Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          2LMaGJEE2wEcXR6O2De+hECIkwWazIEOXKoogWl8asU=
Subject key identifier:   3E:A9:EE:EF:B6:F4:8D:86:04:CC:22:3C:DE:D9:48:EE:36:69:0D:9F
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       01A001A5EA419A4F9431D6954C9BA145FFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          11A7
Signing time:             Fri 14 Aug 2026 19:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:45 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: VNcG6RHgCrHcWer0qR1BrQv3YlefbKzVLwbKeiPOGwc=)
                          2: kSI4irkD9U8KDXqCeEKiZkl6aR4.roa (hash: PoZR+wKPBBgyzuCqmdDQdwcuOsR3JlozNGdHHFlennk=)
                          3: oPMPQL97ioOPzcI3nCulVuvoz9s.roa (hash: sBtKUfuDXNASlU06N3GnwSJFJv6yHZNIVqXOTCSz1yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:ea:41:9a:4f:94:31:d6:95:4c:9b:a1:45:ff:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: Aug 14 19:00:45 2026 GMT
            Not After : Aug 15 19:00:45 2026 GMT
        Subject: CN=3ea9eeefb6f48d8604cc223cded948ee36690d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:42:f7:ca:4c:bd:c8:49:6d:a2:8e:58:ec:
                    99:5f:2e:ea:24:8b:74:8c:3a:18:ca:5d:78:7a:4e:
                    77:5b:8e:e7:d4:72:51:91:69:6c:d6:af:78:81:aa:
                    da:e2:9d:50:b8:06:cd:c1:a7:e7:24:71:29:e0:81:
                    30:34:a6:f0:0b:d3:a1:5e:b9:4a:de:55:a4:da:0a:
                    eb:c6:8d:c6:66:7b:e4:d5:a1:61:3a:a3:a6:56:a7:
                    cd:fe:4a:e2:62:45:4d:83:f6:ad:05:8a:30:68:82:
                    57:3b:72:b8:af:37:63:e2:a8:3f:b3:66:96:a1:96:
                    a0:1f:a8:cf:47:11:00:df:be:c4:6a:7c:a5:6b:49:
                    91:b6:2a:f2:36:a7:7a:90:09:6a:d0:9c:dd:ba:6d:
                    6c:b3:1c:92:b9:97:e7:00:d4:7c:ab:f8:dd:29:40:
                    47:cf:b9:86:84:65:8e:62:cd:91:c1:50:25:3c:e9:
                    78:cd:12:ed:19:1f:4e:e0:1b:ef:2b:d2:15:fb:cd:
                    09:fc:cd:0e:3c:fb:0b:fa:27:6e:08:37:1b:13:2e:
                    9a:1f:77:4c:9c:e3:eb:b9:f1:aa:82:83:64:15:ff:
                    3c:49:fb:31:f4:d8:45:16:b7:5f:ab:bb:42:e3:2d:
                    6b:df:6a:76:d1:bd:19:48:cd:2d:82:24:e0:fa:b7:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:EE:EF:B6:F4:8D:86:04:CC:22:3C:DE:D9:48:EE:36:69:0D:9F
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4a:d1:e5:e4:b8:4b:f4:db:35:57:09:34:4e:a2:3f:07:e3:
         04:1a:60:0a:ef:68:ba:24:ab:df:8e:7e:ba:e8:44:03:29:67:
         61:42:ff:44:78:0b:b7:14:08:2e:96:3e:af:9d:e3:5c:ac:bc:
         1d:df:ae:45:e8:39:71:1e:89:91:74:8c:8f:63:13:35:b0:cc:
         23:df:2a:ae:8f:89:df:1d:05:73:ed:15:56:77:c5:c0:19:58:
         fb:b0:fa:c6:80:75:08:ff:69:d6:ad:6f:81:30:7c:32:c1:51:
         2d:f3:05:d4:c1:80:26:ae:c5:9e:0e:86:f5:62:e3:24:54:f6:
         18:b7:eb:2d:6a:ec:f5:0b:5e:1a:81:4c:45:b0:71:ce:4e:15:
         be:22:07:c5:dc:22:d3:52:09:5f:f7:d6:0a:d2:dd:69:17:83:
         57:3f:0a:72:e2:53:fa:86:32:4c:07:ed:7b:8f:be:22:46:f5:
         d4:ac:fb:b0:ab:d2:dc:54:1c:8b:2e:be:00:be:c1:56:92:bc:
         f1:1e:d4:d3:fe:6a:bd:aa:ce:41:67:ab:d1:52:69:90:9b:3e:
         a8:27:a4:19:c6:07:25:2c:5a:6a:c6:71:0f:f9:2c:30:86:aa:
         a3:d8:ed:2f:35:68:cd:b0:78:91:16:54:82:1e:af:12:85:05:
         f9:30:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:42 2026 by rpki-client