Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          Sw0M2d0LDTu1JRDSrFCmCTV3vq1+AKM3G2XKNzNGsrs=
Subject key identifier:   08:34:1B:B5:9F:12:B2:CE:D4:D1:BD:3A:FA:56:B4:77:5E:4F:FC:55
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       01A0010129108C3725BCA50306B88FD61B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 16:00:48 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:48 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:48 +0000
Files and hashes:         1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
                          2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: EcS+XP3f/nGGLfMjFOxUJN9YW9OjHgEPCGzflMXrw2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:29:10:8c:37:25:bc:a5:03:06:b8:8f:d6:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Aug 14 16:00:48 2026 GMT
            Not After : Aug 15 16:00:48 2026 GMT
        Subject: CN=08341bb59f12b2ced4d1bd3afa56b4775e4ffc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:cd:d2:49:78:5f:7b:78:cc:10:bb:3a:6f:
                    c6:40:2a:5f:93:48:2b:ce:d1:9e:00:ec:26:a5:e8:
                    af:f0:91:9c:37:c9:62:64:9f:c5:82:75:21:e1:57:
                    35:ec:e2:b3:b6:27:03:9a:a5:dc:45:c2:b2:31:fb:
                    77:1e:6b:32:5b:00:97:7f:f0:85:0e:d3:a3:8c:81:
                    ea:18:c6:5e:9f:96:41:0f:62:e6:63:d3:21:ce:3a:
                    8e:be:57:45:21:75:42:41:1e:cc:47:f6:b3:8a:be:
                    88:f7:37:b8:c6:6c:2a:9c:75:ca:f1:a9:04:b0:95:
                    7a:08:ab:06:cd:49:30:f2:6d:46:2a:c5:76:98:8e:
                    0b:ea:02:89:f9:75:85:6a:73:9e:e0:cc:fb:3c:ca:
                    98:28:3c:71:a3:5e:42:1c:fa:a1:c7:37:6f:e1:d2:
                    89:8c:97:7e:0e:d4:ac:d5:42:75:56:0f:9a:e4:cc:
                    81:15:39:e0:34:b5:92:a8:cf:47:b5:b0:4e:f8:c4:
                    e9:3b:a9:ad:8c:62:15:84:b2:bc:31:bd:aa:51:ae:
                    61:82:65:2b:6b:c7:5d:07:72:1e:cd:c6:47:03:34:
                    ff:85:fb:9f:55:48:fe:e5:57:bb:c1:c7:e1:e7:ce:
                    37:ad:ca:31:91:60:cd:93:32:3d:3b:6d:62:b8:78:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:1B:B5:9F:12:B2:CE:D4:D1:BD:3A:FA:56:B4:77:5E:4F:FC:55
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e5:72:f6:5a:fb:f9:2a:51:2f:f0:d9:25:a8:79:a0:73:3c:
         37:52:6b:3c:8a:25:ae:a4:1f:ec:d2:2f:e9:8b:9b:4e:13:05:
         26:50:be:64:20:8a:82:65:b3:6d:d3:80:de:39:0b:ea:cb:8b:
         2f:7d:5a:d9:98:31:83:8e:e8:88:57:96:d4:87:30:50:aa:4d:
         c1:58:eb:3d:5c:c4:5f:64:d6:92:10:91:b6:a4:31:81:aa:69:
         24:8a:dd:aa:8e:4b:ff:22:f0:75:db:8f:e3:40:01:c4:14:6d:
         7a:49:59:f3:2f:1e:e0:49:6d:fd:97:04:23:d3:97:fc:66:39:
         98:16:ec:f8:e8:74:7e:10:90:dc:05:a8:61:3e:bf:37:89:36:
         bc:43:8e:f1:1f:17:ee:1f:12:0b:8c:a5:fa:ab:74:41:1b:1a:
         fc:92:41:84:fc:d7:dc:8e:d8:bb:bf:85:85:97:ad:f4:6a:36:
         df:0f:4d:71:48:5c:99:f9:54:cf:c2:5c:e1:b3:1f:97:1c:e9:
         3d:1f:a4:99:85:0c:e5:d0:52:37:a7:4d:3d:e0:eb:98:62:b1:
         ca:f5:87:6d:3e:fa:cf:26:a9:f2:1c:f0:78:01:68:e5:eb:1a:
         b9:e2:16:77:3f:d3:d2:19:f6:ca:c9:04:7c:ed:d9:ac:c7:f5:
         b6:27:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:57 2026 by rpki-client