Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File:                     BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier:          yf0xmMROr4gjf+5aOESuXu4EeGf3XbdkzYpV86qvZXk=
Subject key identifier:   6A:57:CA:FC:44:A1:A4:15:2A:05:D7:8A:53:86:98:5C:7A:72:CE:0E
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer:       /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial:       01A002B9698E8EE7A6A4F8F98FB911125646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number:          0343
Signing time:             Sat 15 Aug 2026 00:01:40 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:40 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:40 +0000
Files and hashes:         1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: VypKpk1xNrSaU65wEoKY2ezWRuweTfIkqm5sBqC5MgA=)
                          2: GlfjtyID3JWD6gfRCet0c13y4oE.roa (hash: LlD9D2Qj80+2x3YcRcDhNjcjPr/rKerCLr5sHKh6tkA=)
                          3: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
                          4: fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa (hash: CUNYPNKSF7YckX+bEfY2dM6QKQX4z3XcFfcG2M3cMOA=)
                          5: ixoSA4vv93EMzPFXEdYkZkFXEuM.roa (hash: LpzORNFMoHrs7UHue0dvdeBk04SczLGtJqFp6wF9Yy4=)
                          6: lvaBEefREte9megKsuTphpZWEYI.roa (hash: gtzJ7Yq4UBIaiaj1g0GucnUUIgufu6zUuc3MZU4/efU=)
                          7: ovLtvuErkYW3JV-5FyXwUkABVrg.roa (hash: dC4dQZ1mX3nPadXU0G7tzcioIJQ9K57JJCxbTMySTvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:69:8e:8e:e7:a6:a4:f8:f9:8f:b9:11:12:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
        Validity
            Not Before: Aug 15 00:01:40 2026 GMT
            Not After : Aug 16 00:01:40 2026 GMT
        Subject: CN=6a57cafc44a1a4152a05d78a5386985c7a72ce0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:bd:25:ee:4a:0f:64:b8:cf:09:44:0d:53:
                    56:95:66:20:65:18:4b:e9:55:dd:a7:6d:22:a8:37:
                    db:e4:80:2c:27:63:de:8f:37:6e:1b:42:45:88:ff:
                    e9:fa:be:25:63:73:bf:6d:73:98:60:c0:56:2d:0e:
                    0b:bf:a6:a0:43:fa:92:18:a3:92:b5:12:db:32:a2:
                    42:98:0b:a3:13:75:72:87:44:f1:0d:b7:88:50:d0:
                    9b:57:a8:10:64:8c:1d:9e:93:62:c7:85:38:27:d1:
                    50:9a:5a:2e:4f:93:0b:ab:01:29:f1:e1:d2:9a:c3:
                    20:19:2c:02:3c:76:aa:18:1d:ce:8f:25:3f:3b:74:
                    43:65:f3:07:5d:bf:dd:6b:e9:1f:18:2a:46:75:c0:
                    0d:6b:5d:7b:32:b8:71:a2:d0:05:28:50:9e:9d:61:
                    6d:0f:44:ee:d0:0c:15:b2:09:66:47:56:80:d7:9f:
                    8c:ed:c2:9e:ed:35:85:df:83:c9:d0:54:dc:bf:43:
                    28:4f:36:df:12:94:a0:56:73:57:53:87:1c:b1:71:
                    dd:d4:cc:47:be:52:12:57:0c:dd:54:f9:57:48:76:
                    a9:17:11:ec:03:88:78:a9:ac:03:fb:6d:ea:de:5b:
                    85:92:68:7c:52:8d:f9:05:5c:55:45:4f:17:ea:9d:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:57:CA:FC:44:A1:A4:15:2A:05:D7:8A:53:86:98:5C:7A:72:CE:0E
            X509v3 Authority Key Identifier:
                keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:eb:87:95:7c:13:ef:89:83:be:0b:94:1d:52:0c:ec:61:
         58:67:fc:f5:23:ee:95:51:5e:48:bf:b3:eb:fd:9d:c3:d7:4d:
         02:50:65:32:e2:28:7b:3b:e3:31:de:92:0c:46:46:b4:cc:ad:
         cd:d6:0e:28:7b:6f:98:c2:16:57:85:43:8e:d1:d2:30:46:73:
         f2:88:ff:23:e2:34:50:77:e8:66:a7:bd:da:67:7a:c1:e6:08:
         a0:0e:c7:ad:06:12:32:ba:78:07:54:54:e4:70:93:5e:35:15:
         ec:8a:10:59:a6:c0:b9:42:8b:2b:e3:ed:b2:1b:ff:cf:ab:c9:
         d7:13:ac:ba:08:81:4d:bd:f6:23:6a:41:d3:57:83:15:89:a7:
         d8:e6:72:5d:69:b9:c6:29:72:26:f4:aa:e6:a7:f1:b2:53:cb:
         7e:a5:e3:cb:84:51:77:da:25:3b:b3:fd:c1:3d:8c:92:3c:79:
         e5:49:15:6e:b8:c2:2e:f3:9a:7e:3d:32:cc:7e:7a:7f:a5:c9:
         04:ca:37:e6:19:ec:2b:22:76:1a:0f:33:88:22:96:19:44:e7:
         14:29:31:39:0c:49:e6:32:0c:33:7a:a3:fc:c8:7f:10:87:70:
         ea:0b:7c:37:38:6a:21:68:83:58:4e:71:64:60:3f:c9:23:8c:
         0e:2c:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:40:00 2026 by rpki-client