Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          BSQYKtle50GfrdBJnsPW3Mr11K7hJob4zsYqRCkbKMY=
Subject key identifier:   18:32:E7:D4:A4:8B:70:F2:71:8D:3E:04:ED:5C:62:7A:E5:72:8D:26
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       019CAB6B5494C05827895ECA66DC8B932C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 22:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:03 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: wKzQUUE2SIuAXIUUaakbUWJ3EApIDEQ52hHBxeh36Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:54:94:c0:58:27:89:5e:ca:66:dc:8b:93:2c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: Mar  1 22:01:03 2026 GMT
            Not After : Mar  2 22:01:03 2026 GMT
        Subject: CN=1832e7d4a48b70f2718d3e04ed5c627ae5728d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:ed:2a:b3:e6:e3:af:60:1f:70:db:97:8b:
                    28:5a:20:1e:2b:02:f9:3e:ca:8f:4d:ab:08:e3:3b:
                    fc:10:ea:61:b5:3c:ad:ef:97:24:00:30:39:2f:93:
                    b3:8b:67:a1:95:07:05:2c:af:94:36:4e:7e:32:23:
                    b7:34:f7:10:2b:cb:60:6f:11:19:43:5e:02:85:00:
                    dc:f9:27:92:79:fb:c0:15:6a:11:4a:87:5c:d5:56:
                    21:d3:0f:b7:b6:98:18:d8:6f:84:e2:6f:8b:91:57:
                    8a:a9:e1:71:f0:b3:22:45:e1:fb:6e:e9:40:2d:02:
                    9d:07:a4:9e:99:f4:5d:82:e4:e4:d1:6c:59:6d:6c:
                    1b:c3:58:36:d0:66:cd:c7:05:e1:7b:2b:0d:88:fd:
                    2c:49:56:c9:17:a4:f7:6c:3b:4c:d1:a5:05:64:75:
                    f5:f3:a9:66:7f:eb:65:bd:f4:64:91:74:63:a8:2d:
                    69:33:8f:d3:a8:34:e0:92:4d:e0:79:89:6b:db:86:
                    a8:b4:11:21:64:43:97:46:8e:3a:2b:f8:1a:72:d6:
                    0a:64:2c:b4:ba:c1:bc:71:e6:9b:4e:90:80:1a:f0:
                    55:ae:1f:2d:67:9c:02:2d:01:05:b1:dd:1b:70:c9:
                    cc:d8:a8:b9:59:84:fb:24:0e:87:cf:cf:9a:b4:95:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:E7:D4:A4:8B:70:F2:71:8D:3E:04:ED:5C:62:7A:E5:72:8D:26
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:18:2b:15:d3:f6:a2:2b:b5:cc:63:20:94:36:6f:c0:ad:77:
         72:bb:29:24:8f:49:c1:cf:07:48:f5:a1:a7:27:ce:4a:e1:bc:
         dd:5c:ec:f7:28:89:bb:e3:00:14:ea:76:53:58:03:46:6d:3a:
         de:5e:3e:b4:8d:49:6c:72:df:74:1b:35:2c:2c:44:3a:2d:d4:
         34:c0:0c:51:ec:fa:17:aa:fa:7c:47:58:65:74:eb:b9:6d:60:
         6c:24:71:45:e8:28:49:bc:0d:89:07:4b:8f:c2:65:0b:9b:48:
         64:50:e3:d2:46:89:e5:8b:fc:30:c5:9b:d9:1c:6e:fe:4a:e2:
         49:1d:68:96:72:f8:e7:c7:15:c5:1f:09:17:f6:69:ed:a8:23:
         ce:86:ea:9f:a6:03:d0:b3:ab:25:11:e6:b1:6d:2b:f2:dc:03:
         45:6a:f2:ad:a6:41:95:aa:19:03:7d:dc:85:6c:78:59:83:20:
         a4:3b:e6:85:6e:76:93:15:6c:3f:e1:13:38:7b:e5:1c:ba:f7:
         3d:60:9f:69:c5:d9:01:d8:34:50:59:a6:ce:16:a0:f5:fe:ed:
         c2:17:3e:20:4b:67:7d:bd:a8:b0:b9:06:2d:e1:6d:6a:01:65:
         cd:dd:68:37:97:4c:6d:1a:57:89:9d:fb:d0:57:ba:af:c7:54:
         9b:5e:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:36 2026 by rpki-client