Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File:                     BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier:          FH6/7IFBcqNzhJpHjASbtfM1zXcoVXDxSc7MeCp7CsI=
Subject key identifier:   11:46:54:92:0B:E5:AD:19:FD:AD:C6:FA:99:E6:10:0D:16:30:6E:C5
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer:       /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial:       019E1D90F71391CD3CF27662AB394EA3EC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number:          0242
Signing time:             Tue 12 May 2026 19:01:40 +0000
Manifest this update:     Tue 12 May 2026 19:01:40 +0000
Manifest next update:     Wed 13 May 2026 19:01:40 +0000
Files and hashes:         1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: 3RCBeyW9TlLm+4fwA1xMLPHtFJWQbE4Tkfmrrubpb1A=)
                          2: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:f7:13:91:cd:3c:f2:76:62:ab:39:4e:a3:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
        Validity
            Not Before: May 12 19:01:40 2026 GMT
            Not After : May 13 19:01:40 2026 GMT
        Subject: CN=114654920be5ad19fdadc6fa99e6100d16306ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:ab:35:8e:43:d8:fb:db:3e:b7:97:08:4b:
                    5d:4e:60:6a:82:60:0a:4f:60:15:79:a9:4a:58:de:
                    e1:ab:7f:3c:7a:e1:4c:b2:eb:fb:57:97:46:5c:00:
                    a5:b8:99:ec:4b:df:18:70:4e:93:97:c7:75:67:43:
                    e4:d4:9c:30:07:51:19:c2:b4:eb:75:96:3c:74:05:
                    d8:a8:36:b8:1a:b7:de:b5:2d:ba:30:60:fa:30:32:
                    23:7d:55:51:07:0e:0a:26:ef:c0:de:33:c5:87:6d:
                    10:01:a2:ee:47:77:5f:ec:4e:0c:6a:9e:2f:45:80:
                    32:29:85:76:3f:68:62:87:79:39:8d:f0:b0:f1:62:
                    bf:b4:2c:ba:fc:68:57:e8:ed:d5:79:d8:9d:4e:6e:
                    8c:c9:57:e3:a7:31:57:ba:28:36:74:90:c4:8d:69:
                    01:3a:56:67:d0:48:aa:ca:ea:59:17:ef:4a:65:cc:
                    03:88:76:f4:2d:a4:cb:41:3f:68:ef:9d:80:ac:b7:
                    71:b3:a0:31:10:e7:22:4a:b6:4f:a0:71:62:b4:5f:
                    25:e1:e7:8b:eb:d7:5d:0c:55:67:88:c8:aa:34:c4:
                    2b:f9:9a:55:d6:e5:70:bf:57:24:c6:a6:a2:b6:d8:
                    be:9c:5d:9a:e7:95:be:49:16:70:63:9e:63:87:6f:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:46:54:92:0B:E5:AD:19:FD:AD:C6:FA:99:E6:10:0D:16:30:6E:C5
            X509v3 Authority Key Identifier:
                keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:af:8c:09:7c:b1:b8:84:97:88:a9:de:69:78:8e:69:94:78:
         77:02:f3:29:f1:21:87:65:25:62:44:cc:9e:be:ec:96:13:40:
         8a:11:44:5c:c0:93:35:63:93:eb:10:ba:dc:af:9d:8b:40:f4:
         59:de:9c:1a:51:18:d0:08:ad:3f:e3:bb:e4:70:9f:c1:46:28:
         53:9c:0f:b0:7c:4f:5c:dd:45:16:0f:51:1f:d3:c3:60:ac:d2:
         8d:7d:ae:2b:94:56:6d:e1:f2:80:f7:c9:0f:b7:42:9a:6e:48:
         26:aa:bb:a1:31:93:aa:c5:b6:97:51:00:58:19:74:fc:22:39:
         40:e1:8b:36:3b:ce:5d:17:fa:3a:a9:f2:a9:76:30:e8:68:de:
         66:19:b9:41:7e:d2:30:7b:92:c5:eb:b0:7b:c5:56:0f:02:58:
         f5:3e:d7:97:0a:85:1c:d0:e5:6e:5a:43:1d:62:29:7c:9a:2c:
         da:ca:53:84:1a:35:c1:14:ce:e9:0b:cb:f4:31:6e:50:61:e0:
         96:e4:e4:5b:77:1e:4a:15:91:44:2c:66:9d:36:69:c6:92:0a:
         c8:9b:f5:f4:81:06:44:25:5b:23:71:2a:e8:3d:b4:81:b4:c1:
         48:09:27:d6:57:3c:58:91:56:55:7a:e4:95:7d:7d:43:70:5a:
         52:51:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:56 2026 by rpki-client