Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File:                     BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier:          cgDabEzdq7PfWoYKPcqgXbS7YakJneWLjPaXCpDcKVw=
Subject key identifier:   66:06:DA:2A:5E:80:28:48:D5:90:7B:38:F3:04:87:FF:1E:7F:2B:43
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer:       /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial:       01A001DDA6CC04B5F02EE3B898AB360781E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number:          099F
Signing time:             Fri 14 Aug 2026 20:01:38 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:38 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:38 +0000
Files and hashes:         1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
                          2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
                          3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: OBCFZR7LVo54lApMORYRn8KntS6cebCQmKyay+Af2e4=)
                          4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:a6:cc:04:b5:f0:2e:e3:b8:98:ab:36:07:81:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
        Validity
            Not Before: Aug 14 20:01:38 2026 GMT
            Not After : Aug 15 20:01:38 2026 GMT
        Subject: CN=6606da2a5e802848d5907b38f30487ff1e7f2b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:ef:32:0c:06:c1:d3:2c:a4:65:5b:03:4e:
                    94:85:4e:65:d3:39:a2:dc:13:bb:1a:3a:46:3f:d3:
                    5b:fd:20:11:18:ac:0a:cb:12:13:75:1d:08:da:61:
                    88:4a:02:55:b8:70:27:7b:c4:b1:c0:e4:a9:06:62:
                    0b:b6:ff:7c:07:c8:ad:35:9b:e7:36:7b:f1:a0:73:
                    02:69:a1:ca:21:b1:fd:c6:91:b7:72:dd:d3:4f:79:
                    9c:f9:7b:cf:8d:0c:3c:1f:83:1e:4d:a2:4b:90:3e:
                    f2:ce:26:e9:04:34:d0:8a:01:6a:8d:3c:c2:65:01:
                    3b:84:2c:2b:1a:c6:fd:07:5f:81:c7:95:94:b3:13:
                    a1:0d:e5:21:9c:a1:44:fe:aa:73:bc:76:0e:76:e1:
                    ed:cf:d1:1b:71:29:68:cf:43:de:0d:4f:a6:8a:38:
                    cb:52:9e:ba:9a:7e:30:39:7d:23:70:51:e2:3a:1e:
                    2a:22:91:4b:12:85:4b:58:11:72:7e:52:34:e9:4e:
                    33:55:50:9f:bb:22:d7:15:94:8a:04:f5:c2:dc:e5:
                    81:56:ae:33:98:81:57:c4:5e:86:f0:13:16:c8:4d:
                    7c:e7:04:c7:6d:d4:48:5b:e6:91:15:40:76:6c:f1:
                    63:b8:a2:cc:1b:cf:83:04:1e:5b:e2:c0:f5:7a:9e:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:DA:2A:5E:80:28:48:D5:90:7B:38:F3:04:87:FF:1E:7F:2B:43
            X509v3 Authority Key Identifier:
                keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:f9:66:03:ce:f0:c8:09:ca:72:73:d0:77:f7:e1:47:85:
         60:3e:55:d5:b4:bb:85:15:19:76:3b:81:30:31:ec:a9:2a:4c:
         ae:1c:bc:6b:12:43:b4:4d:4a:3f:02:72:48:63:28:90:b1:44:
         20:a4:3a:70:d3:53:dc:36:3a:cd:b7:0a:b7:93:9c:b2:7b:27:
         38:1e:33:3a:6f:a6:c5:fc:16:37:11:c8:b7:3e:d0:fc:47:77:
         44:c3:2f:69:04:c5:01:ab:20:d1:73:1d:f4:8e:ba:c0:f8:59:
         5a:d9:c9:a1:ca:00:3b:b9:c3:0a:01:1a:8a:fb:06:6c:03:f6:
         44:71:dc:f4:7e:a9:77:59:1d:fc:a3:87:79:2f:24:be:62:2c:
         4e:bd:81:af:59:4f:a0:42:4a:fb:ea:c0:8c:ec:39:6d:1c:41:
         21:19:91:ed:6d:50:26:5e:04:9b:0a:4c:a1:5b:14:8d:5a:e3:
         e1:35:0c:0e:28:b7:24:3a:64:da:dc:a4:83:7f:61:bc:a9:59:
         e6:3a:26:53:01:eb:da:3d:f9:f1:14:af:5d:df:a4:85:2a:8b:
         24:8e:4c:01:63:5a:0c:05:a9:32:a2:56:dc:1e:79:a3:2e:f7:
         44:87:4f:32:cd:20:73:6d:95:e6:f5:f2:c1:04:52:4a:bc:05:
         97:94:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:05 2026 by rpki-client