Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          RopxhitfCutGLMEc8TekyUqAvfL/LSpyylcrAFNdkiw=
Subject key identifier:   C6:59:04:66:86:FD:D3:0E:7C:45:73:E6:1E:C7:7E:31:B0:DB:AF:6B
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01A0CBC74231BE436D9540B418A371D9F851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 01:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:28 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: HXhqBiT/+C8SnS7HP8QqyoBh6S6oiisGKIies9C+nXM=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:42:31:be:43:6d:95:40:b4:18:a3:71:d9:f8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep 23 01:00:28 2026 GMT
            Not After : Sep 24 01:00:28 2026 GMT
        Subject: CN=c659046686fdd30e7c4573e61ec77e31b0dbaf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:44:41:27:59:14:c2:8c:b5:00:bf:9f:0d:
                    30:13:b9:67:94:16:19:8f:b7:b2:0c:96:ed:f0:cf:
                    89:b9:22:fa:e8:7d:bd:ae:e0:ae:d9:49:a5:91:7c:
                    32:b4:dd:1d:da:d3:18:5b:04:02:16:6b:3d:31:7e:
                    4f:5b:3b:66:fb:3d:3e:1d:e2:a8:1c:42:85:42:41:
                    9e:56:3a:72:80:61:21:c3:c4:05:a9:7a:d4:2b:0d:
                    c3:e3:4d:fd:09:34:61:53:fa:ec:7a:ea:d2:48:e5:
                    21:86:68:36:e1:0b:3e:f3:b2:12:08:b5:71:bf:b0:
                    96:73:0a:8f:52:ba:d8:1e:a5:ba:1e:35:bb:8e:a1:
                    b9:45:81:13:98:0f:d7:07:85:9e:32:16:0a:70:e4:
                    49:ed:78:d6:cc:70:5c:c8:d8:2c:94:a6:d4:45:8d:
                    c4:00:1d:48:86:01:aa:46:0d:6a:01:84:d5:19:5c:
                    25:ec:f2:6e:ce:ad:7b:a4:8f:7a:94:8e:b1:7c:26:
                    00:52:3e:19:94:6a:d0:d0:d9:f4:61:61:ed:e2:ed:
                    b9:8e:c5:35:5f:cc:e1:dc:69:ea:6d:e6:d3:2c:a1:
                    73:56:ad:0f:5e:3b:4b:12:84:d5:bb:95:d0:71:e1:
                    fe:bd:e8:d7:bd:4f:78:99:2a:92:04:de:57:40:eb:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:59:04:66:86:FD:D3:0E:7C:45:73:E6:1E:C7:7E:31:B0:DB:AF:6B
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:64:aa:9b:b8:3d:71:3f:56:57:ba:60:5f:6d:44:77:91:79:
         e1:22:35:81:ae:a9:5b:75:23:a7:f1:c5:98:f9:3d:38:81:1e:
         d6:2e:57:c3:c8:47:f1:de:45:15:f8:8c:58:30:ab:8a:ea:b8:
         46:4b:2d:63:e6:cf:8e:20:b2:34:39:16:0e:ed:68:4c:7c:e2:
         9d:60:34:3f:cb:01:30:ed:c9:c0:16:18:ed:bb:25:1d:d1:63:
         7f:1b:65:6a:7d:ba:33:da:7b:07:7d:18:e1:da:0f:95:ae:dd:
         d7:f8:fd:ca:7b:94:5f:ea:c6:c8:f3:bd:cf:92:76:a9:82:c2:
         25:ce:e9:d4:76:5d:1c:96:44:5c:b0:c6:34:06:fa:be:0e:2a:
         d0:a0:34:75:a2:4b:cd:c0:de:c7:b3:4d:02:e0:a0:87:ec:75:
         54:6c:13:df:8d:6f:41:e5:88:87:35:cf:7f:c0:21:6a:64:46:
         66:66:a3:a4:a2:46:8d:cc:1d:80:c9:bb:8c:da:b9:15:75:87:
         20:39:6e:f1:cf:da:59:00:3c:15:cc:27:e1:c1:5c:af:8d:e7:
         de:3a:eb:f8:b4:fb:c8:4a:40:79:c2:3f:11:33:8b:f7:68:70:
         a6:58:cc:d3:1c:16:f5:b1:f8:a2:cd:a0:61:1f:46:9b:32:c7:
         3a:81:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:53 2026 by rpki-client