Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          hYTm/tgfodgtLjJTsIUZ6IzQyubbRB1adbv0yKXIyT8=
Subject key identifier:   D0:7F:3A:FC:26:DD:53:56:D1:69:33:44:6E:C0:87:AA:17:56:6C:49
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       01A0DB3BA71BE88014AE4C76F9550835DEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          1A75
Signing time:             Sat 26 Sep 2026 01:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 01:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:54 +0000
Files and hashes:         1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
                          2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: qN3EM8lhi/g0Pii7y2sgQDwJMbOb9NNmzKci/sw2e4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3b:a7:1b:e8:80:14:ae:4c:76:f9:55:08:35:de:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Sep 26 01:01:54 2026 GMT
            Not After : Sep 27 01:01:54 2026 GMT
        Subject: CN=d07f3afc26dd5356d16933446ec087aa17566c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:f0:b5:50:ae:b3:f8:78:29:dd:9e:a5:6e:
                    6d:4a:2d:36:4b:09:e4:d3:46:37:6c:82:94:d6:77:
                    b4:ff:9f:ca:95:b5:18:fd:5a:a0:85:9e:85:9a:f3:
                    ad:6d:89:e1:8a:83:6d:92:fd:e6:c4:27:b8:07:81:
                    e1:4f:7e:35:ac:a6:6a:61:24:b0:25:37:9e:e4:1e:
                    18:b1:4a:02:04:9b:c0:70:9c:7a:dd:f1:3b:07:3c:
                    2a:02:58:2c:79:b5:f7:08:e4:f8:2b:1b:b5:02:a9:
                    1b:26:21:9d:42:31:6d:89:34:77:3e:e2:5e:c6:82:
                    4c:5f:ee:69:fe:4b:49:ce:0f:86:1e:02:a1:cf:b5:
                    83:86:08:0a:f5:47:60:27:8a:38:a4:cb:58:13:71:
                    8f:3e:8b:9d:e3:6f:c4:80:89:d0:1e:1a:e5:17:26:
                    16:e2:3b:d6:97:be:12:17:6a:16:50:22:d3:31:ab:
                    61:42:ee:bd:42:75:cb:1e:84:18:42:8e:26:3e:66:
                    24:42:eb:ba:6f:26:d3:fc:df:ca:53:c4:67:9e:3b:
                    e9:50:26:74:62:04:c3:0b:a4:76:94:3c:f9:8b:08:
                    7e:c1:a5:75:90:85:33:b1:82:d1:f8:7e:6e:f3:31:
                    53:04:90:ae:c3:f2:0b:ae:3d:27:08:b1:db:45:82:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:3A:FC:26:DD:53:56:D1:69:33:44:6E:C0:87:AA:17:56:6C:49
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:47:ba:91:cf:d5:d4:9f:18:98:83:df:cc:1e:1e:7c:a5:60:
         27:1b:42:7b:6d:88:0a:b1:c1:a6:f9:17:82:51:a7:2c:70:4d:
         74:e7:82:0a:54:31:b5:68:fe:b2:26:a0:ba:f8:fe:48:e6:91:
         90:1a:81:1f:f7:34:1d:f7:c2:ac:2c:5e:49:ff:58:2e:13:8a:
         ac:5c:32:5f:b4:27:36:0b:94:0e:16:b2:6c:9c:b5:a6:35:90:
         e5:68:a2:20:e8:d0:bc:ef:02:17:0d:b3:ff:a3:21:35:00:a0:
         1e:f9:03:d8:04:ca:d6:f4:ca:38:e0:d8:7a:ca:a9:f9:b9:c8:
         7e:3d:06:1b:47:65:90:8f:e8:f8:cd:86:e9:bc:e0:10:2a:53:
         54:70:a7:03:50:0d:2b:60:8f:44:2e:28:08:d1:35:80:7b:58:
         3c:ae:10:ed:3a:df:fe:cf:45:b2:78:42:77:90:2b:6e:6e:d0:
         e8:6d:fe:1e:52:36:8d:3b:4d:84:9b:61:3e:b1:eb:c6:f3:46:
         52:e9:c1:4b:7d:00:4b:9a:c9:51:92:0f:95:a4:df:e2:67:43:
         27:66:29:b1:9b:62:fd:39:53:3b:83:93:df:64:3c:40:0e:94:
         23:83:14:32:9e:97:60:0e:76:d6:b4:63:6e:02:15:3d:9f:b7:
         70:96:0d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:38:14 2026 by rpki-client