Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          ET3ga9clDU5KQ8FT921Flm/J0alTNBHcoM4qihyFvDs=
Subject key identifier:   49:1D:2A:B7:4C:2D:5C:E0:00:C5:B2:18:40:C4:48:E9:A8:34:F4:00
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       01A00101BD39195EDD8FA18C413C0E48F7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 16:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:26 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: cUsoC2rR7GUtjDFDjIxcVogAxEpMkqNjsJ2547SR4eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:bd:39:19:5e:dd:8f:a1:8c:41:3c:0e:48:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: Aug 14 16:01:26 2026 GMT
            Not After : Aug 15 16:01:26 2026 GMT
        Subject: CN=491d2ab74c2d5ce000c5b21840c448e9a834f400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:a3:66:4a:62:fd:81:75:a7:f3:51:c4:6a:
                    55:b8:a1:c3:2f:59:f9:4f:a6:59:63:22:e7:62:b6:
                    fb:f6:80:5c:0e:2c:37:95:e4:d7:65:5e:86:cb:e2:
                    20:fd:88:b5:f9:72:9e:bf:0c:54:57:bc:f4:48:8e:
                    ea:c6:2d:72:79:fb:6e:28:74:b0:5e:b3:dc:63:4e:
                    5e:57:22:0e:df:85:7d:db:da:e3:18:30:e0:43:7b:
                    1c:b0:b6:4f:86:af:b5:03:b5:a5:75:46:f5:f2:d8:
                    ec:c2:ca:f6:fa:f6:e5:a3:05:5e:50:58:88:d0:9d:
                    a7:f3:af:51:26:b8:dd:b0:3d:e4:82:88:f4:e4:a4:
                    98:f2:8c:a4:82:f7:8c:a9:cd:22:a3:14:e7:6b:3e:
                    02:cc:2d:cc:54:e5:d1:a5:55:f3:1f:bb:c1:35:4b:
                    eb:75:69:fc:d9:0b:13:fc:e9:1e:93:04:9f:5f:07:
                    d9:02:78:5e:0a:f7:5d:19:3c:7a:35:af:cd:21:88:
                    07:c3:64:1b:28:76:83:a5:ae:03:83:bd:f4:7a:e5:
                    99:27:bd:73:35:4d:8e:6f:49:c4:5e:15:27:ff:a4:
                    7c:fc:c6:99:b3:54:b3:f0:86:c3:2d:41:c9:1a:6b:
                    f2:19:53:67:48:f9:e2:b7:fe:00:32:76:11:6f:af:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1D:2A:B7:4C:2D:5C:E0:00:C5:B2:18:40:C4:48:E9:A8:34:F4:00
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:88:b5:e8:ec:9e:e8:13:13:26:f8:3d:40:08:bc:40:a3:
         77:84:55:d4:49:aa:26:58:63:33:ca:89:b5:ed:06:7e:b2:c6:
         0d:e1:69:00:10:c5:9b:82:99:d4:78:13:5b:df:37:31:75:fb:
         4d:6a:88:c8:bc:fa:ae:4d:6f:0b:02:7a:82:9b:55:96:62:99:
         51:c2:8f:ef:b2:2f:50:ee:49:4c:49:df:e3:31:9d:a0:ab:49:
         b6:b4:b8:ed:a4:30:cc:78:dd:8e:1b:23:15:e1:58:0a:eb:c7:
         6b:0e:7f:46:59:2b:d8:0c:e4:c5:5b:1c:3d:ed:37:65:82:8e:
         71:4f:75:d0:77:04:17:9b:bc:e4:1b:44:00:44:80:4f:7d:25:
         0d:f8:72:e4:c0:ed:b7:81:03:b3:b5:19:8d:74:eb:d9:b4:10:
         40:95:3e:29:74:30:83:1b:d7:b6:ba:f3:2c:08:cd:e1:fd:e3:
         41:68:76:97:27:d5:da:73:dd:bc:f4:0d:c1:e3:4a:2e:99:ea:
         1d:37:79:05:e5:67:2d:24:9f:d2:6d:c1:93:16:cc:4b:32:ef:
         ef:61:1c:a8:c5:67:48:eb:36:8f:da:a3:3d:11:14:5a:2a:df:
         86:57:e5:a3:f3:6d:ac:14:9f:96:72:93:7b:d7:c7:30:4c:fc:
         fa:73:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:34 2026 by rpki-client