Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          C2U+mEFCu5uv9O1R3e2PsTjiKMhy8oiADuhiUb7DSqs=
Subject key identifier:   72:F0:3F:B9:85:C8:99:5F:17:41:BF:95:E2:6A:72:EE:C5:23:E3:9F
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A08DFB426B7BF4DF0FCAEE1096A709AB22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A4A
Signing time:             Fri 11 Sep 2026 01:00:49 +0000
Manifest this update:     Fri 11 Sep 2026 01:00:49 +0000
Manifest next update:     Sat 12 Sep 2026 01:00:49 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: +lO+uwfHVbx8h2NYVnwFsmxBKntl1Zj5VBwbSih5zqc=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:fb:42:6b:7b:f4:df:0f:ca:ee:10:96:a7:09:ab:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep 11 01:00:49 2026 GMT
            Not After : Sep 12 01:00:49 2026 GMT
        Subject: CN=72f03fb985c8995f1741bf95e26a72eec523e39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:2b:a9:1f:0a:02:9e:c0:38:ea:2d:7f:00:
                    f9:10:c0:07:e6:86:bd:96:96:c9:64:14:2f:38:27:
                    6f:15:b9:9d:4b:39:2a:7e:5e:29:69:33:54:de:1f:
                    54:bf:fa:cc:82:dd:aa:df:75:c5:24:5d:14:ff:f3:
                    c8:98:d4:77:c4:ef:ed:4f:7e:6c:21:f1:54:df:ee:
                    fc:a7:38:42:a1:af:50:bc:08:f5:8a:d1:4d:84:11:
                    3b:c6:5b:85:21:db:95:fd:67:cc:5a:33:f1:e8:a0:
                    ae:26:0e:60:32:5c:bd:f3:b1:3e:ee:d6:f1:dd:7f:
                    38:1b:11:9a:fe:01:dc:0b:46:c0:76:fc:77:a5:2c:
                    51:d9:0b:38:25:56:d7:f5:e4:35:35:24:9d:45:58:
                    b8:db:b5:e9:d2:b2:01:a8:d7:b4:41:d8:9d:00:44:
                    79:84:ba:43:88:d0:f6:cb:36:2e:91:3c:5c:bb:14:
                    4d:7d:e5:d3:56:8c:f4:de:af:ad:53:bc:99:dc:6a:
                    39:c5:21:95:d5:29:6e:b7:78:f1:eb:03:02:49:ed:
                    7d:fb:a3:ac:2e:4e:68:d0:55:13:b4:a8:91:87:e1:
                    dd:d1:99:7d:6e:44:05:74:43:23:6c:52:b0:47:e4:
                    99:c8:05:58:2d:3e:5d:6f:6f:17:e9:2b:19:62:fd:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:3F:B9:85:C8:99:5F:17:41:BF:95:E2:6A:72:EE:C5:23:E3:9F
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:78:43:4b:67:a0:68:0c:98:3f:ac:bb:19:37:93:bb:1a:de:
         25:88:82:ef:96:e2:4c:0a:43:9c:27:8f:51:18:97:2b:cc:44:
         19:25:0b:b1:98:18:67:f7:5d:ac:bc:75:31:56:10:4a:1d:d5:
         1d:8e:66:fc:07:7c:57:c7:8b:85:ac:88:0d:aa:2f:c1:77:ff:
         a0:31:e2:22:e9:7e:17:f9:48:a4:aa:28:ac:8d:f6:77:ed:56:
         11:ee:8a:fa:03:63:48:97:ca:44:d4:ad:b5:db:00:91:91:28:
         2b:2e:ab:ce:11:25:d6:01:70:cd:60:ae:39:27:a7:09:94:d2:
         a7:47:6d:c6:f1:58:71:b9:d8:19:28:e7:b7:5d:b4:35:e9:95:
         14:b3:8f:35:df:46:16:7c:f6:87:7e:4b:35:1c:3e:19:d5:c9:
         c5:25:66:a9:40:f4:2b:a1:3f:fb:cd:f7:c8:00:bd:66:1d:46:
         66:c5:7b:bf:12:00:a0:b1:f5:58:09:2b:ed:b7:58:99:53:bd:
         24:35:34:f4:3b:ca:b0:38:53:94:64:91:e3:ab:1c:a3:87:98:
         4b:92:c4:6d:ee:86:31:e8:f3:36:86:db:5d:ec:f1:7a:dd:7c:
         6a:d3:d0:a1:49:9c:bb:f0:6a:e1:df:68:67:b9:da:c6:b7:cf:
         1f:a3:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:05:48 2026 by rpki-client