Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          bGLJtETbWGg+9Hec/g8t8u2/ORj4KybJ4AaRuOtO3wI=
Subject key identifier:   20:C5:7E:25:D9:77:8D:E8:63:83:45:05:EE:91:3F:FE:E7:9C:EB:D9
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       019EC300223BD160AFCB7DBD6B7233251201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          0459
Signing time:             Sat 13 Jun 2026 22:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:26 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: SrN9pLabbc/Pn4ruoX7khpGgqZLnCbBbnIHXzf2f9hY=)
                          2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:22:3b:d1:60:af:cb:7d:bd:6b:72:33:25:12:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Jun 13 22:00:26 2026 GMT
            Not After : Jun 14 22:00:26 2026 GMT
        Subject: CN=20c57e25d9778de863834505ee913ffee79cebd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:89:ca:2c:51:4e:35:bd:17:8f:ec:28:c6:
                    a2:d9:17:41:0d:8f:d9:8f:e9:30:4d:eb:11:72:bf:
                    50:72:88:f6:13:74:cc:33:8d:8f:5a:1c:00:6e:43:
                    97:77:8d:c9:60:e3:66:c0:37:2c:e0:ca:69:6f:77:
                    70:bc:44:4f:f2:27:fb:74:e8:e6:7b:69:55:ba:ec:
                    10:58:0e:23:32:c0:19:5b:e8:8a:e9:1a:85:23:08:
                    e9:c0:44:10:e0:f3:a0:25:21:9f:d7:24:b0:8f:78:
                    eb:89:bf:3e:a4:bf:ed:51:34:4f:83:95:63:97:09:
                    f2:db:09:80:4c:80:56:c7:f1:11:ee:d0:47:ec:12:
                    e0:22:ef:5b:f7:03:0f:54:38:c3:43:02:58:7f:02:
                    47:83:c7:3f:8b:8b:47:c5:22:45:dc:c5:f3:a3:0d:
                    a7:9c:a2:7a:15:aa:14:96:39:5f:18:be:f3:75:0e:
                    b5:2d:c0:5f:65:e6:89:7e:0b:4a:f7:af:3d:69:30:
                    dc:d3:59:99:aa:4a:4e:8d:fd:b3:b1:6d:0c:cc:7d:
                    91:96:68:5e:1f:e8:8b:f5:17:90:6c:12:bf:23:b7:
                    82:d6:6c:36:86:e1:66:1d:99:44:9f:8a:48:9f:22:
                    3d:ca:99:cd:7f:be:fa:9f:0f:0a:91:40:68:42:11:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:7E:25:D9:77:8D:E8:63:83:45:05:EE:91:3F:FE:E7:9C:EB:D9
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e5:0a:be:9f:62:b1:f3:d3:99:f5:07:cf:6e:dc:4c:f5:cd:
         83:b5:cc:9e:c5:be:cd:83:31:7d:98:79:97:2c:a4:2e:cf:56:
         52:1f:dd:e2:f9:c6:4c:e3:86:53:2a:30:67:9b:f1:11:82:2b:
         f5:fd:3b:c7:69:57:1c:2b:64:da:38:95:37:c4:3b:be:32:12:
         1c:c3:f6:19:2a:73:79:10:6a:00:f0:eb:da:2c:b5:29:da:d7:
         ee:d4:55:82:fc:1a:6d:d2:74:d2:5b:0b:ab:3c:60:31:d3:12:
         68:ba:44:b1:34:63:6a:d6:96:24:de:f7:7d:c0:34:f6:b7:2e:
         c3:23:c9:8b:45:65:ea:84:9b:7a:04:6d:d5:84:74:22:bc:c4:
         7a:81:2d:46:c1:07:91:f2:36:19:41:bd:4c:d4:45:d8:e0:2d:
         3b:0a:33:de:fa:13:1f:b3:fa:06:0a:eb:59:71:fb:4e:f2:b9:
         ac:59:5a:67:e1:86:1d:a4:52:28:54:09:53:c3:bb:e8:78:4f:
         b3:db:ba:ce:d8:98:7c:3b:d5:0a:57:f5:6a:c2:b8:1e:b8:43:
         02:f6:68:fd:e7:65:4c:8c:42:9a:62:00:e5:13:8c:23:df:3d:
         3f:d5:aa:bf:2c:2e:24:26:b0:1a:11:15:ff:c2:dd:76:29:86:
         50:19:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:15 2026 by rpki-client