Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          t0jo/XQqvO+5AQZxP+CQ7t7F6fE45UCB08sLiul9lm0=
Subject key identifier:   AE:36:A8:DB:61:3A:0C:65:F0:D7:4A:16:90:C5:21:83:E2:7C:B1:50
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       01A13FA7A5E7E73DC0A10826757FC0779075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1AA1
Signing time:             Thu 15 Oct 2026 13:01:53 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:53 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:53 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: GtkLfQE1G5OH9dk5Zbuc7/S+RK79jzd5l49v+9Pu4+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:a5:e7:e7:3d:c0:a1:08:26:75:7f:c0:77:90:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: Oct 15 13:01:53 2026 GMT
            Not After : Oct 16 13:01:53 2026 GMT
        Subject: CN=ae36a8db613a0c65f0d74a1690c52183e27cb150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:3c:e1:fe:e9:ca:56:d5:3f:72:0b:8b:0f:
                    6d:67:4f:b7:e9:b2:19:da:c9:e6:3a:ec:e0:8e:0f:
                    c1:57:64:1f:3a:88:9a:5a:21:82:f7:6d:24:bd:b0:
                    d4:2a:06:3f:16:cc:5f:f8:08:d7:0e:75:42:74:05:
                    28:3a:38:c0:83:ef:8c:31:49:0a:e5:c0:83:64:8e:
                    47:9e:92:22:02:ef:30:46:f6:14:69:05:10:fa:1a:
                    d3:d0:93:8c:b3:e1:b3:a3:4a:23:0c:49:98:90:40:
                    12:29:73:f9:a1:12:04:db:25:f5:42:4e:37:90:14:
                    72:89:c5:41:b8:b7:9f:eb:32:1c:e3:31:df:e3:dd:
                    b8:f9:1b:60:0c:1c:6c:ec:e1:67:fe:d1:c2:bc:01:
                    34:78:b3:95:7e:dc:55:58:c7:96:10:e8:be:eb:f3:
                    95:ee:f6:fa:fd:27:f7:14:ea:9a:0b:2a:75:ed:c4:
                    49:27:64:01:96:c5:a5:bf:ec:bc:d3:35:d6:31:e2:
                    09:b4:ba:99:fe:f8:68:b8:9f:53:0f:12:d8:45:7a:
                    0d:8d:ca:df:21:73:c0:2c:7f:11:f5:05:42:45:55:
                    c7:5c:f2:d1:3b:f0:f0:c1:5f:eb:37:88:a7:9c:9a:
                    56:c2:a7:1c:d0:9e:d1:e2:63:15:82:26:cc:2a:c5:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:A8:DB:61:3A:0C:65:F0:D7:4A:16:90:C5:21:83:E2:7C:B1:50
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:69:49:3f:77:6a:cb:71:eb:6e:5c:e0:52:64:77:bb:14:65:
         5f:be:0e:87:b9:ca:2d:c1:63:54:40:da:1e:58:34:79:a3:33:
         54:91:ee:dc:b3:e1:33:90:85:20:f6:db:9f:ce:bc:74:24:70:
         67:f4:26:84:1e:40:9c:a2:01:19:c9:fa:3f:40:81:00:e8:d7:
         25:3e:7a:99:fb:0c:9d:84:3e:50:76:82:f2:8e:30:52:81:81:
         9c:10:00:7a:8a:82:c1:67:70:48:32:e6:c6:17:ca:49:30:5e:
         35:ad:88:a6:f5:bb:ff:1d:30:30:52:13:f2:aa:ee:06:25:84:
         3b:ff:c6:8c:cd:8a:63:bf:d6:e4:b9:a4:75:19:0b:80:29:de:
         8f:0a:43:4f:44:b9:9d:b2:51:9a:11:05:4a:89:78:ca:a3:00:
         d9:a8:aa:28:e9:d2:13:b3:1d:82:7c:32:c6:d0:9c:dd:2a:29:
         68:97:ab:4e:34:58:8e:88:85:7d:ca:be:74:5b:07:c7:5c:54:
         3a:81:df:5a:47:95:51:8b:38:9b:76:6e:97:a1:6b:15:28:5b:
         0b:ae:93:c3:42:d7:cb:62:2f:b6:07:68:96:7c:6d:d5:4a:bd:
         96:09:58:a5:87:2c:e0:fd:96:30:fe:98:a7:95:50:7f:25:81:
         bc:80:30:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p6Xn5z3AoQgmdX/Ad5B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZWY5YjVmMmVmMTA0M2MyZGYzMTdmODZjOGI5Mjk3MjIx
ZjhkYzMwHhcNMjYxMDE1MTMwMTUzWhcNMjYxMDE2MTMwMTUzWjAzMTEwLwYDVQQD
EyhhZTM2YThkYjYxM2EwYzY1ZjBkNzRhMTY5MGM1MjE4M2UyN2NiMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsQ84f7pylbVP3ILiw9tZ0+36bIZ
2snmOuzgjg/BV2QfOoiaWiGC920kvbDUKgY/Fsxf+AjXDnVCdAUoOjjAg++MMUkK
5cCDZI5HnpIiAu8wRvYUaQUQ+hrT0JOMs+Gzo0ojDEmYkEASKXP5oRIE2yX1Qk43
kBRyicVBuLef6zIc4zHf4924+RtgDBxs7OFn/tHCvAE0eLOVftxVWMeWEOi+6/OV
7vb6/Sf3FOqaCyp17cRJJ2QBlsWlv+y80zXWMeIJtLqZ/vhouJ9TDxLYRXoNjcrf
IXPALH8R9QVCRVXHXPLRO/DwwV/rN4innJpWwqcc0J7R4mMVgibMKsUx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK42qNthOgxl8NdKFpDFIYPifLFQMB8GA1UdIwQY
MBaAFAbvm18u8QQ8LfMX+GyLkpciH43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgt
OTFiZWI5Yjg5MDhjLzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgtOTFiZWI5Yjg5MDhj
LzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWlJP3dq
y3HrblzgUmR3uxRlX74Oh7nKLcFjVEDaHlg0eaMzVJHu3LPhM5CFIPbbn868dCRw
Z/QmhB5AnKIBGcn6P0CBAOjXJT56mfsMnYQ+UHaC8o4wUoGBnBAAeoqCwWdwSDLm
xhfKSTBeNa2IpvW7/x0wMFIT8qruBiWEO//GjM2KY7/W5LmkdRkLgCnejwpDT0S5
nbJRmhEFSol4yqMA2aiqKOnSE7MdgnwyxtCc3SopaJerTjRYjoiFfcq+dFsHx1xU
OoHfWkeVUYs4m3Zul6FrFShbC66Tw0LXy2Ivtgdolnxt1Uq9lglYpYcs4P2WMP6Y
p5VQfyWBvIAwHw==
-----END CERTIFICATE-----