Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          Zu+70Y+TkS5g3c23E3J36X1ZCq70B4tot5sv5pg3CRg=
Subject key identifier:   F0:60:81:21:BA:89:4F:95:83:53:2C:19:15:02:09:62:C4:55:57:14
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       019E1E35F20742E12AD2C6761314CAED006C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 22:01:52 +0000
Manifest this update:     Tue 12 May 2026 22:01:52 +0000
Manifest next update:     Wed 13 May 2026 22:01:52 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: Aj1Py8AEsfO07VASR8DFzkuhZa9XJ2cP2vh1IklK7JI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:f2:07:42:e1:2a:d2:c6:76:13:14:ca:ed:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: May 12 22:01:52 2026 GMT
            Not After : May 13 22:01:52 2026 GMT
        Subject: CN=f0608121ba894f9583532c1915020962c4555714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:50:2b:fb:44:a3:7f:e3:2d:2c:7d:79:0f:
                    5f:cc:c3:45:64:66:c7:67:1a:6c:63:13:f8:2e:12:
                    a8:50:92:03:45:dc:30:0b:2e:8b:b9:8d:21:78:84:
                    a6:89:30:c8:e8:aa:58:81:fe:9f:c2:3e:8a:cd:7d:
                    84:e5:a7:8e:bb:ce:11:4d:1f:a0:03:00:46:d8:e4:
                    96:fc:0e:bf:e5:38:5d:71:5c:a4:c5:5f:fd:32:b1:
                    88:63:0d:4a:13:70:7d:7a:20:04:dc:8f:e5:ac:5f:
                    d3:71:44:2c:84:a5:49:f6:9d:ab:62:f3:04:9e:b4:
                    b9:3f:ca:15:69:61:8d:3b:5b:ef:79:0a:4c:6a:ec:
                    52:57:0c:08:a1:c0:a2:63:77:9f:81:a3:62:93:b6:
                    93:32:28:cc:c8:22:b3:ae:a2:3f:77:6f:58:16:86:
                    5e:23:fb:f0:10:40:3d:0a:9a:79:85:87:60:ad:62:
                    84:42:72:8d:6a:f1:b4:3b:1d:32:b3:75:e4:3d:27:
                    d7:d3:21:7c:e6:cc:2e:3b:c7:13:2d:e7:53:a4:cb:
                    11:91:9e:08:57:a6:00:93:be:5d:f4:ab:3d:96:84:
                    5c:8e:3d:43:48:44:49:ba:62:6b:89:23:9a:2f:64:
                    6d:52:39:27:2b:8d:95:8d:ba:9e:aa:7f:6b:97:3d:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:81:21:BA:89:4F:95:83:53:2C:19:15:02:09:62:C4:55:57:14
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:79:4d:e9:cc:07:58:28:af:94:b1:1a:d2:86:64:e0:ca:
         b2:09:d0:da:2e:9f:f8:1d:e4:ba:1c:e6:84:67:08:43:bb:20:
         5e:9f:3a:b0:a1:29:4d:f3:94:94:8a:97:23:f1:80:e1:88:9b:
         c6:b4:ad:97:63:cf:0a:fd:ea:3c:48:78:31:10:29:52:90:91:
         8c:68:46:3a:f4:b7:99:83:ec:1f:94:74:93:60:d3:b8:7f:60:
         a9:d6:de:83:e9:22:3b:1a:48:45:4b:92:a2:8d:92:23:ef:da:
         5b:b5:bd:cc:0f:d7:0f:ec:ed:3a:8e:79:9b:af:0e:ab:9c:68:
         03:37:39:ec:72:1b:f7:7d:56:a7:2d:47:6c:56:0b:dc:fb:8c:
         71:3e:3a:69:80:9f:7b:2d:c0:1c:52:5c:eb:10:5b:4c:7b:3b:
         59:8a:59:65:f8:59:c8:49:e8:6e:8b:50:16:c2:50:8e:1f:c8:
         a7:97:b9:d4:86:7f:5d:42:c8:a2:41:b4:82:23:c8:63:4b:de:
         b2:ec:b5:4e:8d:d5:34:29:10:c1:e4:d1:aa:26:1e:01:b2:4d:
         9c:33:ae:a2:46:c7:dc:e0:ec:96:d0:d6:41:bc:20:ba:21:f1:
         63:f8:4c:24:1f:64:cd:b9:4e:79:d9:5d:92:38:6b:3a:27:a2:
         38:fd:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:14 2026 by rpki-client