Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File:                     BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier:          kdK0T2sUEKb27hs8d33DRNi3X43BhSSk5A1o3o7zbqU=
Subject key identifier:   6B:6E:62:FC:D3:C6:A4:8F:6E:C8:8E:68:5B:8A:33:29:9E:E0:4B:6D
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer:       /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial:       019FAC3F1C658741D48ED511DA7EC237ADBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number:          07E6
Signing time:             Wed 29 Jul 2026 05:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:44 +0000
Files and hashes:         1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 3lTvF1N9+bT0/g3zfiuk5yfrWCDZHb4+My/Scqe5v78=)
                          2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:1c:65:87:41:d4:8e:d5:11:da:7e:c2:37:ad:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
        Validity
            Not Before: Jul 29 05:00:44 2026 GMT
            Not After : Jul 30 05:00:44 2026 GMT
        Subject: CN=6b6e62fcd3c6a48f6ec88e685b8a33299ee04b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:1b:b5:2a:62:56:9a:9e:98:d2:79:63:df:
                    03:a8:c8:59:28:01:48:f7:77:f8:22:49:da:90:cf:
                    19:2b:85:83:0b:e5:83:77:c5:00:e8:ed:ef:e9:67:
                    97:b5:c4:e7:6e:20:6e:0a:30:2f:be:a9:ac:5d:0b:
                    4d:50:b0:68:1a:f3:aa:39:e2:40:76:0f:a4:44:c3:
                    0c:d3:f5:85:b9:b4:c0:23:85:8e:0f:e4:f8:fb:42:
                    73:c8:81:89:69:a8:2e:5e:49:75:91:39:05:ce:cc:
                    fd:2f:a8:b5:e6:0f:da:ab:a6:e4:dd:95:44:96:a6:
                    0f:4e:04:99:9d:c1:e9:4c:30:05:d6:9d:62:44:1e:
                    bd:16:ee:5e:55:0b:47:d3:2b:68:7d:65:39:35:71:
                    a0:28:b1:72:aa:93:42:1d:cd:1a:c0:35:8b:7f:e5:
                    f5:4f:4d:80:0a:f8:f7:ff:bc:82:6b:3b:52:39:25:
                    4d:7b:d5:75:d3:40:29:99:b4:20:ac:1d:9b:57:71:
                    9d:38:e0:51:4a:cf:e9:1c:0b:29:af:9f:08:f0:3d:
                    37:8e:7b:33:4c:ec:c2:66:b3:7f:9d:e6:40:8f:1a:
                    f0:62:32:df:24:f6:6c:dc:c0:fd:39:6f:b4:f9:9f:
                    6c:68:2b:6c:56:f3:93:bf:ad:ac:03:fb:7f:fa:14:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6E:62:FC:D3:C6:A4:8F:6E:C8:8E:68:5B:8A:33:29:9E:E0:4B:6D
            X509v3 Authority Key Identifier:
                keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:97:46:32:05:02:dd:03:a6:3d:4d:9a:f6:04:d1:37:e6:b0:
         c4:21:55:41:6c:9a:1f:10:4c:e7:35:24:3a:fc:63:d4:57:79:
         67:58:ae:a9:f0:c1:f5:0d:ca:6c:20:e9:da:b8:7b:a7:ed:0a:
         e7:a7:ef:95:22:e7:08:31:29:06:9f:00:61:e6:d4:e7:ec:68:
         d8:6b:aa:cb:d5:fe:2c:65:7a:8b:a1:4a:d4:a1:cd:b9:3e:94:
         ce:63:91:f3:0b:fe:ca:2a:90:c4:e6:b5:50:0d:19:7b:af:c1:
         ce:92:56:12:a5:5c:75:45:0c:ab:56:3b:bf:ee:37:3a:25:8e:
         f9:d0:3c:c8:4e:3c:2d:1d:8d:63:6a:4b:27:3f:63:0d:bb:c4:
         1d:74:26:01:1f:50:3e:06:aa:be:15:48:07:0d:a0:44:84:1e:
         fe:5a:74:4f:68:95:94:e4:4b:87:c7:a6:69:3a:66:ec:43:6a:
         7f:68:33:6f:a6:5e:01:0f:07:a1:a2:22:e3:4e:6c:d6:66:7d:
         63:d4:10:57:f0:57:d0:c2:6d:d4:04:f9:34:c2:1c:24:71:65:
         bb:32:7e:9e:1c:da:bf:cc:70:32:63:d8:88:2a:73:27:3d:47:
         f8:a7:21:6a:fd:c9:a6:e0:87:db:4b:41:eb:a4:f1:e6:c5:d3:
         9a:00:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:25 2026 by rpki-client