Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          ex5j5wfznyMK9ye9IJ8draq4mADPzi1nxUTBYDqUJrE=
Subject key identifier:   6B:5A:24:EE:39:8C:27:41:BB:C3:98:EF:C6:F0:28:EA:8A:F1:31:89
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019F90FF7DFE16A7FC631DB9F6A3E32AFD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 22:01:30 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:30 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:30 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 9nqPeJvGRs9/9gjeZiVySuOlDpwTAzbd3A4lNrOlfL8=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:7d:fe:16:a7:fc:63:1d:b9:f6:a3:e3:2a:fd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jul 23 22:01:30 2026 GMT
            Not After : Jul 24 22:01:30 2026 GMT
        Subject: CN=6b5a24ee398c2741bbc398efc6f028ea8af13189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:e4:64:95:40:35:d8:90:5b:46:f0:3c:27:
                    d4:25:b0:7f:f2:19:38:5d:01:05:24:a1:eb:12:49:
                    ac:9f:b5:ed:86:f5:b6:83:13:2b:ef:71:7b:07:c1:
                    2b:fb:b8:6e:8f:1d:11:07:7a:a4:6a:5d:c9:c3:b3:
                    54:73:b9:99:af:1e:74:ce:49:b4:22:43:01:01:8a:
                    7a:96:82:e5:03:0d:e4:82:58:f8:e6:ab:79:81:0d:
                    bb:03:fb:ac:c2:07:97:84:81:1f:a8:29:54:e7:09:
                    aa:44:d9:4d:33:b9:81:04:e8:e0:47:09:09:f1:70:
                    f0:0e:18:ad:13:62:21:6c:9f:2f:d8:f7:64:a5:5d:
                    16:ae:00:ba:93:c6:63:52:95:38:03:df:4b:36:0e:
                    71:a6:fc:f2:ff:fd:0d:dc:7e:0e:99:61:ec:17:dd:
                    b1:ef:cb:03:9b:17:42:46:53:92:af:92:76:72:46:
                    27:38:56:9e:7a:18:4d:22:54:52:ca:b7:d3:ad:ba:
                    8c:ab:8d:24:00:00:df:ae:1a:53:b3:ce:ba:ab:cc:
                    b8:2d:04:1e:3a:b2:20:36:67:56:34:56:d2:6e:b2:
                    f6:bf:c9:7b:d0:7d:69:5b:f6:f8:98:b5:4f:fe:8f:
                    74:83:f3:ff:94:bf:b4:18:08:89:3c:ed:43:b5:d9:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:24:EE:39:8C:27:41:BB:C3:98:EF:C6:F0:28:EA:8A:F1:31:89
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:88:e6:cd:e4:3b:42:34:ff:28:4a:e3:33:e7:3d:ba:fb:
         f2:9c:50:04:8d:a7:d7:d1:e2:48:db:04:4e:8a:61:52:76:ab:
         e0:aa:73:e6:0e:da:cf:84:1c:50:c5:c0:ef:01:e0:dd:4b:9c:
         a0:d3:00:d4:7d:6e:1e:65:5f:28:00:fc:05:18:30:d7:15:cb:
         d8:a5:c1:37:e4:54:f2:b3:08:4b:1a:25:0b:6f:64:15:51:5c:
         d8:ba:35:05:b0:d8:2f:7c:57:a2:8c:a8:78:55:08:dd:6c:78:
         36:a2:c6:04:57:0c:7c:a4:b8:8a:c2:64:00:8d:09:5f:4c:b0:
         c6:fc:05:e4:05:9e:77:4e:0f:0f:46:cd:1b:a1:05:d0:fd:e1:
         87:7e:70:87:76:fc:f8:01:d3:f4:1e:70:c3:23:a5:11:70:90:
         7b:07:87:52:75:4e:4f:bd:c5:ff:bd:a5:56:72:49:ce:b4:99:
         42:75:7f:6b:67:f4:52:1f:49:1f:ce:a3:44:81:e6:74:92:42:
         da:7b:21:9d:b1:19:5a:d8:46:ae:6e:05:8a:f5:be:09:06:57:
         2c:86:f6:bd:36:a0:2f:26:53:0f:73:5b:91:73:73:f5:65:c2:
         04:f1:32:07:6b:dc:23:4d:46:f8:c2:88:b9:c6:98:b0:71:7b:
         89:5b:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:26 2026 by rpki-client