Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          HtOVD5JGVb6oqYD2SHEa/ppj7n5a7G/LViNKulW1K/c=
Subject key identifier:   FD:4B:E2:E8:A5:DE:0B:09:E0:D2:AD:1F:1C:BE:6D:C8:29:3B:62:1C
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       01A14BE23E5FBF3371EFC83E09F28BE67254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          05A9
Signing time:             Sat 17 Oct 2026 22:01:20 +0000
Manifest this update:     Sat 17 Oct 2026 22:01:20 +0000
Manifest next update:     Sun 18 Oct 2026 22:01:20 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: iypF56O6lHVCORnerkhU/wgCsMwmop5eWDJEG61izNU=)
                          2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:e2:3e:5f:bf:33:71:ef:c8:3e:09:f2:8b:e6:72:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Oct 17 22:01:20 2026 GMT
            Not After : Oct 18 22:01:20 2026 GMT
        Subject: CN=fd4be2e8a5de0b09e0d2ad1f1cbe6dc8293b621c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:7a:42:10:47:2d:ca:36:8e:f4:aa:a6:26:
                    36:26:a3:d8:0e:10:64:46:f4:5f:63:49:78:c5:82:
                    7c:1a:4f:74:8f:6e:ca:5b:df:e7:a0:6a:0d:99:bb:
                    21:ed:cd:9f:30:c9:e9:3a:fa:5d:6d:72:f5:37:10:
                    d0:87:62:ce:de:f3:77:e9:1c:e8:94:77:97:05:35:
                    d9:1e:fc:77:fc:03:0f:93:9a:0e:c2:b7:5c:2f:6e:
                    7b:1b:25:b0:53:80:95:de:db:71:fe:b0:37:65:0b:
                    4d:4e:f1:69:d6:d7:ea:dc:ff:1b:41:73:4e:c0:ae:
                    68:dc:1e:9f:a5:b0:d4:96:6c:2b:e0:c2:3d:6b:43:
                    91:0e:d8:54:92:2e:6c:5b:8e:23:f6:50:06:b9:69:
                    c3:0b:75:34:b8:69:90:7e:44:8b:06:da:9f:1d:c6:
                    b3:29:0b:c8:66:d7:e6:f5:07:1a:af:a1:6d:b9:20:
                    32:1a:48:77:32:3b:d4:f4:18:7f:bb:15:be:cb:60:
                    19:dc:a1:8f:50:a1:c4:99:5a:d1:d8:c2:86:77:29:
                    50:c1:cf:0a:68:92:7c:06:ec:51:fc:d9:ae:06:6f:
                    95:17:ba:d9:3e:85:7a:df:82:1c:54:b3:77:e3:79:
                    e3:b7:24:50:70:74:61:92:e8:6a:a1:87:50:25:30:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4B:E2:E8:A5:DE:0B:09:E0:D2:AD:1F:1C:BE:6D:C8:29:3B:62:1C
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:63:ed:84:94:6f:73:94:c3:2a:3a:c8:58:bd:a4:26:c7:31:
         61:e6:1e:39:55:c9:57:70:f0:5b:93:4f:96:7d:80:64:72:17:
         5c:95:e2:16:dc:5a:d6:a2:e4:3d:56:2e:24:ba:43:f7:1f:3f:
         39:6c:bb:e2:ba:3e:b1:5f:c9:6e:3c:ef:f1:d4:33:26:03:a1:
         33:29:71:a2:10:bc:43:54:de:3f:33:6c:8b:0d:86:cd:0f:1a:
         14:c3:67:32:d2:97:ba:0f:b4:0c:58:16:07:e5:ea:2d:68:cc:
         10:11:0c:d9:2e:f0:4b:8f:9b:3a:dc:43:64:78:65:aa:68:49:
         22:45:05:4b:8f:42:9a:ec:9b:04:b9:e0:de:17:31:8e:db:76:
         42:38:b9:fd:0b:78:88:55:28:43:90:a4:0a:63:e8:5a:7f:0a:
         1b:d2:01:23:1d:ba:f4:60:59:da:d0:58:f9:4c:c8:df:a1:09:
         0b:a6:6c:bb:9e:5d:e2:95:5a:08:08:b9:6a:22:ae:96:0a:45:
         e2:d7:81:fa:a0:a1:79:09:d4:28:fb:82:de:91:f4:80:4b:c4:
         f8:c7:01:05:09:3c:70:b3:0c:76:3e:7e:26:57:c2:4c:21:03:
         94:02:42:15:16:a6:fe:56:92:da:c7:32:9c:e4:80:9d:ca:f0:
         98:fe:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:40 2026 by rpki-client