:b7:9d:51:f0:
         05:bc:f6:0c:7a:20:0b:7a:2d:49:68:bf:2f:13:c6:73:73:0b:
         d8:fc:94:54:83:36:b9:4b:6d:bb:d5:bc:b4:9b:bb:9a:71:9a:
         5c:73:4b:1c:ce:7f:24:88:56:fa:10:98:24:7c:e0:58:b8:76:
         ca:b3:fa:5e:62:4a:3e:e8:31:54:61:54:36:5c:27:8f:95:3e:
         6e:86:98:5e:67:4f:9a:65:cc:01:6c:99:e0:16:db:6b:a5:02:
         a6:38:8a:c1:f6:04:2b:74:cd:65:09:dc:21:82:d1:14:d7:46:
         47:b8:37:8a:12:60:ab:47:c6:88:2f:af:53:51:9a:bc:89:fa:
         f7:ed:bd:dd:93:6e:6c:c9:1f:0d:99:7f:ed:32:ae:87:25:83:
         0d:36:5c:91:9b:06:b4:b6:f5:d8:5e:c3:35:16:f4:19:66:b4:
         80:0c:0a:e3:83:6d:4e:fb:49:45:0a:51:0e:6f:d8:f9:9b:59:
         e4:fa:df:98:42:a6:3a:67:48:f2:36:c6:7d:42:e1:58:bf:77:
         80:fd:d5:1d:b8:bb:e4:c4:c2:e3:6e:8a:5e:e0:ea:bb:be:d8:
         82:58:c4:2d:e4:b4:a8:54:de:6f:11:29:98:16:24:8d:f2:b2:
         04:44:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 00:32:56 2026 by rpki-client