Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
File:                     Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft (raw, json)
Hash identifier:          zfNAUAm6ClSzqxFLRSIorN0dK+0YxmulA3F5Bx6+VYA=
Subject key identifier:   1E:5D:0E:63:03:93:AC:84:D8:4C:40:67:C6:12:10:33:C6:B1:35:C9
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       019D25F121DC497357A4882F235BA4725AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
Manifest number:          0DF8
Signing time:             Wed 25 Mar 2026 17:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:52 +0000
Files and hashes:         1: 04oBM0dgh9sTGQDONT8zC1ZUeKs.roa (hash: a198E2vy3vvQXfsujf/D2u3s7AvcBTuZCtT805HyC1c=)
                          2: 39eACmDFW1g2-B9DlwGLaRK-uO0.roa (hash: tgxi0BRb5Y9zXmRzFS2m/2sav+i6eK2POsugWd54n9Q=)
                          3: Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl (hash: SrzXxIfYSkxnmTJUC6mzIaGSBxFtjuSij0g9/Z37Eog=)
                          4: WrswuEcV-d_8GQCOcKUSxtJxMG4.roa (hash: pKUlGUH4n08dvmWaoC8fikaIrvLNVFngkefG74USMmY=)
                          5: ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa (hash: bYXBLdaB4r96pfWbkmcAKS0XDR9kCdH5qkm7slBxPH8=)
                          6: ZhbmveLspuPhXP9h3zK76QdRgfw.roa (hash: wdIeciZyypaaWX92s7l6NMEi2dWA8lQnhvoZPYkqnKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:21:dc:49:73:57:a4:88:2f:23:5b:a4:72:5a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Mar 25 17:00:52 2026 GMT
            Not After : Mar 26 17:00:52 2026 GMT
        Subject: CN=1e5d0e630393ac84d84c4067c6121033c6b135c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:87:81:d9:55:f4:9b:1b:38:fd:65:ec:93:
                    7b:37:b9:8b:e0:3b:ce:ec:62:b8:1c:df:f1:ab:3a:
                    dd:4b:23:a0:20:08:b8:fa:24:97:ee:27:3c:88:fc:
                    1e:d9:69:ed:39:82:51:7e:96:45:dc:e6:84:6e:97:
                    c6:15:c9:4b:f9:fd:b4:2a:31:19:9f:f2:68:6d:c7:
                    7c:2b:4c:71:3f:e8:33:45:ed:f8:7e:d1:9b:64:df:
                    9e:3c:c2:0d:44:c7:16:0b:13:97:77:f3:46:e0:75:
                    4b:87:fe:b4:38:5e:a3:97:58:c3:ff:a9:05:46:e6:
                    71:3a:8f:18:b9:20:56:f7:80:cc:41:d3:ca:80:9b:
                    ae:38:61:ba:59:7b:77:c9:29:fb:e5:a7:72:fb:aa:
                    69:a4:be:44:20:b7:e8:12:6d:30:38:27:2a:a7:ad:
                    15:b0:52:57:60:46:d0:83:b6:f9:5d:94:cc:58:07:
                    04:03:33:e6:b0:55:57:d6:4f:79:42:16:93:4d:ea:
                    86:e8:92:7e:26:be:6f:05:b7:d3:25:0c:96:74:be:
                    0d:12:0b:d0:0d:23:4f:a1:dd:f6:13:ab:ee:99:c9:
                    b0:ad:82:88:60:a9:c6:94:5d:9a:6d:4c:c7:25:ce:
                    7e:9c:b6:a9:6e:55:4a:1e:5f:2c:6e:0c:22:65:c0:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5D:0E:63:03:93:AC:84:D8:4C:40:67:C6:12:10:33:C6:B1:35:C9
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:48:05:42:32:c7:30:5f:98:3c:dc:16:d4:66:85:fe:da:
         4b:5d:41:d7:40:a6:32:86:45:ba:66:71:63:c2:ac:81:51:29:
         83:a7:5e:35:0c:a3:f9:cb:e7:23:4e:cd:75:dc:19:8f:fd:6d:
         62:b8:0d:fc:39:7e:bc:68:75:2a:d5:5f:da:25:a4:eb:5e:81:
         f9:64:23:9d:b2:c9:bc:4d:32:64:30:1c:9b:57:d9:5d:71:8b:
         95:59:64:f5:16:c2:a5:7c:51:7c:a1:86:84:c9:43:61:74:19:
         79:1d:a6:a4:41:3d:e2:90:53:a6:8f:7a:0c:eb:12:48:34:90:
         ca:2b:91:61:bb:fe:5b:85:04:2e:2b:d0:81:24:06:07:1c:7f:
         67:82:73:c3:86:d3:5f:6c:af:20:11:a0:e2:8b:3c:d6:c3:33:
         67:d6:ba:da:62:92:56:2d:64:2d:59:16:64:7c:56:cd:9d:87:
         69:2b:c4:59:d1:7a:74:32:2c:7e:df:32:35:97:14:1c:25:a0:
         b1:11:46:41:1f:43:63:88:40:2b:aa:f6:49:f7:28:aa:14:71:
         f2:bb:d1:35:a0:d9:a4:d9:ae:a3:c0:88:70:59:d1:03:a6:31:
         29:9b:3a:44:17:db:05:8a:d9:f3:55:e9:87:37:b0:fd:e6:81:
         7d:50:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:58 2026 by rpki-client