Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier:          6vOHVEDSDh/MRX7udpxxxrTDF+rPNZm/CFXjJqtqy+Q=
Subject key identifier:   0A:01:C7:20:AC:42:2E:3A:D9:84:EE:AD:90:BB:D4:4D:01:0B:D2:48
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer:       /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial:       019F1A8CFA14F2FB4AA967DA0B5CF6C99341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number:          1991
Signing time:             Tue 30 Jun 2026 22:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 22:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 22:01:14 +0000
Files and hashes:         1: 7-IfBeOREFbAdtIR0Nls6fgjGNA.roa (hash: QlNkH+o+xX5oge3OqAOZNG2Y5XgHM8e3tzaKkSNLLl0=)
                          2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: E7F9vVvI3zADP38Lyl6w0dcR4nJHylLZjukxFCSrInE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8c:fa:14:f2:fb:4a:a9:67:da:0b:5c:f6:c9:93:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Validity
            Not Before: Jun 30 22:01:14 2026 GMT
            Not After : Jul  1 22:01:14 2026 GMT
        Subject: CN=0a01c720ac422e3ad984eead90bbd44d010bd248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:16:94:6f:68:1e:67:a5:74:b7:6d:bb:de:
                    4b:83:a1:18:be:83:62:70:c7:e0:0c:36:ff:3e:a6:
                    a3:aa:d1:f2:7a:d7:77:4f:08:0f:37:a1:64:6d:c8:
                    98:42:9f:2f:5b:ee:97:c9:10:f7:e7:1a:7f:4a:7a:
                    3e:32:24:64:92:b9:25:b1:3e:e9:69:fa:d7:4a:62:
                    cf:0c:fd:63:03:51:b0:36:26:f3:41:64:93:d3:24:
                    0f:18:fc:b6:cb:90:51:28:04:44:64:23:95:66:24:
                    26:11:d0:8b:4f:bb:fe:6e:d4:8d:0d:28:79:eb:96:
                    eb:08:55:41:85:3d:cd:79:56:aa:3c:b3:0e:0c:a9:
                    41:d3:8c:cd:57:99:b7:50:78:79:55:57:6d:3b:68:
                    d8:31:72:8d:49:82:92:e0:bf:60:c2:87:2b:3a:6b:
                    90:45:74:fa:2e:7c:fd:28:6f:56:9e:db:e5:67:e8:
                    05:6f:4a:22:52:09:76:5a:b8:68:32:9a:02:61:65:
                    1a:17:22:49:f6:5b:17:22:9a:06:e9:b6:e7:85:0a:
                    8c:cf:8a:4e:58:73:3e:a8:dc:64:65:f2:f0:31:1d:
                    b7:ad:28:91:31:98:6c:9f:c4:b6:19:23:7f:e0:9c:
                    fe:c6:12:6d:18:cf:32:04:24:ff:06:ec:03:c9:96:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:01:C7:20:AC:42:2E:3A:D9:84:EE:AD:90:BB:D4:4D:01:0B:D2:48
            X509v3 Authority Key Identifier:
                keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:5d:59:0f:8b:23:1e:0e:c8:bd:22:fd:9f:0a:f9:03:d5:
         0b:08:57:4a:40:7d:27:f8:50:66:13:a0:5d:78:11:d6:f8:50:
         e7:ed:ef:a0:fc:5b:06:4f:70:0a:09:ae:36:03:40:b3:7a:97:
         4a:91:99:b7:2e:ab:84:b9:52:e5:d8:45:9f:74:bb:42:99:b2:
         02:79:73:5a:d5:8a:7c:40:6e:ff:f9:4b:a6:9e:80:36:03:7d:
         62:d8:2b:4d:0f:bc:0d:94:bc:25:45:a5:c2:08:23:ad:b7:c9:
         ba:24:49:51:46:09:b8:5e:4b:1c:1b:84:c9:c1:01:93:06:6a:
         99:f9:77:1a:a2:8c:a3:2b:a7:7d:ce:84:79:40:88:10:bc:98:
         7c:ea:07:5c:23:29:a3:41:3c:49:ec:ac:07:30:ed:0f:ce:42:
         2e:a7:c6:2a:77:ee:a5:f3:d3:5b:ef:ff:6a:f7:8c:2c:c1:ca:
         f7:42:80:f2:70:5b:dd:11:6d:82:2e:8f:61:7f:ca:f8:61:0b:
         5e:5d:ea:90:0c:82:25:f9:9e:e1:9f:ae:59:0f:9e:bc:c7:2e:
         6e:ad:81:85:93:ac:82:78:fb:bd:2e:5a:76:16:4f:d0:53:30:
         13:eb:7a:62:ed:55:40:17:0d:61:90:d6:b0:fe:75:40:6e:f0:
         28:a4:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:22:53 2026 by rpki-client