Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier:          C7q314Qii2RORrdEPkB6VhqORCuYWQg9Whc0QEzCVJY=
Subject key identifier:   87:CC:D4:84:F9:43:79:25:2E:F0:CF:E3:89:09:6C:DC:B1:6E:E8:23
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer:       /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial:       019D2A3C50CC01CB87D6705791682FF2AE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number:          1890
Signing time:             Thu 26 Mar 2026 13:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:29 +0000
Files and hashes:         1: 7-IfBeOREFbAdtIR0Nls6fgjGNA.roa (hash: QlNkH+o+xX5oge3OqAOZNG2Y5XgHM8e3tzaKkSNLLl0=)
                          2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: ZFyed0vxCy1DG2dwmRebfAe5nrzmgdOERog80q7sLRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:50:cc:01:cb:87:d6:70:57:91:68:2f:f2:ae:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Validity
            Not Before: Mar 26 13:01:29 2026 GMT
            Not After : Mar 27 13:01:29 2026 GMT
        Subject: CN=87ccd484f94379252ef0cfe389096cdcb16ee823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fe:2e:02:05:8c:d7:ec:28:f7:13:56:6a:de:
                    30:3e:f9:66:96:32:8f:6a:b7:aa:cf:7e:dd:cf:dd:
                    54:a6:35:47:6e:3d:fc:b3:d4:83:6d:d4:12:cb:6f:
                    71:1a:9e:f5:28:82:00:6b:c6:41:c3:7d:92:60:73:
                    6e:f2:64:9e:88:5a:35:d2:46:c6:b6:db:77:42:15:
                    49:e3:8f:0f:b1:a1:6b:1b:2e:9b:f1:d4:c3:03:ca:
                    9d:72:99:6f:6d:fd:de:42:b8:d4:bc:d2:e3:75:74:
                    81:59:e5:98:96:e8:71:1d:ca:c6:75:25:ff:1d:9d:
                    15:42:e3:7c:73:4c:fc:b8:58:76:76:f7:06:ff:15:
                    50:54:83:71:60:79:5d:93:e3:bd:d3:97:b4:1d:65:
                    7a:39:4a:4b:12:c3:5c:71:7c:8c:20:32:51:0f:2b:
                    da:27:cb:54:4a:45:4f:a0:b7:8c:09:48:84:44:22:
                    3f:e2:37:a3:80:26:bf:72:de:50:5c:50:dc:ed:88:
                    9e:96:b8:ff:5d:0f:15:86:22:3b:1f:5c:f3:fb:d0:
                    1d:a3:7a:89:e2:08:12:df:d0:56:9f:69:24:e6:1f:
                    17:cb:11:29:a4:7f:54:94:d8:d3:eb:d1:bd:a0:d1:
                    3d:eb:6e:0f:58:4b:40:99:4e:32:86:cb:0a:80:30:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CC:D4:84:F9:43:79:25:2E:F0:CF:E3:89:09:6C:DC:B1:6E:E8:23
            X509v3 Authority Key Identifier:
                keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:1b:25:96:63:5a:94:c0:05:59:87:45:ca:02:0f:98:36:
         2d:a2:8c:41:e3:13:8b:8b:c1:71:31:51:50:e5:e5:2a:5f:34:
         f5:9b:47:8d:61:a1:6a:de:7f:a1:2b:b8:c7:99:15:9c:69:7d:
         2e:6e:36:a4:b9:f6:01:b4:87:ce:ca:d3:f2:12:c9:0c:72:72:
         21:4e:68:e1:97:e0:c5:c6:1b:47:72:a6:00:2c:ba:79:75:26:
         2a:35:1e:6c:19:83:59:0f:69:df:c6:d9:42:34:dd:80:7e:a5:
         e7:c6:60:bf:41:1a:4e:9c:73:aa:d9:ee:92:69:10:ab:b5:06:
         32:42:c2:9d:dc:a7:87:05:ea:03:75:c8:21:e1:16:62:88:eb:
         15:52:0e:1a:49:62:e8:4a:21:f6:09:a8:e1:9c:77:ee:80:df:
         32:23:83:19:de:67:f4:93:30:5d:c6:d1:42:d4:89:09:62:c9:
         6b:9d:b8:55:8a:3c:39:ef:8d:3d:4b:27:5c:f1:15:a0:cb:d6:
         b8:c9:c0:e6:e5:c0:53:e5:6c:a3:b7:0f:79:50:ca:9f:de:09:
         4d:a0:88:a8:f1:5f:ca:10:8c:f5:2d:df:b8:6f:d7:ee:27:72:
         fc:a2:0a:ba:4f:6c:15:5c:dd:26:32:1a:07:9e:8d:a7:c2:f2:
         df:67:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:50 2026 by rpki-client