Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          2i3sx7xK67kaBz2JNwaNDFqdQIXEzYyqItd7bSDnMs8=
Subject key identifier:   60:BA:B0:02:85:02:FE:F1:6F:9C:31:E7:7C:4D:74:5E:3B:D0:A4:31
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F62A6863A64F30FFA342592575C013290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19AF
Signing time:             Tue 14 Jul 2026 22:01:48 +0000
Manifest this update:     Tue 14 Jul 2026 22:01:48 +0000
Manifest next update:     Wed 15 Jul 2026 22:01:48 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: N9blHDgOiVa52apeMM8vuxwMt8zBjMjIAaGTdvVH/fw=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:62:a6:86:3a:64:f3:0f:fa:34:25:92:57:5c:01:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 14 22:01:48 2026 GMT
            Not After : Jul 15 22:01:48 2026 GMT
        Subject: CN=60bab0028502fef16f9c31e77c4d745e3bd0a431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:26:f0:23:a2:db:53:d0:77:c1:6e:9e:52:
                    da:f5:a4:e0:e8:e3:a4:78:08:65:36:c0:45:e6:89:
                    1f:6d:c7:a4:04:6d:28:01:f2:33:75:90:ad:22:f5:
                    b5:73:d5:dd:92:b0:4d:b9:b7:2f:00:c1:f3:54:5e:
                    59:53:c4:eb:e2:9e:61:e6:c7:d1:3d:51:1a:89:1c:
                    6c:b3:04:10:13:ff:24:92:80:44:b4:9d:4e:96:3e:
                    21:63:b9:f9:be:50:b0:2e:3c:2f:fc:09:b0:c8:46:
                    3b:ae:d0:4d:46:c9:2e:ce:2c:34:dd:9a:a1:15:ba:
                    ef:61:56:c0:24:dc:34:8a:bf:af:fb:b1:da:d5:83:
                    f1:7a:26:91:bb:73:af:f2:23:cd:3c:af:1a:14:a6:
                    d3:f6:c4:65:fc:a7:46:d9:ac:cb:0c:0d:d9:df:bb:
                    c0:90:be:bb:9a:e3:05:0b:6f:fe:d0:58:75:78:65:
                    c1:c3:85:5a:08:49:59:a7:6d:db:bc:8b:9b:10:52:
                    0c:b9:6e:a4:4c:62:7e:1b:64:cd:82:0d:32:72:fe:
                    8b:0f:4f:f9:19:e3:a5:10:2a:71:72:31:0a:d1:19:
                    a2:fd:fc:7d:8b:cb:17:a2:9f:71:a4:be:8c:51:37:
                    02:f8:78:16:ba:6d:28:2f:6c:82:67:de:c0:d5:4c:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:B0:02:85:02:FE:F1:6F:9C:31:E7:7C:4D:74:5E:3B:D0:A4:31
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:5d:be:4f:6c:45:68:18:16:62:78:84:25:7b:63:e4:ec:
         59:94:1e:ee:e1:85:c9:1e:82:e2:c7:c9:8a:5e:55:b7:13:90:
         b3:bf:ff:70:a3:43:0e:7b:34:36:a7:58:d0:0f:4b:a9:18:b7:
         f6:cd:fe:09:96:16:86:58:12:c6:e7:79:cd:5d:d8:81:d3:8c:
         fa:c3:d2:cf:a5:94:bf:7c:ee:b8:0e:80:47:63:5d:b2:92:17:
         94:0c:44:fe:fd:c6:74:4d:b7:a7:20:af:b1:8b:ee:40:80:a8:
         6c:a9:3b:ae:91:92:70:ad:65:b4:62:03:b0:de:0f:e3:d3:1e:
         e1:89:40:e9:1b:35:0c:4a:26:03:cd:c7:e8:88:fb:a2:aa:59:
         f7:51:e4:43:d6:71:8e:ba:4f:2c:4f:28:81:49:99:67:05:f8:
         f1:6a:52:6b:b4:f9:cc:92:69:af:10:e8:8b:e4:af:95:2c:a7:
         d0:7b:79:b4:c7:b6:13:21:11:ae:8e:79:38:a5:92:66:82:02:
         77:0a:5d:40:12:9e:88:db:df:c7:e6:5a:4d:5b:56:99:f3:0a:
         0f:e7:66:fd:bf:7a:ee:a4:bb:61:e2:28:24:9a:08:3d:4c:24:
         15:96:86:70:89:9a:78:b8:18:75:44:e0:27:0c:ec:6d:8b:a7:
         8b:19:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 06:58:07 2026 by rpki-client