Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          a9y02BIQgz8MiDLGD2FSUI1JRq4hT09Hhy8nKxoQHq4=
Subject key identifier:   BC:AE:85:23:51:36:84:1F:0C:82:EC:3A:48:D4:9F:5E:AB:29:75:EB
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A04498EFCB54EEC9DA048DD94FFB10960E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A24
Signing time:             Thu 27 Aug 2026 19:01:08 +0000
Manifest this update:     Thu 27 Aug 2026 19:01:08 +0000
Manifest next update:     Fri 28 Aug 2026 19:01:08 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: /33fz9MNsOnJqEKS2hAcO/dLl+J6kZaudvSok1Qc/bY=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 14:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:44:98:ef:cb:54:ee:c9:da:04:8d:d9:4f:fb:10:96:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Aug 27 19:01:08 2026 GMT
            Not After : Aug 28 19:01:08 2026 GMT
        Subject: CN=bcae85235136841f0c82ec3a48d49f5eab2975eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:34:95:c7:88:bb:ff:a8:dc:1a:bd:80:4c:
                    99:3e:01:b5:58:46:cc:d0:63:9e:a9:9d:b2:45:d8:
                    12:69:db:d6:6c:b1:dc:a1:3f:7a:fc:a6:db:7a:b7:
                    b1:36:df:35:db:80:ee:c8:f8:af:d7:cc:06:a5:a3:
                    cb:c1:fe:c6:59:bf:f7:3d:3d:77:ad:f7:8f:92:cc:
                    b5:d3:c4:6d:4e:83:cf:a6:d6:6b:6f:1f:d6:8a:e2:
                    26:8c:38:06:59:13:6a:06:81:71:74:95:ff:ed:8c:
                    20:95:ff:6f:6d:f8:18:d7:d8:f5:a5:35:b0:44:f3:
                    b3:66:e9:f1:4a:7f:64:0b:eb:cf:3a:c5:2a:96:fc:
                    33:b4:1e:7c:79:53:b6:f9:54:aa:7a:e4:3f:2d:fc:
                    b8:d9:8f:d0:ff:1d:0b:e5:45:67:ab:91:e3:74:95:
                    61:ce:17:34:08:eb:46:67:f6:a5:c7:14:15:0c:e4:
                    a2:f5:ec:3c:c9:8d:76:d1:5e:02:69:20:a2:a1:ea:
                    53:08:18:51:ef:f5:26:0f:56:7a:a3:af:a6:42:e4:
                    90:af:f2:05:50:1d:9a:ed:3a:d1:7f:25:52:76:d9:
                    92:ff:bc:e7:3c:d8:0a:48:76:9e:b9:e6:d8:2b:34:
                    bc:96:f9:c6:ed:4e:e6:a9:98:20:d4:9b:55:7f:1d:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AE:85:23:51:36:84:1F:0C:82:EC:3A:48:D4:9F:5E:AB:29:75:EB
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:86:d9:ee:bd:71:b7:0c:42:92:89:63:e5:0e:88:1e:bd:88:
         fd:51:ce:48:72:1c:3f:fe:92:23:6a:20:db:53:33:07:76:9d:
         ae:98:2b:39:be:f1:33:b4:0a:80:82:70:d2:ff:83:2e:53:1f:
         5c:ed:0f:78:07:ad:82:d5:4d:4a:fc:8c:ed:cb:37:c7:22:e6:
         bc:44:a7:21:b9:74:d4:3a:c3:38:bd:52:c5:c6:c2:c9:c2:b8:
         02:c8:8a:93:a4:1d:d7:6b:ea:76:d1:f6:d8:d1:71:17:69:3c:
         89:77:e6:48:9f:45:91:82:ac:63:e8:8c:83:57:13:83:e7:bc:
         7c:84:67:0a:f5:1e:02:cc:02:ca:4a:b2:3a:ca:e4:c1:98:53:
         94:ac:c3:cb:45:48:94:26:d7:4b:2b:8e:9b:63:f5:ad:d9:2e:
         13:ee:07:37:4a:cd:14:6b:c1:a9:14:92:a8:f3:a1:a0:f5:fc:
         02:64:49:96:ab:c7:64:23:29:19:26:b7:7f:12:a8:32:c8:73:
         26:bd:a3:f1:8d:b5:bf:84:b2:02:7a:9b:11:19:53:4b:80:3a:
         e2:6c:ef:af:fb:3f:48:96:cc:60:e4:07:8d:f9:1f:5d:30:ed:
         51:a9:2d:ca:70:49:53:fa:30:f7:59:0a:e2:cd:fd:4b:1b:44:
         94:34:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:47:20 2026 by rpki-client