Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
File:                     BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft (raw, json)
Hash identifier:          qy5NxqUZy6LDrnOXy9/Mcmq6xoSjL5z8olzQZSdcTBA=
Subject key identifier:   A7:99:9D:DD:B8:3F:D3:59:FF:E2:75:B7:87:E8:4B:36:49:9E:D1:1D
Authority key identifier: 06:E9:A1:30:9F:BB:9C:E0:6B:C4:E1:58:BC:0B:35:2E:E4:C8:84:4C
Certificate issuer:       /CN=06e9a1309fbb9ce06bc4e158bc0b352ee4c8844c
Certificate serial:       01A04084DBFF5377AC38255BEA1C4ACAF701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
Manifest number:          0151
Signing time:             Thu 27 Aug 2026 00:00:43 +0000
Manifest this update:     Thu 27 Aug 2026 00:00:43 +0000
Manifest next update:     Fri 28 Aug 2026 00:00:43 +0000
Files and hashes:         1: 2aEEFS3prrbS1dalngjss8ZGfSE.roa (hash: C7TbE8+4+XUsKfnU1RvCd/kxii8rFR7Ig75M/Wtilmg=)
                          2: BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl (hash: +FztfG6RRUGRQkXimcptSDowfINz9N9iDusqkhd0JRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:84:db:ff:53:77:ac:38:25:5b:ea:1c:4a:ca:f7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e9a1309fbb9ce06bc4e158bc0b352ee4c8844c
        Validity
            Not Before: Aug 27 00:00:43 2026 GMT
            Not After : Aug 28 00:00:43 2026 GMT
        Subject: CN=a7999dddb83fd359ffe275b787e84b36499ed11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:33:2f:7f:c9:2e:7b:2a:f2:23:39:c7:27:
                    b5:1b:15:44:23:a6:2b:ff:d8:c2:f6:34:9b:e4:72:
                    3c:4b:7d:58:1b:c1:4f:1e:d7:ca:55:1d:df:c6:04:
                    2a:fd:d7:00:99:d8:be:9a:8b:7b:0a:a2:36:89:ed:
                    d4:4b:76:bf:c3:39:18:a9:6e:74:09:79:43:86:73:
                    19:36:c2:e6:a2:f0:28:e5:b4:86:ee:1e:7f:4c:d5:
                    8e:38:c6:39:81:5b:24:2c:8d:43:11:8a:09:d4:51:
                    c1:1a:f0:d0:2f:1f:ec:f9:c1:1d:68:f5:e8:dc:aa:
                    31:da:40:95:04:ca:31:22:f5:b5:4e:17:3b:f1:a5:
                    00:57:75:23:42:9c:b3:85:00:01:f4:6b:f6:d7:67:
                    8f:45:d1:19:9d:07:d6:a1:c9:a3:86:25:59:3f:77:
                    ef:8c:df:77:45:1c:f0:eb:82:32:c2:b7:5f:91:e7:
                    88:0b:46:f3:14:57:b2:4d:aa:84:4f:57:b4:6a:5d:
                    18:2e:3e:fc:13:58:65:73:2c:85:4f:66:60:80:81:
                    18:c2:b8:34:3e:20:f5:24:fb:d1:36:03:9e:54:c3:
                    30:ee:ff:b1:f4:fa:01:73:ed:ea:36:2a:08:52:2d:
                    a6:88:15:8a:b8:64:f9:60:b9:60:a2:9b:26:bc:ed:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:9D:DD:B8:3F:D3:59:FF:E2:75:B7:87:E8:4B:36:49:9E:D1:1D
            X509v3 Authority Key Identifier:
                keyid:06:E9:A1:30:9F:BB:9C:E0:6B:C4:E1:58:BC:0B:35:2E:E4:C8:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:32:2a:85:fa:58:10:4d:2b:75:6f:c0:8a:d5:91:9d:09:
         f1:49:a2:c9:de:49:1a:c7:50:ed:0b:f9:6b:d4:c2:b4:47:29:
         91:a1:7f:ff:51:7b:0e:c1:9c:0f:7c:22:80:4e:2d:18:8e:5a:
         dd:2d:43:2d:b1:80:2c:fa:5f:5e:f3:3c:15:69:e3:e0:e0:5c:
         49:ca:ce:fe:28:62:27:a1:ad:9d:f3:7b:aa:d0:04:22:a8:4f:
         63:e2:5f:2f:2a:b3:79:58:39:f7:3e:89:eb:8b:cf:7b:dd:c8:
         b4:85:0c:7e:6f:99:7c:0e:39:cc:d1:d7:f4:6a:91:b2:92:26:
         46:c1:55:d1:17:95:89:c5:2c:31:52:78:8f:33:14:95:44:a5:
         32:94:8d:98:69:01:e5:f3:4e:7a:1f:b0:13:33:96:00:19:d9:
         d3:b7:15:ec:e0:d8:3b:0b:ff:da:08:d0:d5:ee:9d:d6:9c:53:
         49:02:ff:8b:f0:41:fe:4f:ab:a9:b8:56:af:7f:bf:9c:76:34:
         87:d8:ff:c0:b6:94:12:43:76:b3:1f:ad:f1:b1:a5:00:cd:68:
         93:c2:37:96:41:5b:f2:7a:8b:b5:8c:b3:3b:52:21:7e:8d:22:
         74:65:dc:20:23:f6:43:f9:cf:71:ff:26:7c:62:d4:ad:1c:9d:
         a1:72:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:40 2026 by rpki-client