Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          /+9zZUEfO3k8jd+n6e3RaUWOMODfEuRFuZfjWpNDNyg=
Subject key identifier:   94:DE:19:D4:1D:A8:03:2A:C2:1B:CF:89:94:A3:C4:18:79:74:15:60
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       019EBE7EB8F5EBAA5EE6B4E28C0E0D6CB22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1955
Signing time:             Sat 13 Jun 2026 01:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:36 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: tJTAxLwhi+lYxeM69UHMX0lbVvjIyX/QqyNtfRV/itc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:b8:f5:eb:aa:5e:e6:b4:e2:8c:0e:0d:6c:b2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: Jun 13 01:00:36 2026 GMT
            Not After : Jun 14 01:00:36 2026 GMT
        Subject: CN=94de19d41da8032ac21bcf8994a3c41879741560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:ed:ad:fe:08:29:7c:51:26:f2:64:9e:28:
                    f4:4b:5a:c5:fa:98:ef:17:51:37:df:f1:f2:f9:89:
                    12:94:fb:89:60:6b:75:65:c5:5e:19:9b:64:e6:2c:
                    a7:9e:42:d6:61:19:0e:50:a0:64:7e:1f:81:cc:b0:
                    c0:9a:d8:4d:db:c8:8d:10:cd:4d:a0:f1:55:52:6d:
                    7e:6b:ff:8c:92:51:44:0f:82:4b:57:13:66:de:a1:
                    00:d2:0b:c2:b4:89:45:9c:cd:c7:ec:44:2c:dd:ff:
                    c2:d2:4e:8e:b8:03:a4:3c:49:45:7f:bb:16:0e:18:
                    21:fa:e0:0f:8e:4c:7d:a3:6a:02:98:c4:49:e1:c7:
                    44:4a:db:19:d3:d8:12:d4:8a:7c:40:18:63:d7:54:
                    ec:0b:82:33:6a:91:e5:b8:09:d0:ff:7f:bf:5f:c7:
                    7d:4a:22:b1:c8:88:9d:2e:b8:53:50:05:76:7c:80:
                    a0:50:72:9d:47:38:bd:bf:97:9d:2c:5e:6f:b5:11:
                    14:b0:ca:52:32:fe:e6:38:34:76:33:f1:8d:60:36:
                    dd:76:8b:85:20:fc:38:cb:dc:d1:45:9a:f0:35:ef:
                    6d:55:4e:60:e3:8b:65:26:9b:36:69:9e:91:07:2c:
                    c3:23:ba:c1:86:a0:b5:03:70:48:0a:b9:2f:24:51:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DE:19:D4:1D:A8:03:2A:C2:1B:CF:89:94:A3:C4:18:79:74:15:60
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:04:6a:b8:6e:e2:2b:cd:a4:50:e2:34:ad:da:ef:3f:13:
         40:1f:99:fe:42:98:26:7c:b6:03:d5:bd:49:8f:82:9e:71:32:
         26:f1:f4:a3:fb:b7:84:a6:96:34:b1:28:17:fe:b9:72:f6:16:
         89:f2:3a:3c:a0:e2:52:06:72:f0:14:2a:35:3f:8b:25:8c:73:
         28:14:4f:ac:eb:bb:c8:23:d2:4f:b2:8d:77:8c:27:13:91:e5:
         f7:10:88:4d:88:bd:f2:8a:9b:1c:09:c1:67:6b:60:f8:09:25:
         9b:a1:3e:06:90:4c:2c:c9:19:a2:68:f1:93:b9:61:f4:e1:41:
         93:8f:bc:7c:ac:04:0f:91:f9:2f:44:6a:3a:5b:94:f5:84:6f:
         80:28:f8:7d:93:91:47:b5:a0:5b:80:c8:db:d2:87:cb:cb:6c:
         7e:68:c5:5e:b3:27:93:a9:56:9c:7c:ea:c1:66:7e:67:03:25:
         f4:35:5c:00:d6:ce:e2:2a:bd:87:fe:e9:c5:f8:e7:ec:68:0b:
         11:d4:d8:55:a3:7e:48:ca:db:b7:53:58:f0:b0:f6:ae:95:95:
         86:dd:7c:43:5b:e4:77:07:b7:e4:08:a0:94:18:ba:eb:2e:bd:
         5a:34:24:3f:18:c5:67:f3:37:a6:3e:a5:fe:2f:16:ca:9b:39:
         6e:7b:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:24 2026 by rpki-client