Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          +u0uKo5VVk2H0bbWMfpUyKpEH3KAzrxYTuuKRQQeHVY=
Subject key identifier:   95:EB:06:BF:E4:18:A9:D1:30:B4:F9:03:4F:D1:71:88:3E:B1:D7:A2
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       019FACACF49AE5F6CBB5DC934D4A9B7D4837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          04D2
Signing time:             Wed 29 Jul 2026 07:00:43 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:43 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:43 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: jTxpe7+grR8FxLbd1Bn2rSqyds1o6gu1ED35aheqF1A=)
                          2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:f4:9a:e5:f6:cb:b5:dc:93:4d:4a:9b:7d:48:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Jul 29 07:00:43 2026 GMT
            Not After : Jul 30 07:00:43 2026 GMT
        Subject: CN=95eb06bfe418a9d130b4f9034fd171883eb1d7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:44:d3:25:11:61:1e:a3:2c:04:1d:32:74:
                    30:82:88:1d:06:b1:67:22:6d:9b:ec:f9:94:d5:ca:
                    15:c8:f0:5d:33:cd:fc:76:da:f3:c3:9d:54:58:de:
                    3e:6e:51:4a:da:96:ad:c4:df:39:53:99:b3:7f:28:
                    ce:62:0d:fa:59:87:ab:c2:9a:1d:1d:3b:98:db:23:
                    e9:db:37:83:e0:42:d4:f7:09:68:ef:df:fb:0a:ca:
                    75:09:4f:e3:33:99:d0:3b:85:76:de:66:5f:ef:d3:
                    d1:7c:f7:af:95:19:0c:0b:bb:0e:a2:e0:79:8b:0a:
                    ec:9c:f2:8d:4d:ac:e0:75:34:46:2f:67:a4:05:e6:
                    f8:54:4f:03:c6:bf:cf:a9:d9:32:0b:25:ce:cd:9a:
                    b9:7b:d9:3a:f3:3c:f5:06:8a:db:e8:bc:69:e5:17:
                    e5:bd:0e:44:d0:bd:b0:a6:c3:60:98:da:c6:f8:17:
                    e3:13:4a:92:30:65:79:a5:d1:73:94:d0:ff:65:c7:
                    30:30:81:ec:59:97:5a:0e:b0:bd:c5:6a:50:77:18:
                    8a:be:80:d5:7c:d0:e9:b1:18:dc:fb:a8:b9:76:6c:
                    ed:32:c0:5f:f8:48:06:fd:6f:0c:41:a9:25:5d:51:
                    c5:83:15:6b:ad:3c:dc:05:fb:4d:31:d3:77:9b:1f:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EB:06:BF:E4:18:A9:D1:30:B4:F9:03:4F:D1:71:88:3E:B1:D7:A2
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:62:10:e6:f4:f2:1d:d9:60:b5:9e:37:ed:63:c4:19:ba:19:
         c1:7f:48:7b:0f:e6:73:b7:48:d6:2b:a8:18:10:7f:b9:c5:ed:
         10:b3:af:9c:dd:b6:a9:ff:92:c7:fe:ba:80:bb:aa:12:01:3f:
         37:e7:08:60:ff:14:24:cf:79:ce:74:72:96:60:fe:fb:62:4b:
         d2:be:16:b9:4f:c1:7e:e6:6b:69:e4:e3:bf:60:7d:a9:6a:59:
         09:74:63:34:33:c6:d5:83:ea:d1:3a:15:b6:0a:76:fc:89:be:
         0e:6a:ce:dc:62:f8:5b:e1:bc:fd:fa:7f:ec:3c:c8:53:e6:90:
         a4:0f:6f:25:3d:cd:81:3f:eb:13:ea:df:ae:81:8d:ce:70:93:
         d7:fd:ed:05:51:89:ff:b4:f7:28:48:7c:02:6f:44:af:d4:10:
         39:5f:0d:9a:12:13:b8:d4:42:7f:87:07:46:50:df:f1:27:68:
         40:68:44:c1:a1:1b:ae:8e:7f:5e:14:1a:48:94:6e:3a:d5:45:
         00:25:8e:e8:68:2a:84:1e:4d:5a:e2:e7:6e:5f:f0:17:15:61:
         f3:60:60:12:42:b1:0e:0d:76:ff:24:66:32:96:c3:47:20:43:
         69:5c:94:0c:19:9a:d2:62:5c:6f:2e:3a:b7:6f:93:68:df:ca:
         fc:11:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:51:39 2026 by rpki-client