Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File:                     ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier:          5M5d4uVZA92pnNJygsSCJUoVQ1G1UWv7Lm6m8vmPxH0=
Subject key identifier:   F6:3F:6C:34:E8:BF:C4:75:98:4B:E9:25:62:2C:75:32:80:2D:B1:59
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer:       /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial:       01A003267D92F99A5A238AF00533E9E770CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number:          0E9A
Signing time:             Sat 15 Aug 2026 02:00:49 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:49 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:49 +0000
Files and hashes:         1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
                          2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: xolFonL+wKrRMTb+ai7mDXv+KcxXzGlarg5G0et1pkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:7d:92:f9:9a:5a:23:8a:f0:05:33:e9:e7:70:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
        Validity
            Not Before: Aug 15 02:00:49 2026 GMT
            Not After : Aug 16 02:00:49 2026 GMT
        Subject: CN=f63f6c34e8bfc475984be925622c7532802db159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:ce:fd:43:98:44:2b:49:1f:26:94:5e:77:
                    cd:e7:a5:8b:99:54:23:58:04:6c:1b:44:6f:ba:70:
                    b7:35:33:5f:c4:3c:f1:33:1f:5a:77:4d:53:4f:aa:
                    e1:53:c5:bf:7a:74:ee:18:7d:f3:59:f3:c2:0a:ad:
                    11:26:14:b2:2e:40:f1:66:29:61:93:c5:23:f2:85:
                    18:f1:95:56:e6:c7:5d:f2:8f:d9:ae:9a:1d:53:61:
                    14:dd:fb:ab:81:3a:6c:b7:d4:8c:59:58:41:5d:54:
                    54:9c:63:4d:c4:99:e5:40:72:2a:b7:b8:96:1c:c7:
                    a6:00:43:d5:7e:50:a3:2c:90:57:60:b1:c8:15:85:
                    16:b7:19:2e:7e:8a:27:da:5c:db:98:e9:87:a4:41:
                    d1:d7:58:27:7a:e2:28:53:93:4d:3c:ea:2d:37:da:
                    5b:f1:2d:88:2d:aa:51:17:3e:bc:76:96:0f:18:f9:
                    57:29:07:3d:26:56:c0:33:76:09:0e:fe:37:98:da:
                    7e:50:8f:8c:80:51:4d:42:ee:9c:92:82:9d:fd:43:
                    da:62:f5:4c:49:94:3c:43:f2:da:c2:b5:d7:41:c8:
                    86:11:21:4c:c1:e7:77:15:37:18:6e:cb:83:5a:f8:
                    0d:61:86:95:5b:e1:c1:ba:18:59:ae:4f:59:41:3d:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:6C:34:E8:BF:C4:75:98:4B:E9:25:62:2C:75:32:80:2D:B1:59
            X509v3 Authority Key Identifier:
                keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:14:76:3b:f8:68:28:76:ec:1e:fa:05:ce:ac:96:6d:cc:
         4c:5a:40:84:32:40:d8:e9:15:c8:29:ca:fe:5f:4b:f0:65:96:
         68:a8:1b:a3:36:62:e9:76:43:b0:ff:e7:e0:70:ed:32:63:84:
         0d:18:ed:8d:74:61:9d:a5:31:f7:7e:90:54:dd:94:66:3c:95:
         70:fe:74:da:12:9d:1f:56:85:2e:f4:1e:13:7b:e2:b7:57:74:
         db:0f:8f:4c:22:fb:84:c3:27:93:d9:56:d9:0f:66:90:71:cc:
         f4:b6:4d:02:2f:be:0e:50:e1:4b:a1:51:1c:82:17:1a:3f:74:
         89:e1:24:bf:b5:68:1c:c3:85:5f:b8:e0:3d:4a:d9:4e:65:20:
         9d:92:a8:75:a0:69:d3:47:fb:d5:da:9b:ed:dc:dc:73:ad:9e:
         59:21:35:5f:48:d2:f9:e7:1d:31:e0:e9:53:a9:55:46:d2:81:
         57:4c:9d:f9:a0:f6:99:82:cd:7c:77:d0:05:e8:72:b7:1d:77:
         3c:52:d2:71:98:15:45:88:f0:c6:e0:2d:fe:14:b9:4d:42:3f:
         a9:ac:4b:a1:71:6e:7a:e8:9d:52:c6:d6:e6:6d:6c:c7:b2:70:
         9b:a3:6e:28:3e:79:a5:a9:f8:36:7d:c2:f8:85:fd:0f:8b:18:
         93:29:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:55 2026 by rpki-client