Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
File:                     Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft (raw, json)
Hash identifier:          LHrQUz9OmKey8oG5/93UHhzIRGcXOJizF0OZ/AQy1oM=
Subject key identifier:   E9:2D:00:4C:F4:09:7B:7F:B4:63:55:07:6F:D1:54:73:FD:B4:0D:14
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       019C85A7325E583723DB1313E8A347928DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
Manifest number:          0DA5
Signing time:             Sun 22 Feb 2026 14:00:52 +0000
Manifest this update:     Sun 22 Feb 2026 14:00:52 +0000
Manifest next update:     Mon 23 Feb 2026 14:00:52 +0000
Files and hashes:         1: 04oBM0dgh9sTGQDONT8zC1ZUeKs.roa (hash: a198E2vy3vvQXfsujf/D2u3s7AvcBTuZCtT805HyC1c=)
                          2: 39eACmDFW1g2-B9DlwGLaRK-uO0.roa (hash: tgxi0BRb5Y9zXmRzFS2m/2sav+i6eK2POsugWd54n9Q=)
                          3: Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl (hash: WcOCsuoDrf44ZRNQFfcmEKNvjmNP0nbNdK3nhVlbd7g=)
                          4: WrswuEcV-d_8GQCOcKUSxtJxMG4.roa (hash: pKUlGUH4n08dvmWaoC8fikaIrvLNVFngkefG74USMmY=)
                          5: ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa (hash: bYXBLdaB4r96pfWbkmcAKS0XDR9kCdH5qkm7slBxPH8=)
                          6: ZhbmveLspuPhXP9h3zK76QdRgfw.roa (hash: wdIeciZyypaaWX92s7l6NMEi2dWA8lQnhvoZPYkqnKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:85:a7:32:5e:58:37:23:db:13:13:e8:a3:47:92:8d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Feb 22 14:00:52 2026 GMT
            Not After : Feb 23 14:00:52 2026 GMT
        Subject: CN=e92d004cf4097b7fb46355076fd15473fdb40d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:19:b8:3c:9f:bb:38:dc:e7:63:a6:05:0c:
                    b4:2c:3f:35:9f:7a:92:07:fa:04:2b:63:a3:da:de:
                    dc:81:87:f8:34:15:18:28:5e:88:7c:8c:9f:9c:d1:
                    1f:fd:25:f7:b9:0b:50:2b:0f:cb:ee:c0:48:e3:d2:
                    14:a9:78:53:2e:4b:aa:e5:bc:a6:10:57:d0:69:c3:
                    a9:4f:e5:78:8e:fe:dd:98:e1:0d:0e:f7:84:1f:0d:
                    c2:ba:33:9b:62:28:62:dd:11:58:a5:90:8c:b8:cc:
                    6c:d1:cd:5d:77:e3:0c:01:ab:cb:df:85:04:b1:28:
                    b2:dd:c8:6f:10:5f:f1:ae:67:f7:48:b4:02:e9:03:
                    e2:37:59:1c:7e:6a:3b:ad:2a:21:47:f3:9e:87:fd:
                    54:51:13:9a:42:02:f1:f9:53:af:e3:2b:90:0a:3f:
                    99:89:a2:0b:8d:31:ce:f1:9a:57:0d:44:6a:a7:47:
                    08:ee:cd:c3:1b:97:db:9b:0d:8d:8b:4b:c9:8f:1c:
                    2d:9c:e8:f6:fc:e1:63:dd:94:52:f8:a3:7e:20:08:
                    d3:80:77:e3:d8:1a:a5:95:67:7a:2a:2b:da:5c:0f:
                    ce:94:a3:c4:9c:0d:fe:22:cc:39:89:7c:94:16:c2:
                    aa:3b:b1:1d:cd:98:b9:1f:97:31:35:3d:81:a5:36:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:00:4C:F4:09:7B:7F:B4:63:55:07:6F:D1:54:73:FD:B4:0D:14
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6f:01:55:d3:c0:c5:01:3b:c5:ea:be:e4:6e:64:5f:13:71:
         a0:dc:64:9a:3a:d0:db:4e:cb:df:38:75:f3:6e:4d:43:d1:0b:
         87:53:21:4a:21:3a:25:ae:c3:1b:68:47:33:bc:49:19:20:32:
         e6:81:2f:04:30:09:9d:40:a7:2c:3e:f1:f8:38:1d:77:b0:ec:
         ae:2c:d7:a3:b0:7b:a4:47:a9:c2:cd:45:dc:d4:03:3b:09:da:
         61:ea:0b:21:d3:6d:70:ca:03:79:1c:d6:3b:9a:a8:cd:ef:b1:
         60:dc:66:fd:06:d7:07:a6:98:9a:b5:2c:a7:56:f8:c3:4a:06:
         b9:6a:b9:43:17:a4:21:1d:2a:a9:52:91:49:35:9c:63:dc:60:
         05:98:a4:eb:a9:fa:42:2b:dc:72:ad:e3:cb:2f:51:59:64:a2:
         57:16:f8:3b:4d:4f:44:2e:ff:7a:3a:8c:ca:a0:13:d7:93:ca:
         d1:b4:96:8f:4d:6d:df:68:79:33:16:ab:75:f6:91:1a:61:84:
         d8:f2:ad:50:7c:83:0d:25:ca:68:aa:e5:35:8c:90:9b:3d:b7:
         81:7f:b6:2e:b6:f1:a6:65:5d:31:24:83:32:c4:42:e7:27:94:
         9a:3e:fa:10:73:eb:dc:02:10:1a:c5:ec:7d:f4:39:41:23:0b:
         c3:a6:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 23:27:02 2026 by rpki-client