Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File:                     BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier:          OiUs89+wYqXu+nWubKY7HLlIPOtSQ022S/k/UTg9i90=
Subject key identifier:   CC:54:B0:2F:F6:49:50:F8:83:03:F7:25:AD:A1:D2:0C:A2:9D:B7:02
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer:       /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial:       01A0ED7898F66563269AE06C66DE0E802096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number:          0A19
Signing time:             Tue 29 Sep 2026 14:01:38 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:38 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:38 +0000
Files and hashes:         1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
                          2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
                          3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: NL3Ry0YmLmOo5XbQEpAnKeKfE6FnrWJGi9Hz+aCBIyk=)
                          4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:98:f6:65:63:26:9a:e0:6c:66:de:0e:80:20:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
        Validity
            Not Before: Sep 29 14:01:38 2026 GMT
            Not After : Sep 30 14:01:38 2026 GMT
        Subject: CN=cc54b02ff64950f88303f725ada1d20ca29db702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:f0:20:50:2a:5e:ef:90:7d:ca:09:61:60:
                    dd:12:0d:87:d7:44:48:06:34:f1:cc:f7:ec:38:73:
                    cd:6f:17:9b:91:e1:84:53:89:7e:fa:b8:88:d8:6f:
                    ad:1b:24:e9:c4:df:a4:5c:dd:1c:a5:0b:bb:a8:04:
                    d0:88:e4:fc:c7:18:c0:ea:80:3f:74:c6:08:cb:32:
                    5f:74:75:88:8c:b6:94:1b:51:c2:24:b2:69:28:e9:
                    c1:e4:57:d4:04:76:3e:55:5b:38:24:67:f8:65:c8:
                    bd:30:f6:37:1c:63:b0:cf:ff:78:c1:ca:1a:47:4a:
                    f4:83:42:61:31:3f:31:5f:40:2c:b6:1a:8f:4c:58:
                    74:9b:ec:6d:5f:6e:89:78:09:60:e5:96:1f:85:4b:
                    d9:50:47:a9:ac:a4:60:b3:0c:fe:97:e2:66:df:64:
                    9f:76:44:6f:b1:fe:4d:24:98:a7:8f:aa:a4:3f:86:
                    7f:3c:83:df:39:5d:e8:35:5d:5c:27:af:c1:6e:f1:
                    69:49:1e:e3:ae:ba:7f:cf:6d:f5:4c:ed:26:b8:bd:
                    f9:ea:d9:42:a4:25:20:cd:f0:56:9f:6a:7f:b0:44:
                    f6:89:d5:9f:98:2d:4b:04:d2:88:ad:bc:ea:80:cc:
                    5b:6d:09:29:0b:7b:ee:9c:4d:b2:4b:13:d5:77:f4:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:B0:2F:F6:49:50:F8:83:03:F7:25:AD:A1:D2:0C:A2:9D:B7:02
            X509v3 Authority Key Identifier:
                keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:61:a1:a9:4e:55:82:34:a7:67:f0:7d:b7:22:f8:bc:09:8b:
         9b:34:97:38:fa:81:13:ca:2c:6a:af:31:3e:8d:0d:20:77:f6:
         ae:66:4f:ad:76:62:09:9e:80:7d:7c:ba:cb:d0:9b:c2:90:79:
         4b:d6:5f:94:51:08:42:84:b9:d0:05:26:ca:fc:d7:65:94:30:
         ad:fa:2e:2c:25:20:47:30:d4:e5:86:cf:fd:3b:98:f3:32:e0:
         ce:1d:51:cb:9b:ad:8e:ab:66:61:3a:3e:f3:1f:1d:a2:17:e7:
         2b:d1:54:f0:9f:d9:9e:bc:59:cd:6d:bb:84:7d:b0:cd:12:02:
         13:29:ed:de:3d:a1:cc:d9:3e:c9:c1:14:cd:b9:0f:4f:3a:85:
         d7:6a:2b:3e:ec:d0:4d:23:a8:de:80:18:f8:30:4a:e6:f5:86:
         bd:9e:7c:a8:72:11:a3:e2:70:fd:51:3e:e9:47:1e:3f:92:3e:
         ee:3d:c9:8c:b8:69:9f:62:7b:e0:84:bf:2e:37:00:95:23:10:
         ba:95:74:60:f8:71:fb:9b:7d:db:7e:50:90:33:c3:14:7e:9e:
         51:78:2f:8b:60:b7:43:17:b5:ba:69:5f:f6:cc:31:15:43:ee:
         16:13:e3:d5:e6:fb:1a:bc:96:99:12:04:b0:c9:34:30:3a:fa:
         9d:61:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:06:10 2026 by rpki-client