Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File:                     BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier:          cMPP/5X7uEWx03AtYcyIaT8jT+BFWZ0S4OiOWPeKhaE=
Subject key identifier:   4E:32:57:66:48:1D:9E:62:DC:16:87:F7:23:9F:E3:5D:D9:E4:0D:42
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer:       /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial:       019CE222C406B584053130F64809D044AF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number:          09FE
Signing time:             Thu 12 Mar 2026 13:00:55 +0000
Manifest this update:     Thu 12 Mar 2026 13:00:55 +0000
Manifest next update:     Fri 13 Mar 2026 13:00:55 +0000
Files and hashes:         1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: 5CRC3OuKwVZLlMV3wfbysQoHeCZrGwEXtwDZz+3PwRw=)
                          2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:22:c4:06:b5:84:05:31:30:f6:48:09:d0:44:af:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
        Validity
            Not Before: Mar 12 13:00:55 2026 GMT
            Not After : Mar 13 13:00:55 2026 GMT
        Subject: CN=4e325766481d9e62dc1687f7239fe35dd9e40d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:01:2f:67:4a:48:ac:24:23:3c:75:51:61:
                    ba:10:ff:9a:48:7f:91:77:9c:ba:79:0f:46:f0:47:
                    e1:cd:a9:7e:e1:b2:6c:23:14:bb:64:7d:b3:e2:cd:
                    91:ef:dc:97:4e:05:68:81:27:b5:f9:4b:f7:3e:71:
                    1b:b6:9e:46:7f:35:8e:cd:08:f3:88:0a:51:c3:9b:
                    34:19:90:26:3d:09:77:d3:0d:62:f2:b1:29:2f:75:
                    74:f7:5d:a8:ba:68:9b:24:c6:a7:9f:7b:43:6f:7f:
                    44:28:1f:6c:fe:51:01:c5:a0:92:37:71:b9:81:1e:
                    86:7a:e1:de:d4:78:34:1f:d0:dd:55:45:c1:e6:cd:
                    3e:69:48:4a:42:11:df:97:4b:77:1f:08:64:7d:c5:
                    e3:fe:4e:2e:62:8b:2b:f2:ad:2c:20:97:b7:b4:3a:
                    c0:ba:2e:82:70:61:ce:cc:0d:2c:3f:1c:65:79:c7:
                    72:1b:05:b2:c8:0f:76:b4:d2:22:1a:be:b3:c4:d0:
                    87:f5:00:b1:2c:b0:46:16:af:c1:65:9f:27:76:82:
                    03:30:b2:31:9a:d3:95:03:32:b7:e4:6b:fa:2b:cd:
                    97:5e:1f:a1:8f:d6:c5:13:85:4e:5d:75:be:ad:76:
                    de:e9:4a:58:f9:11:35:fd:fc:fd:60:a0:92:24:36:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:57:66:48:1D:9E:62:DC:16:87:F7:23:9F:E3:5D:D9:E4:0D:42
            X509v3 Authority Key Identifier:
                keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:66:2b:03:cd:70:4d:33:8f:47:10:fe:f1:d3:b3:76:7d:3d:
         ef:5c:a6:b1:2c:2d:30:f8:78:f0:41:d4:cf:aa:a7:16:40:85:
         23:a0:99:80:a5:0f:23:75:9a:b9:cc:d4:31:42:d1:d9:df:2a:
         c8:56:a1:f9:8f:b4:35:7f:92:fc:dc:c6:7d:19:27:16:f1:3f:
         38:50:b9:22:3a:02:a7:ba:99:1b:54:42:42:da:e4:7b:29:44:
         da:ce:3b:61:15:54:09:42:69:64:fe:11:b3:53:5e:4a:c6:ff:
         fc:3f:90:ab:41:72:1f:8d:0f:fe:41:48:a9:a7:00:82:22:d3:
         ff:c6:52:cf:1d:49:af:ef:fd:6c:dd:97:08:4a:78:dd:23:0e:
         a1:88:e1:b1:d8:0f:d2:16:ec:3c:c2:db:f8:60:7f:31:93:a2:
         df:62:e2:b9:81:66:e5:bb:48:f5:e0:38:0e:6d:7d:e4:5e:4b:
         af:12:4c:6f:4a:c9:47:22:2b:cf:e5:57:ff:72:6a:9e:45:35:
         7a:d1:ee:41:73:9a:19:25:96:c9:7e:d0:df:a4:7f:40:09:1a:
         6f:6c:cb:af:d9:f2:ac:fe:9f:73:bc:b9:63:35:53:35:e8:98:
         5d:bf:0d:12:ae:bf:30:36:ec:95:27:b3:3c:6f:f8:58:cf:78:
         d5:9b:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:25 2026 by rpki-client