Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          eC9zK7C4MvuIyfuM3JCVQjEyDlfCs7FN2l9gtoMDmUg=
Subject key identifier:   0A:5E:27:66:7F:8F:DB:A0:26:23:3B:AC:DB:CA:7C:D9:D1:A2:2B:48
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       019D2704178DB1A2AA459E010431FA3FE864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 22:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:12 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: lWEiy2w+9jHkHY57rgKmcx9P/BYRPQsR15z63XO6+BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:17:8d:b1:a2:aa:45:9e:01:04:31:fa:3f:e8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: Mar 25 22:01:12 2026 GMT
            Not After : Mar 26 22:01:12 2026 GMT
        Subject: CN=0a5e27667f8fdba026233bacdbca7cd9d1a22b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:c2:43:9a:34:58:8f:66:5e:c8:1d:7f:5a:
                    2e:68:c5:ab:1a:f8:61:36:85:d7:22:f5:de:b1:b4:
                    98:81:05:f9:4a:f7:f2:97:2d:8a:e9:37:9e:a4:cb:
                    5d:b6:53:81:05:2b:cb:96:d3:8b:c3:46:5d:52:8d:
                    5e:ef:a7:0c:2d:b2:40:b0:e8:a1:cc:7c:fc:5c:26:
                    25:2a:74:5f:bc:fc:30:24:a4:b2:15:53:b9:76:6b:
                    5f:f9:41:2d:e7:1c:a8:1c:26:33:96:1d:77:33:25:
                    f3:53:23:bf:dc:24:d7:e2:10:5a:84:1b:62:08:83:
                    25:c6:f4:e9:55:24:89:3e:6a:83:ba:76:c4:70:9d:
                    b3:42:94:25:ae:9f:f3:e5:18:0c:42:99:26:d3:6d:
                    1d:7a:60:66:21:73:02:7d:03:aa:11:c5:55:0f:1d:
                    99:e3:c6:c2:25:c8:65:b0:a0:e7:8e:0a:9d:ff:a2:
                    bd:46:9b:b4:00:6c:ea:98:da:16:f3:26:16:c4:21:
                    b2:f3:9c:79:db:9e:35:20:b8:45:76:fd:43:e3:80:
                    cd:02:1b:29:aa:c2:d4:31:14:10:b0:9c:9e:83:f0:
                    14:63:a5:4d:a0:f4:e9:18:58:af:e5:0a:a2:1e:6a:
                    f9:ed:77:9e:a4:2d:8f:e4:05:9b:25:57:1b:68:ee:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:27:66:7F:8F:DB:A0:26:23:3B:AC:DB:CA:7C:D9:D1:A2:2B:48
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:ba:db:f3:59:6d:d8:77:5c:d6:23:d7:d6:21:61:bd:75:
         49:a9:ea:9e:89:0e:22:ea:9d:00:ee:72:23:ef:cb:c9:88:af:
         e9:5b:e6:ed:07:d8:0e:ec:a5:c0:19:2b:75:1f:18:b0:30:c5:
         b3:56:61:54:45:00:d4:f0:f5:50:86:8b:c7:af:ad:e9:63:e3:
         db:dc:1f:ac:ba:52:f9:60:dc:b5:47:5f:3a:59:67:fa:92:e2:
         28:61:a4:a0:a8:8c:ac:a6:2e:de:fb:9e:76:d4:d0:18:5b:d4:
         d8:13:86:be:49:a7:51:91:90:23:e2:84:95:85:10:7b:6c:12:
         cb:8b:af:8d:95:25:a7:4b:f6:81:86:3c:1b:3c:d8:4e:51:51:
         4d:6f:56:bc:f4:94:aa:aa:dd:4e:57:aa:6b:f6:55:f4:f4:09:
         9d:24:3a:75:d9:63:19:7e:2c:7a:99:10:fc:8a:f2:99:93:61:
         8b:de:50:a4:ad:01:69:62:19:ed:0c:0c:ce:5f:fb:d3:79:0e:
         69:d0:73:75:6c:45:0d:b1:4f:8e:08:c5:4d:be:47:52:f3:b6:
         e5:84:7b:25:25:d1:01:1f:4d:1f:f2:0b:d3:f6:77:36:49:84:
         a7:9e:09:d5:54:55:26:a9:ab:cb:cf:f6:a8:0c:ac:65:dc:86:
         fc:11:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:33 2026 by rpki-client