Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          zWQ2dpswfcdu+QPgw5Q/IoVTHokRjEA+w286veV2aJA=
Subject key identifier:   E2:74:3D:71:87:0A:3D:89:6E:C5:B5:F7:2E:19:8B:85:19:EE:65:A7
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       01A182625FCA22B39485FDC7F39DF47E3DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          1992
Signing time:             Wed 28 Oct 2026 12:00:47 +0000
Manifest this update:     Wed 28 Oct 2026 12:00:47 +0000
Manifest next update:     Thu 29 Oct 2026 12:00:47 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: ANTz/OxzvceE+c5kkyGLOYFoF8C7WEem1+Qo++EEMfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:62:5f:ca:22:b3:94:85:fd:c7:f3:9d:f4:7e:3d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Oct 28 12:00:47 2026 GMT
            Not After : Oct 29 12:00:47 2026 GMT
        Subject: CN=e2743d71870a3d896ec5b5f72e198b8519ee65a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:13:ea:6c:16:33:20:19:26:6c:11:9d:25:
                    70:c9:a8:0d:e7:cd:93:85:d9:61:a5:ed:f5:ff:a4:
                    d9:32:3c:67:6a:fe:a6:cf:02:6c:92:8a:95:a6:aa:
                    3f:6c:39:65:6c:c6:d9:ea:99:dd:b2:73:82:66:cc:
                    47:25:59:bc:6d:63:78:27:2f:ef:3c:6a:06:d8:30:
                    02:18:72:cf:80:43:fe:1e:41:a8:15:e2:41:7c:f8:
                    cc:28:4f:49:5f:03:d7:01:b0:ba:6c:0b:fb:55:d7:
                    f9:4c:7e:6b:a8:53:bf:cb:2e:b3:be:63:db:8a:fb:
                    f6:ad:95:c2:ba:22:ea:ca:9e:b8:09:e5:f1:a7:75:
                    9d:80:9d:01:6d:aa:6f:06:bf:ec:dd:db:91:7b:ca:
                    88:a0:e7:11:1f:1d:e8:6c:ca:ad:7b:de:be:f1:89:
                    26:c9:a9:82:60:86:1c:14:f8:4b:b3:84:0a:24:56:
                    2a:ed:20:4a:39:17:f1:59:e9:60:af:39:47:50:2b:
                    83:84:9c:cf:e8:b1:05:ee:00:04:b4:88:11:f8:59:
                    31:2b:e5:03:30:94:c5:d2:a4:3e:4c:18:4e:53:05:
                    cd:ab:b1:03:3f:92:8c:be:2e:2c:4b:e7:cb:4c:95:
                    0e:fa:a3:e8:f8:fe:3d:50:2c:e4:b3:38:1b:8a:59:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:3D:71:87:0A:3D:89:6E:C5:B5:F7:2E:19:8B:85:19:EE:65:A7
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:03:8a:3c:49:89:82:91:ac:85:33:64:3d:82:00:3c:1a:
         ff:10:1c:52:c3:e0:b6:88:96:43:77:4d:b1:0d:53:0f:ed:ec:
         05:e5:47:52:fb:d4:d8:2d:f5:87:7e:2b:36:31:ad:a2:60:97:
         be:76:52:1d:c8:27:ec:86:16:08:98:d8:3b:9e:60:18:ed:27:
         95:1e:89:6c:ec:d1:80:55:e8:0d:81:15:0b:dd:15:69:7d:57:
         2f:00:02:e5:5f:8a:d1:9c:76:32:82:00:6a:52:a9:ee:fc:e1:
         76:89:ca:ac:6e:6e:bb:a3:88:4e:16:b6:9b:d3:c2:03:ef:af:
         c3:19:8d:dc:b5:5b:69:9e:3b:da:7d:5d:c8:59:c6:31:36:9f:
         ce:72:de:20:ee:b4:f9:7b:84:ff:24:2f:9c:8a:0d:e7:cf:a1:
         83:54:ba:0b:c4:05:0f:95:d1:f2:c9:01:2e:07:70:80:5a:0f:
         b7:82:75:d6:67:bc:fb:c3:ae:f0:2f:fe:e2:b7:ae:40:9d:6f:
         a4:94:fc:05:80:0c:2d:61:84:e9:7c:a5:c6:a0:12:23:09:76:
         1d:50:13:1e:b5:c0:71:cd:be:f2:7c:e9:b0:d9:8d:e7:1c:03:
         94:27:3f:41:df:35:7f:bd:29:1e:6a:49:cf:42:77:52:a9:c0:
         38:51:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:15:59 2026 by rpki-client