Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          NbSc203rdOE0HOZu2T5JNajPRlnPSaEouRCPynkdzto=
Subject key identifier:   26:24:0D:E9:9B:21:37:CD:02:EC:1A:1E:C2:19:0C:2D:93:16:C4:68
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       01A00394E6D8E460B0D61B33DCE8F4354336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          04FF
Signing time:             Sat 15 Aug 2026 04:01:24 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:24 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:24 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: WLeQ1gNCbqEe/ikzAdUnNjiHFd7IduDjosq7s9AA+t0=)
                          2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:e6:d8:e4:60:b0:d6:1b:33:dc:e8:f4:35:43:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Aug 15 04:01:24 2026 GMT
            Not After : Aug 16 04:01:24 2026 GMT
        Subject: CN=26240de99b2137cd02ec1a1ec2190c2d9316c468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:a6:4b:0c:2a:53:29:21:8f:9a:21:be:a8:
                    03:73:7c:a0:9d:9a:54:3c:37:3c:d8:37:c1:88:50:
                    29:5a:1e:4a:1e:5e:3a:99:6c:05:a2:4a:e8:66:37:
                    39:dd:58:75:c6:f7:07:02:51:01:3b:1e:33:27:b3:
                    a0:a1:14:39:19:9f:fd:c0:77:a5:25:4c:33:7c:0b:
                    a6:99:31:ef:45:02:43:01:e3:e1:56:a2:94:65:bc:
                    af:46:13:24:1e:0d:20:85:97:b8:69:f0:9c:cd:ef:
                    90:31:4f:8f:c1:46:d0:bf:89:cd:39:3a:a0:78:e4:
                    51:e5:44:8c:27:d2:55:46:5d:8a:e9:2d:ed:49:fc:
                    fb:b3:f8:d7:66:4f:f7:45:5e:6b:95:dd:5f:ab:ed:
                    ad:c5:50:a7:cf:f8:93:af:f2:a6:44:38:cf:11:c1:
                    15:ea:38:24:3b:ff:70:b2:20:30:50:5f:c0:30:39:
                    c6:ea:3e:ec:6d:25:b3:97:01:91:9e:f0:74:e4:7d:
                    fe:b0:d2:ae:00:af:66:48:2d:f0:95:4d:97:5b:56:
                    0a:9e:08:6d:7a:87:c6:68:96:28:64:b4:d0:af:2e:
                    65:5e:ad:7f:14:fc:fc:be:ab:05:f2:7f:9f:52:0d:
                    12:fb:ae:de:53:ec:21:ad:26:e5:f4:1a:97:a9:7a:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:0D:E9:9B:21:37:CD:02:EC:1A:1E:C2:19:0C:2D:93:16:C4:68
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:9e:12:7d:77:dc:47:30:10:af:67:d4:51:51:12:96:ec:a2:
         45:c0:d6:d6:af:b5:1e:73:2f:e3:06:a0:d3:d6:06:fc:1b:f1:
         3d:26:0f:3c:22:35:52:15:a9:c7:05:3f:d5:c5:8b:2f:23:8c:
         56:b1:80:d1:b0:da:86:93:7d:27:7b:51:3a:e5:a7:f4:f4:44:
         6f:ef:34:af:f2:c1:08:75:67:44:bf:3f:84:87:f9:37:74:94:
         f9:8e:eb:a3:fb:21:09:34:4e:67:48:ec:36:30:b4:8b:0f:71:
         c8:b6:2f:bc:45:dd:62:a1:38:2c:c0:74:bb:2d:d7:00:72:c3:
         ef:86:c8:c0:34:c2:08:bd:33:44:7a:1f:83:82:93:c8:77:cf:
         e4:53:2f:c8:ab:69:43:b4:0a:47:38:a1:56:c8:98:a8:57:bd:
         dd:52:03:4f:fe:18:0f:aa:f9:3e:5b:67:6a:a7:dd:60:8d:0a:
         a6:34:56:6a:ca:59:50:11:fe:6e:49:3a:ff:68:41:2c:75:a8:
         c5:84:bb:4a:42:64:47:ce:06:1e:9b:a1:20:40:1b:8d:2a:d4:
         21:8a:be:56:e9:03:b0:d4:e0:9e:17:0e:ec:a3:83:f2:8b:a6:
         94:67:dc:8a:50:b3:de:47:2a:99:6a:bb:fa:59:10:d3:19:74:
         15:ff:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:58:18 2026 by rpki-client