Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          siy14/qkKWVwyN7gX6WQQoe5tUr1RLuevkB2Xd8o+hk=
Subject key identifier:   6F:B8:9E:42:49:CA:00:23:30:0B:84:D0:FC:8F:EF:10:6D:6F:61:72
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       019A2108C125BE6FF0AA8F2D94F7B3736D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          01F2
Signing time:             Sun 26 Oct 2025 15:00:13 +0000
Manifest this update:     Sun 26 Oct 2025 15:00:13 +0000
Manifest next update:     Mon 27 Oct 2025 15:00:13 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: bC0+zUV+K2xLD8J0YnWTEuAk5bpsdOCB+dKaCSgKuHA=)
                          2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:08:c1:25:be:6f:f0:aa:8f:2d:94:f7:b3:73:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Oct 26 15:00:13 2025 GMT
            Not After : Oct 27 15:00:13 2025 GMT
        Subject: CN=6fb89e4249ca0023300b84d0fc8fef106d6f6172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:82:81:6f:b3:83:1d:66:c3:24:5b:70:16:
                    f7:42:f6:1d:57:dd:fe:65:71:f1:2d:1f:91:cc:4e:
                    32:61:56:96:ff:ed:ed:ea:2f:b1:24:03:55:6c:ee:
                    77:f3:65:c1:ce:e2:3b:8f:45:4c:3c:15:91:52:62:
                    8d:06:3f:e0:73:96:f1:aa:e1:7f:ad:f8:bb:0c:b4:
                    02:77:c9:70:a1:c8:be:6b:dd:cb:15:7c:78:7e:3d:
                    32:03:74:e1:12:4a:c9:34:8d:6c:9b:98:e1:d9:2d:
                    bd:cd:23:97:05:9a:ef:c5:f7:e4:06:83:6d:0f:d2:
                    38:76:8f:16:ce:0d:21:07:13:63:b4:90:48:5f:1f:
                    0a:fe:f1:8b:22:f7:e8:85:8f:bb:fd:67:62:bc:ea:
                    1f:ff:37:35:e0:0d:ee:10:e8:1e:41:fb:e3:36:e0:
                    cf:78:e3:58:b3:0d:8f:b1:3d:f4:6d:02:ae:bb:90:
                    6a:25:e3:88:02:de:a7:cd:e6:8a:7c:42:50:05:4a:
                    bb:9f:51:46:f4:bf:2a:5f:aa:46:46:59:30:94:d5:
                    cf:90:a2:5e:54:6c:18:02:12:e7:75:a9:c7:0f:e6:
                    75:e5:b5:4e:eb:be:da:8d:98:d4:6f:7c:c2:8d:d2:
                    f9:ce:27:56:f5:63:0e:29:c9:ea:66:ad:93:24:03:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B8:9E:42:49:CA:00:23:30:0B:84:D0:FC:8F:EF:10:6D:6F:61:72
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0a:39:ff:06:26:b7:3f:2e:c4:b6:9f:87:be:70:6d:ca:81:
         d3:2e:c7:3d:e1:ad:ee:8c:11:e4:c4:41:f3:36:5b:80:3d:ea:
         26:18:cf:97:22:da:53:5f:de:d7:4f:fc:26:e0:bf:4c:dd:bd:
         03:f6:ca:c0:e4:66:bd:78:00:a9:a8:4a:a3:7d:1b:1f:de:9a:
         86:6b:f4:8c:8a:2f:97:9c:63:58:b9:06:cc:e5:30:b3:10:17:
         d1:85:9a:a7:a0:a5:18:2c:e6:99:52:26:87:dc:6a:1a:6d:9b:
         28:13:12:9a:d8:8d:6f:2e:dd:c7:d8:30:13:68:36:01:72:48:
         82:b7:75:b9:b7:c6:a6:4e:96:2f:9b:a3:ee:6b:5e:f2:34:a7:
         60:71:ca:66:57:fc:57:0c:e8:8f:cc:87:ae:b4:69:3b:b6:d0:
         70:05:1b:79:5f:12:98:0e:96:9e:ee:41:1e:11:89:92:a0:08:
         14:b9:d6:a8:5e:72:13:93:eb:be:64:e5:c6:30:3f:44:17:81:
         a6:66:20:c0:5e:a7:3a:ce:6c:33:a4:08:e0:03:aa:9f:4f:60:
         1d:ff:db:9d:0e:ea:d2:72:1e:61:50:dd:13:08:50:8a:df:ad:
         35:99:ac:ff:ee:91:54:35:09:0d:47:09:77:33:bc:32:ca:21:
         39:fc:90:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCMElvm/wqo8tlPezc20rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl
Y2MyYWUwHhcNMjUxMDI2MTUwMDEzWhcNMjUxMDI3MTUwMDEzWjAzMTEwLwYDVQQD
Eyg2ZmI4OWU0MjQ5Y2EwMDIzMzAwYjg0ZDBmYzhmZWYxMDZkNmY2MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFyCgW+zgx1mwyRbcBb3QvYdV93+
ZXHxLR+RzE4yYVaW/+3t6i+xJANVbO5382XBzuI7j0VMPBWRUmKNBj/gc5bxquF/
rfi7DLQCd8lwoci+a93LFXx4fj0yA3ThEkrJNI1sm5jh2S29zSOXBZrvxffkBoNt
D9I4do8Wzg0hBxNjtJBIXx8K/vGLIvfohY+7/WdivOof/zc14A3uEOgeQfvjNuDP
eONYsw2PsT30bQKuu5BqJeOIAt6nzeaKfEJQBUq7n1FG9L8qX6pGRlkwlNXPkKJe
VGwYAhLndanHD+Z15bVO677ajZjUb3zCjdL5zidW9WMOKcnqZq2TJAMjLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+4nkJJygAjMAuE0PyP7xBtb2FyMB8GA1UdIwQY
MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt
ZTRlNmY4ZDdlNzdjLzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj
LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgo5/wYm
tz8uxLafh75wbcqB0y7HPeGt7owR5MRB8zZbgD3qJhjPlyLaU1/e10/8JuC/TN29
A/bKwORmvXgAqahKo30bH96ahmv0jIovl5xjWLkGzOUwsxAX0YWap6ClGCzmmVIm
h9xqGm2bKBMSmtiNby7dx9gwE2g2AXJIgrd1ubfGpk6WL5uj7mte8jSnYHHKZlf8
Vwzoj8yHrrRpO7bQcAUbeV8SmA6Wnu5BHhGJkqAIFLnWqF5yE5PrvmTlxjA/RBeB
pmYgwF6nOs5sM6QI4AOqn09gHf/bnQ7q0nIeYVDdEwhQit+tNZms/+6RVDUJDUcJ
dzO8MsohOfyQOA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:35:00 2025 by rpki-client