Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
File:                     Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft (raw, json)
Hash identifier:          hW3yILuXQyqjKY9ZJWsLkIF20bw55VvIxMaiAXXY/gQ=
Subject key identifier:   8A:3A:79:17:D3:F1:B8:33:32:AC:D2:66:40:D1:7E:7B:BF:A3:64:85
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       01A0CE91FA8B65B39228C40269B1EFD84E9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
Manifest number:          0FDD
Signing time:             Wed 23 Sep 2026 14:01:08 +0000
Manifest this update:     Wed 23 Sep 2026 14:01:08 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:08 +0000
Files and hashes:         1: 04oBM0dgh9sTGQDONT8zC1ZUeKs.roa (hash: a198E2vy3vvQXfsujf/D2u3s7AvcBTuZCtT805HyC1c=)
                          2: 39eACmDFW1g2-B9DlwGLaRK-uO0.roa (hash: tgxi0BRb5Y9zXmRzFS2m/2sav+i6eK2POsugWd54n9Q=)
                          3: Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl (hash: A0DqCWnLpPohp/JzPSOVRD4f/F1lRD4yN6lYCj4SAF8=)
                          4: WrswuEcV-d_8GQCOcKUSxtJxMG4.roa (hash: pKUlGUH4n08dvmWaoC8fikaIrvLNVFngkefG74USMmY=)
                          5: ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa (hash: bYXBLdaB4r96pfWbkmcAKS0XDR9kCdH5qkm7slBxPH8=)
                          6: ZhbmveLspuPhXP9h3zK76QdRgfw.roa (hash: wdIeciZyypaaWX92s7l6NMEi2dWA8lQnhvoZPYkqnKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:fa:8b:65:b3:92:28:c4:02:69:b1:ef:d8:4e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Sep 23 14:01:08 2026 GMT
            Not After : Sep 24 14:01:08 2026 GMT
        Subject: CN=8a3a7917d3f1b83332acd26640d17e7bbfa36485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:77:3a:ac:56:34:51:f2:c1:d4:48:23:fa:
                    00:a6:b3:15:09:c2:c9:57:16:f3:bc:eb:ab:d6:39:
                    8f:a9:86:8d:a6:13:ae:cc:60:ab:3a:fa:33:f5:24:
                    d6:06:5a:05:b6:40:2b:1d:b3:18:1e:b8:dd:44:37:
                    64:33:51:91:cb:58:7f:d7:fb:b3:25:69:f0:0e:6e:
                    d3:25:15:3a:c4:c1:66:28:fe:5f:aa:18:30:c2:5c:
                    56:29:92:94:8e:bd:5c:b9:71:3c:16:5a:dd:88:c0:
                    8d:ff:5f:ca:45:25:8b:f9:8d:63:30:48:f4:7f:d1:
                    63:b0:9d:c2:59:48:2f:b4:f8:66:1b:44:4c:3a:52:
                    f3:cf:10:98:3b:cb:eb:17:d0:79:9c:35:d4:f0:4f:
                    52:da:19:91:03:d3:73:7e:0e:3a:fc:cc:53:f1:3e:
                    6d:8c:4f:8c:0c:50:70:b6:6d:d8:12:4b:1d:c1:77:
                    25:84:6a:28:44:2f:0d:e3:02:24:f1:d6:e5:f0:65:
                    e0:83:67:b9:a2:87:6a:ba:2e:e2:49:91:1c:ae:55:
                    7d:2b:28:27:29:b6:35:61:de:bc:24:26:b8:21:79:
                    3d:09:2d:d1:f6:80:ad:00:10:d4:e2:d7:93:6a:fe:
                    b3:5a:47:a7:a0:e0:25:6a:89:b1:96:5f:57:36:8c:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:79:17:D3:F1:B8:33:32:AC:D2:66:40:D1:7E:7B:BF:A3:64:85
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:bb:07:eb:04:9b:7e:b6:2b:45:15:50:5b:50:1e:ca:3b:
         53:69:19:2b:c9:7f:69:82:a2:64:ca:e6:68:77:e9:55:a0:c8:
         d3:2d:ea:b3:c9:2a:b8:04:c9:74:55:9b:3a:9d:ef:85:01:b8:
         07:fa:36:23:7e:3b:b5:83:af:1b:14:1b:17:38:30:1e:fd:ec:
         3c:30:80:71:6f:ff:b5:2e:c4:d3:b3:f1:83:8d:ed:8e:72:90:
         4c:57:85:ed:4e:85:14:ec:00:27:19:8d:43:dc:58:6d:6c:be:
         10:53:a8:0e:d7:7f:9c:5b:48:2a:a8:55:0d:60:1b:d9:c0:fa:
         1b:5d:f6:a7:97:e0:78:be:f6:81:a9:3a:93:41:46:c1:98:44:
         c5:67:49:40:a6:d4:b5:5b:ac:86:29:89:cc:41:b8:a0:da:44:
         f5:e5:32:af:cb:cc:c1:fb:9c:26:4e:80:63:b3:08:59:23:0b:
         94:e8:7d:df:d4:12:d4:26:b1:e6:b4:21:27:e3:94:e8:00:0b:
         a5:08:22:a2:ef:7d:bd:26:6a:37:da:e5:f4:5f:6b:f0:31:ff:
         99:55:08:b1:71:4b:1d:2c:ef:3a:23:c0:8e:97:dc:0c:0c:99:
         92:74:34:70:40:85:99:97:c8:92:84:d4:f3:f6:f2:45:ae:e2:
         75:71:45:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkfqLZbOSKMQCabHv2E6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx
ZGQ2ZTAwHhcNMjYwOTIzMTQwMTA4WhcNMjYwOTI0MTQwMTA4WjAzMTEwLwYDVQQD
Eyg4YTNhNzkxN2QzZjFiODMzMzJhY2QyNjY0MGQxN2U3YmJmYTM2NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8J3OqxWNFHywdRII/oAprMVCcLJ
VxbzvOur1jmPqYaNphOuzGCrOvoz9STWBloFtkArHbMYHrjdRDdkM1GRy1h/1/uz
JWnwDm7TJRU6xMFmKP5fqhgwwlxWKZKUjr1cuXE8FlrdiMCN/1/KRSWL+Y1jMEj0
f9FjsJ3CWUgvtPhmG0RMOlLzzxCYO8vrF9B5nDXU8E9S2hmRA9Nzfg46/MxT8T5t
jE+MDFBwtm3YEksdwXclhGooRC8N4wIk8dbl8GXgg2e5oodqui7iSZEcrlV9Kygn
KbY1Yd68JCa4IXk9CS3R9oCtABDU4teTav6zWkenoOAlaomxll9XNozDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo6eRfT8bgzMqzSZkDRfnu/o2SFMB8GA1UdIwQY
MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt
ZDdjNjcwODQxNGZhLzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh
LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNG7B+sE
m362K0UVUFtQHso7U2kZK8l/aYKiZMrmaHfpVaDI0y3qs8kquATJdFWbOp3vhQG4
B/o2I347tYOvGxQbFzgwHv3sPDCAcW//tS7E07Pxg43tjnKQTFeF7U6FFOwAJxmN
Q9xYbWy+EFOoDtd/nFtIKqhVDWAb2cD6G132p5fgeL72gak6k0FGwZhExWdJQKbU
tVushimJzEG4oNpE9eUyr8vMwfucJk6AY7MIWSMLlOh939QS1Cax5rQhJ+OU6AAL
pQgiou99vSZqN9rl9F9r8DH/mVUIsXFLHSzvOiPAjpfcDAyZknQ0cECFmZfIkoTU
8/byRa7idXFFoQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:04:14 2026 by rpki-client