Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          i20XGpxLO7HlSiIsDzGWdNEfTeKzNb+SCLh+6fDKy0g=
Subject key identifier:   04:53:DA:83:72:30:E0:1A:7D:20:72:E8:BE:FC:3D:91:27:CB:A0:C2
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       01A13F70D8F4BD04EFE1CBF61D4B351EAA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 12:02:02 +0000
Manifest this update:     Thu 15 Oct 2026 12:02:02 +0000
Manifest next update:     Fri 16 Oct 2026 12:02:02 +0000
Files and hashes:         1: 0bon_9lO1_1S4Y0uUolP8XU5FaI.roa (hash: FJ2QehHtFtcd71ZjMQZfutk+NRAwO7uiNlxtBcCUL2k=)
                          2: M5KrEv-LXY9aqDpf0oBaroxnaNM.roa (hash: ODb7IQwgK6VivONUorfGDOs27Z/Iob0YPAAPCKFTYtA=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: oQXwAAtoOSXDPYoeNGmcBNQ4KlzNKjg2mrAPH/ts2dU=)
                          4: X2nbl9YTm7FxIB6Rb3FUGGo7Nik.roa (hash: kl4ZxjvBckT5S60Wg8CYwH2W75wDsDdQoiDGr/t5yxQ=)
                          5: uC-qKkxICY7vZwEQrGmhDJDMiDU.roa (hash: YuDasb2hKsUu4M7RFAlrFvessaLsAmNOCaH9378WVUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:d8:f4:bd:04:ef:e1:cb:f6:1d:4b:35:1e:aa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Oct 15 12:02:02 2026 GMT
            Not After : Oct 16 12:02:02 2026 GMT
        Subject: CN=0453da837230e01a7d2072e8befc3d9127cba0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:11:d2:da:af:d8:1a:71:b6:a9:0a:be:51:
                    e1:be:07:47:97:77:6d:1e:61:68:ad:d9:a1:52:76:
                    eb:a4:b7:4e:21:a8:bc:e2:11:c4:e9:59:c1:69:b7:
                    bc:1a:7b:d8:dc:f3:58:58:2a:09:d9:e7:4b:90:80:
                    06:e2:8d:9a:53:76:ac:a5:2b:7c:cf:e7:9e:ed:36:
                    ad:37:a0:5c:b7:b6:5a:5b:fb:fb:84:15:ee:27:fc:
                    fb:9e:d6:53:30:2a:f8:10:f4:47:fb:46:df:f0:31:
                    cc:d0:e0:ab:6f:d1:82:a6:5f:09:8a:1e:e6:fd:63:
                    a4:1d:9f:ad:67:9b:7f:28:77:4d:13:be:6a:87:e0:
                    d1:b6:d5:bf:19:6c:2b:08:35:43:36:57:f8:b4:29:
                    6d:98:39:de:0f:a9:7e:c0:3f:dc:ea:e7:bb:db:b8:
                    57:ff:6c:18:c4:ae:3b:23:f0:22:0c:03:5b:a2:db:
                    ee:dc:c3:d3:80:a3:05:39:cb:d0:d1:01:ec:d4:0a:
                    93:a5:fc:e1:1e:1f:b4:b3:d6:92:8b:97:b3:51:d3:
                    52:b3:5c:5f:c9:5c:e4:f8:0b:6c:8f:33:f9:36:94:
                    a1:f4:cd:75:f3:1c:b3:8d:80:99:2e:14:ac:69:62:
                    d4:cd:92:38:0c:28:e6:a9:26:13:ce:f7:66:6e:7b:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:53:DA:83:72:30:E0:1A:7D:20:72:E8:BE:FC:3D:91:27:CB:A0:C2
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:6f:c6:bf:87:cd:73:f0:1b:d0:33:f5:71:ea:be:6c:fd:
         53:cc:93:87:ea:bc:24:25:91:f5:dd:8c:c0:53:7e:05:fe:c8:
         bd:a5:1f:9b:1a:6c:d4:13:1c:80:29:8d:64:ef:6d:fc:a4:ff:
         98:7f:fe:a0:55:fd:e3:c7:e3:27:fa:a3:4b:f9:fa:b5:02:82:
         76:af:3c:68:6b:4c:94:4c:b8:27:e1:a2:df:3e:a5:eb:1a:1a:
         d6:5f:8f:61:50:0f:8d:8f:35:18:d1:9e:7b:8b:4b:65:4f:05:
         cb:a7:8a:0a:00:c5:b3:9a:8a:c0:2a:0d:84:b2:8d:f0:cb:3c:
         45:05:1e:17:59:bb:86:5d:ee:91:db:6c:63:ff:78:15:4f:c4:
         8c:82:32:8b:a1:35:52:08:00:2b:26:d5:bc:0b:25:a1:07:a9:
         87:4d:80:c9:ce:ae:39:05:79:82:5f:55:db:e8:2d:64:1b:14:
         6c:99:b4:94:9b:5c:81:be:9a:71:6c:17:2f:e3:de:4b:8f:d4:
         b3:16:dd:b0:e3:a3:e5:05:d0:8b:b8:83:3f:02:37:ff:27:9e:
         f1:70:2d:de:d8:c0:a2:77:0b:f6:0d:63:18:56:0e:9c:3a:5f:
         86:7a:da:71:10:38:77:0e:5b:5f:1e:22:df:77:85:66:08:86:
         a2:12:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:12 2026 by rpki-client