Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
File:                     RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json)
Hash identifier:          QM9KXsf8JFw+EiE7ftyA4L/8YiEyFfFRDDHcyZKjMX4=
Subject key identifier:   05:0B:EF:87:E3:1F:B9:66:1B:D4:96:01:FE:48:AF:B0:15:2A:A4:B5
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Certificate issuer:       /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial:       019D26281682B2399507C050195BF4E3165A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
Manifest number:          0506
Signing time:             Wed 25 Mar 2026 18:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:54 +0000
Files and hashes:         1: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: WySprjC7bWtsFJLDZli2NF5XXC8jMIQ7AwlXsnWkYIU=)
                          2: visYnsWssq-v4yl52IlMFPrlMUk.roa (hash: Qj6uck81QSogg2iX6yeaIJc7cuAtBsJX3p/4Z4VS0Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:16:82:b2:39:95:07:c0:50:19:5b:f4:e3:16:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
        Validity
            Not Before: Mar 25 18:00:54 2026 GMT
            Not After : Mar 26 18:00:54 2026 GMT
        Subject: CN=050bef87e31fb9661bd49601fe48afb0152aa4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:ea:2f:ca:f4:a8:5c:86:77:a8:65:ff:79:
                    f4:89:cd:0e:6a:d1:87:d3:9a:c5:99:39:7e:ad:a8:
                    46:9e:02:bb:2c:e7:13:86:8d:85:29:c6:45:d3:79:
                    3c:c2:ad:5b:e7:0d:8d:66:2c:c2:87:cc:80:cf:2c:
                    f0:06:cd:14:d8:64:f6:6c:bc:b1:37:25:b1:fa:bf:
                    40:62:ae:3b:6b:c5:74:e8:a1:50:51:d3:6e:42:92:
                    81:cc:07:27:a8:b3:ae:ae:4e:b1:62:71:97:c3:c4:
                    01:66:ba:70:ef:4b:10:e9:9d:1b:50:42:7a:88:ca:
                    d9:a7:fa:11:7d:0d:a7:ba:03:9b:c8:f9:cd:91:db:
                    9c:06:7a:b5:70:15:08:6c:d6:fb:35:04:74:af:57:
                    4b:71:9f:df:fb:e9:e3:ac:f9:07:da:db:5b:8f:1e:
                    6c:cd:e8:bd:ce:5d:b7:39:76:a9:e0:c4:77:5e:32:
                    46:e4:57:85:e7:0e:7f:0c:d2:35:3e:32:5e:a5:70:
                    16:b0:35:c3:95:53:15:be:a2:02:dd:e1:9c:37:ed:
                    0f:5d:53:bd:35:5d:01:ef:50:07:ac:e8:05:90:62:
                    66:0a:dc:76:81:6d:4e:50:c9:2c:01:f6:c6:4f:38:
                    19:72:b6:99:91:cd:ab:3e:99:80:ba:f9:8c:58:2c:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0B:EF:87:E3:1F:B9:66:1B:D4:96:01:FE:48:AF:B0:15:2A:A4:B5
            X509v3 Authority Key Identifier:
                keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:14:4d:9d:66:9d:9e:03:d1:8a:73:1a:16:c1:71:0a:52:
         c9:ee:ec:d7:61:16:b9:e8:c8:a2:13:0f:1a:5e:58:08:48:11:
         d4:6b:81:c5:8f:e2:bd:cd:cc:c0:44:a5:d2:ca:98:b5:a0:97:
         b1:05:7b:b5:4c:39:3c:95:86:ea:3c:68:1d:48:30:0b:ed:0f:
         b9:49:42:62:ba:0e:e3:8d:50:78:5a:ea:5c:1a:85:98:a8:be:
         9f:d0:9e:c8:90:3b:97:d7:7f:b3:6a:1d:b8:bf:f1:dc:bf:39:
         4d:36:40:1d:bc:75:ce:9c:56:76:62:93:12:85:67:95:87:1f:
         4d:95:cd:7b:e0:f7:34:76:cf:79:37:8f:33:ed:4b:72:37:d8:
         47:f1:62:ef:80:47:04:44:4a:1c:b9:6e:b0:d9:7b:e1:a3:af:
         ff:7b:a7:ee:96:34:d4:74:81:19:bf:e7:be:3c:f9:9c:b5:a8:
         f3:6e:45:20:e7:52:f4:46:67:75:29:32:4e:e2:22:29:d7:2e:
         c6:a0:49:1c:b9:98:54:3d:3a:15:cf:24:0a:e0:8d:22:15:6a:
         5d:a3:74:55:7b:d4:1f:46:f6:01:19:81:72:3b:40:81:b1:7a:
         49:31:66:8d:5c:5a:1b:16:6d:78:6e:1f:1f:58:f7:4f:6f:7a:
         e9:c7:8b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKBaCsjmVB8BQGVv04xZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZTUzMjMwYWU3Y2Y2ODY4YWE2ODNiNjI0YjU5YTgxMTg4
OGYwYmEwHhcNMjYwMzI1MTgwMDU0WhcNMjYwMzI2MTgwMDU0WjAzMTEwLwYDVQQD
EygwNTBiZWY4N2UzMWZiOTY2MWJkNDk2MDFmZTQ4YWZiMDE1MmFhNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhLqL8r0qFyGd6hl/3n0ic0OatGH
05rFmTl+rahGngK7LOcTho2FKcZF03k8wq1b5w2NZizCh8yAzyzwBs0U2GT2bLyx
NyWx+r9AYq47a8V06KFQUdNuQpKBzAcnqLOurk6xYnGXw8QBZrpw70sQ6Z0bUEJ6
iMrZp/oRfQ2nugObyPnNkducBnq1cBUIbNb7NQR0r1dLcZ/f++njrPkH2ttbjx5s
zei9zl23OXap4MR3XjJG5FeF5w5/DNI1PjJepXAWsDXDlVMVvqIC3eGcN+0PXVO9
NV0B71AHrOgFkGJmCtx2gW1OUMksAfbGTzgZcraZkc2rPpmAuvmMWCxKBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUL74fjH7lmG9SWAf5Ir7AVKqS1MB8GA1UdIwQY
MBaAFEblMjCufPaGiqaDtiS1moEYiPC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEt
MjMyMjQwM2VjNzg3LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEtMjMyMjQwM2VjNzg3
LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/EUTZ1m
nZ4D0YpzGhbBcQpSye7s12EWuejIohMPGl5YCEgR1GuBxY/ivc3MwESl0sqYtaCX
sQV7tUw5PJWG6jxoHUgwC+0PuUlCYroO441QeFrqXBqFmKi+n9CeyJA7l9d/s2od
uL/x3L85TTZAHbx1zpxWdmKTEoVnlYcfTZXNe+D3NHbPeTePM+1LcjfYR/Fi74BH
BERKHLlusNl74aOv/3un7pY01HSBGb/nvjz5nLWo825FIOdS9EZndSkyTuIiKdcu
xqBJHLmYVD06Fc8kCuCNIhVqXaN0VXvUH0b2ARmBcjtAgbF6STFmjVxaGxZteG4f
H1j3T2966ceL4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:10 2026 by rpki-client