Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          SyTtJhTVU54Jm+zZMOrCCKUVqck8h7LpU45f8PqWeIE=
Subject key identifier:   D3:3A:44:BC:07:E7:40:B5:93:A4:05:D5:1D:FD:65:E8:EE:F8:67:A6
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       019CAD59E8564518A7C6722F4902AB41EE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 07:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:16 +0000
Files and hashes:         1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
                          2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: HwzAtGQJF/DF5ecFNDXoBqVt/YDv73Uq9JHaEXUExNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:e8:56:45:18:a7:c6:72:2f:49:02:ab:41:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Mar  2 07:01:16 2026 GMT
            Not After : Mar  3 07:01:16 2026 GMT
        Subject: CN=d33a44bc07e740b593a405d51dfd65e8eef867a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:c2:21:58:60:77:3a:f0:63:3d:7c:30:bf:
                    ee:7b:1a:fd:91:43:56:a6:5a:1d:e0:5c:4e:83:f6:
                    1b:25:30:29:ae:e0:23:03:4c:63:4b:78:76:72:b5:
                    51:d6:a5:fc:ba:4d:5f:88:bb:3b:ba:26:c8:90:58:
                    02:81:ce:de:55:d9:06:37:0b:88:39:08:43:83:16:
                    11:42:eb:4e:4a:b6:69:c3:d5:00:75:1f:b8:3c:12:
                    1e:05:80:c0:fb:fb:c8:f5:95:ff:ab:38:96:dd:33:
                    ec:b0:14:7f:69:9b:a3:0b:1d:9a:e1:f3:c7:27:86:
                    6d:c1:ea:6f:ce:51:6b:2d:7c:ea:dd:63:cb:d6:af:
                    a0:5b:0d:12:a8:c3:2c:1c:9d:4a:73:14:73:c1:11:
                    a0:69:df:06:eb:35:78:0d:77:a5:74:6e:fe:0b:53:
                    99:a3:e5:0a:9e:b2:0f:11:88:c1:e3:ea:8e:da:75:
                    85:32:e9:c7:0c:b4:9f:19:8b:b9:59:ed:80:c3:27:
                    af:76:bf:97:30:4b:b8:6e:df:96:e5:6d:69:c6:e1:
                    8b:a0:33:cb:fa:98:a1:3a:10:2f:2d:dd:de:f4:c7:
                    f5:e4:d3:fd:d5:1d:66:cd:4b:e0:0e:17:05:6a:7b:
                    90:53:c2:3d:78:8b:ea:9d:c2:3c:20:4c:57:10:0b:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3A:44:BC:07:E7:40:B5:93:A4:05:D5:1D:FD:65:E8:EE:F8:67:A6
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:be:21:53:36:7a:6d:99:f6:8b:4b:b8:64:63:ab:70:22:
         6f:44:02:ce:77:e8:b1:2c:f1:c7:cc:2e:45:04:04:e9:21:ef:
         57:70:56:2f:43:9b:a1:5b:9b:79:a9:75:07:1d:b2:c0:5b:4c:
         0c:4d:fe:d0:2a:50:50:37:2b:37:04:96:c7:b3:5a:72:8d:3a:
         80:b6:15:81:5b:3c:c1:c7:0a:a9:8c:aa:6a:d6:80:0e:1b:94:
         c7:56:dc:0c:83:16:81:be:96:6d:52:8d:a3:0a:ca:72:78:29:
         36:da:bd:be:d3:a0:c2:ca:58:32:b8:08:3e:6c:b7:a0:39:fb:
         08:dd:56:04:e1:88:79:25:0c:ad:55:b5:aa:a5:eb:6c:de:2a:
         80:16:4a:51:21:d0:84:84:49:4f:be:16:8a:ec:b8:2a:24:99:
         b7:9d:37:bc:4f:34:75:d4:e7:15:77:ea:16:78:f3:36:40:5f:
         85:10:e5:10:ef:2c:1c:32:1e:a3:c1:be:dc:21:8e:db:4b:81:
         67:dd:78:a8:23:0f:bd:00:85:6e:f0:39:46:68:66:71:f1:c6:
         b8:2b:49:ff:3c:cc:9f:4e:55:bd:14:95:b9:71:4f:8c:77:b9:
         95:03:a4:55:56:5a:11:ce:d8:ba:48:c2:b0:46:23:dc:44:ff:
         db:11:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:33 2026 by rpki-client