Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          rdk8xuDTJwOW4u9Joq5j7hBh2IIe+hqXe59vEX720pk=
Subject key identifier:   67:E5:C2:45:25:F4:6E:A6:4C:8E:F5:BC:DB:BE:C4:9E:C2:BF:86:28
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       01A149F3904CC5570032CC696051E4D58F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          05A8
Signing time:             Sat 17 Oct 2026 13:01:01 +0000
Manifest this update:     Sat 17 Oct 2026 13:01:01 +0000
Manifest next update:     Sun 18 Oct 2026 13:01:01 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: EAJGX6xl6ph15XfP8mWzGKbfVcfmIFouhV4hdGIkuUk=)
                          2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:f3:90:4c:c5:57:00:32:cc:69:60:51:e4:d5:8f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Oct 17 13:01:01 2026 GMT
            Not After : Oct 18 13:01:01 2026 GMT
        Subject: CN=67e5c24525f46ea64c8ef5bcdbbec49ec2bf8628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:92:a3:63:9e:91:c8:87:39:53:96:5b:f5:
                    2a:7b:8a:13:da:bb:1c:20:7f:0f:2c:ed:88:ee:d0:
                    0d:43:60:12:01:24:c6:74:d4:86:1e:6a:a6:87:30:
                    a7:27:aa:6e:ab:19:b0:11:72:1c:31:ce:08:c0:c9:
                    ed:ac:25:7b:59:b9:08:e8:a2:24:a6:c3:13:35:d2:
                    3a:9e:c6:2a:d6:3a:3c:63:8a:40:e8:a1:73:11:73:
                    71:23:0d:1c:43:3b:34:4d:e2:46:b2:52:54:48:6b:
                    4f:5d:03:e6:0f:26:f9:9d:92:af:d8:c8:78:66:c7:
                    d9:5e:0d:3f:ce:4d:13:a7:55:ef:eb:f8:1e:5a:02:
                    90:0b:c0:80:c7:24:53:db:69:80:f3:53:b8:c9:0e:
                    ec:07:f9:f8:92:d1:5d:15:5a:b2:1d:df:64:22:30:
                    23:4a:9b:3d:4a:d3:55:88:3a:d5:fc:d6:cf:08:cd:
                    37:2c:84:60:26:f5:0d:6f:4d:c9:63:d9:5b:08:bb:
                    15:15:23:85:04:87:53:1d:44:9c:4b:b6:33:10:26:
                    3a:eb:44:21:70:4b:45:a5:10:64:b0:fb:51:c8:90:
                    5f:e9:6d:0e:35:b5:17:d9:1f:ca:d8:d7:6f:6d:21:
                    4e:b8:68:96:41:f4:6d:a4:e2:d1:68:1f:3d:cf:01:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E5:C2:45:25:F4:6E:A6:4C:8E:F5:BC:DB:BE:C4:9E:C2:BF:86:28
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:73:da:88:06:92:fb:31:d4:be:94:05:92:c4:90:c6:bf:31:
         55:9f:57:8a:cb:59:60:b2:ae:15:7f:bf:b8:58:bb:9c:aa:9b:
         69:60:8a:16:2a:a2:d0:2c:93:cc:40:6a:be:ae:b3:03:69:c1:
         b2:d2:a5:cc:b5:5b:98:33:54:88:c7:74:d2:5b:96:88:cf:f3:
         62:25:65:b9:88:16:fe:5d:8d:a3:ae:31:75:98:fb:cc:75:79:
         74:ce:7d:9e:fd:16:33:98:4d:14:fc:56:f2:e1:78:45:09:25:
         d9:04:77:a3:51:73:61:3f:8a:21:4a:7b:75:fb:43:68:48:b9:
         80:0f:a1:1e:09:78:42:f0:0b:4c:f7:fd:6f:ab:cb:39:10:9e:
         50:96:96:35:37:fa:81:35:3c:6c:30:6a:60:7c:36:0e:c9:f3:
         a1:5b:11:81:4f:01:56:d4:53:fd:27:1a:bc:dc:f2:6c:86:9e:
         7f:3b:3a:26:82:1e:12:a2:78:2e:70:8b:ba:0f:52:ba:da:58:
         82:b3:56:fe:76:a5:73:c9:cf:7e:52:63:c8:ee:b5:5c:ad:6d:
         70:97:6b:12:3b:e3:a7:a4:34:8c:35:80:7a:57:f5:11:46:6e:
         58:5b:c7:18:e1:1e:e9:06:08:b4:be:c6:42:46:16:3a:3d:e0:
         cb:48:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:29 2026 by rpki-client