Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File:                     BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier:          lYKsbjXS76mboA5JNAF/1vH4pPGlxB+t7PkuIGtfojw=
Subject key identifier:   51:0A:E4:FA:B0:58:A0:68:F3:9C:B8:83:A7:A9:96:5F:34:D2:61:97
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer:       /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial:       019F11F78A7A189575DA1F563DC806890835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 06:01:03 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:03 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:03 +0000
Files and hashes:         1: BMOqMhDnTJ4X54O_OwDI5UiDaHw.roa (hash: 4LkFNJ7Z7rOiHqQGWcBiJ1mq/59lzHli+QSDHC9WmWs=)
                          2: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: 0w3SC/bl9lG4TpZ1L6oOh9k0tZ5IQ6RfkBjwV2cF+HA=)
                          3: IS6G36HIKhn8504sUv9RDOVhJtc.roa (hash: EFw3QrJ6c/K7ZoKQsk7N9M/h7zGvXJMqojkfvWcO4v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f7:8a:7a:18:95:75:da:1f:56:3d:c8:06:89:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
        Validity
            Not Before: Jun 29 06:01:03 2026 GMT
            Not After : Jun 30 06:01:03 2026 GMT
        Subject: CN=510ae4fab058a068f39cb883a7a9965f34d26197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:b0:e0:4e:b3:2a:41:37:ce:33:e0:b6:fa:
                    4a:7b:9c:8e:3c:60:44:c7:1c:35:a6:a3:2c:84:c3:
                    12:4b:e4:73:cc:f0:af:51:fe:d0:fb:a0:3a:ae:da:
                    f3:9c:62:6b:9a:07:16:f8:3a:ba:2c:63:a3:95:86:
                    4e:01:1e:f1:2d:f1:19:91:bc:b1:7b:41:59:5c:51:
                    ec:c8:3d:dd:bb:68:71:b7:b1:06:85:ff:6a:e2:9b:
                    1c:21:a3:c8:15:0e:03:4c:b0:46:79:2c:d2:59:71:
                    64:a4:06:b1:01:c7:33:e7:a4:28:5a:40:6d:c4:5f:
                    9d:d0:34:d5:c3:dc:03:18:85:e3:55:7d:99:c6:f4:
                    5c:3f:8c:a2:21:f5:33:5f:fc:ef:3e:5e:d5:30:db:
                    2b:97:8f:fa:1b:e8:7e:e9:44:09:01:25:fe:05:e1:
                    af:d9:1c:72:8a:01:5f:3f:69:26:67:30:a1:e9:74:
                    67:ae:2f:f5:a0:b9:ca:43:67:24:26:c7:a6:ff:cb:
                    a8:19:ce:7e:ce:cf:98:66:0b:cf:9c:78:3e:e3:49:
                    5b:38:80:0b:ee:80:60:73:d9:18:a8:e6:5d:39:40:
                    5f:f2:f7:d1:01:68:59:93:12:69:db:3d:a7:3f:e5:
                    a9:ba:14:04:46:4f:d5:a6:e9:37:9f:52:07:23:74:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0A:E4:FA:B0:58:A0:68:F3:9C:B8:83:A7:A9:96:5F:34:D2:61:97
            X509v3 Authority Key Identifier:
                keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:80:08:09:3f:c5:06:f5:b5:d4:b7:43:77:1c:75:fc:07:9b:
         e9:08:c1:e1:b5:6c:49:68:22:ca:3c:15:30:01:ca:43:4c:da:
         86:98:59:2c:9d:e6:62:80:72:f1:24:dc:06:f4:b9:bb:19:d9:
         71:6d:77:32:cb:5f:f8:e0:a3:63:54:d9:b5:7b:a4:d1:cf:7d:
         e9:4f:cc:ca:9e:e6:f8:32:ae:87:a7:7f:59:9f:94:cc:63:3f:
         7f:d5:b8:53:ca:57:c3:5d:6a:79:a5:43:29:2d:91:27:21:a2:
         57:c2:ff:21:a4:14:c9:32:3f:46:05:c8:cc:bc:45:18:7b:8a:
         fe:cc:9d:9b:de:9a:60:98:6f:a8:33:c0:06:45:3b:96:c2:34:
         f8:8c:41:39:8c:d8:7b:e9:8e:e8:3c:c5:55:40:8a:8d:63:2f:
         86:a3:b5:48:d7:d2:37:15:fe:69:14:a3:b0:69:07:b5:aa:45:
         0b:56:4e:9f:73:a6:b3:0a:f5:a5:fc:d5:96:b5:9a:8b:81:9d:
         e0:ce:9c:f1:be:f3:82:53:6d:8b:b7:28:e4:cb:60:17:b6:fe:
         db:26:d4:fe:a0:3d:38:d0:fc:08:4c:aa:23:20:c4:5d:40:a9:
         60:74:d6:da:1a:24:11:29:f2:5a:39:3e:1a:28:d2:cb:30:04:
         25:6f:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:40:59 2026 by rpki-client