Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
File:                     RUDlIposcpXSHzrf863UCZUBQJU.mft (raw, json)
Hash identifier:          Bxwt8VPqIjBgyFJC7IeoQG97mId3kRfXX8e+E4B7pnk=
Subject key identifier:   27:8E:BC:73:C0:1C:0F:C6:EA:47:27:22:C8:1E:F2:ED:6B:20:72:9E
Authority key identifier: 45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
Certificate issuer:       /CN=4540e5229a2c7295d21f3adff3add40995014095
Certificate serial:       01A129C3991E6793F3F7ABCBD3876B34D139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
Manifest number:          0246
Signing time:             Sun 11 Oct 2026 07:00:46 +0000
Manifest this update:     Sun 11 Oct 2026 07:00:46 +0000
Manifest next update:     Mon 12 Oct 2026 07:00:46 +0000
Files and hashes:         1: RUDlIposcpXSHzrf863UCZUBQJU.crl (hash: Eb4J+nKhQ0XdIE0naRV0x3N5lIZhwACfZJPc4Q+DSTY=)
                          2: y8cnHcyt3VjfzlrJcmcgg3rUJQA.roa (hash: ij7Riuco9SCaywsTWfDKgoi8S8Zx6rSYwN0U/29wCBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c3:99:1e:67:93:f3:f7:ab:cb:d3:87:6b:34:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540e5229a2c7295d21f3adff3add40995014095
        Validity
            Not Before: Oct 11 07:00:46 2026 GMT
            Not After : Oct 12 07:00:46 2026 GMT
        Subject: CN=278ebc73c01c0fc6ea472722c81ef2ed6b20729e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:ee:25:38:85:ac:e5:25:c0:f6:03:a3:3c:
                    10:7e:f5:70:79:74:4d:c5:b2:0e:29:52:74:90:22:
                    80:c6:2c:ea:b6:e6:ae:c2:20:54:10:4f:df:04:c3:
                    4a:f9:86:ad:1a:01:43:00:df:56:b7:06:40:e5:a1:
                    1f:69:3f:ae:41:d6:ee:61:e1:8c:f1:63:29:cc:ab:
                    b1:fe:9d:c1:36:37:a3:2b:e8:64:16:43:bf:b5:6d:
                    8a:91:34:1f:b5:e1:be:af:40:c1:db:1f:b4:46:36:
                    fc:8c:79:21:8c:ce:a9:cf:67:f8:0d:e2:a1:3f:ba:
                    3b:97:1a:e2:01:ad:cb:72:80:72:63:61:98:08:da:
                    df:0c:33:70:14:96:e3:31:e3:a7:28:8d:bb:4c:44:
                    f0:3f:02:b8:00:98:94:54:94:8a:19:a4:14:1c:3c:
                    bd:d3:a8:46:51:d6:26:5e:04:12:77:16:ee:b0:5d:
                    7c:0d:9f:52:52:d1:d8:d0:ae:66:9f:3c:3b:da:97:
                    d8:be:3f:c2:16:90:f0:b4:51:cd:ae:d4:75:a3:0a:
                    7e:7e:b7:49:e5:a9:d4:dd:6a:90:93:1f:6a:b8:3c:
                    00:6b:85:b9:b5:e1:97:f2:15:c7:d8:73:89:a1:87:
                    b4:63:51:42:72:1d:3e:51:27:5f:87:69:cb:cf:d1:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:BC:73:C0:1C:0F:C6:EA:47:27:22:C8:1E:F2:ED:6B:20:72:9E
            X509v3 Authority Key Identifier:
                keyid:45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:24:49:dd:12:4f:9c:75:7c:17:ba:bb:df:a8:71:ae:ea:86:
         60:6d:5b:34:93:b1:95:72:76:8f:6d:2d:eb:4e:8b:ec:fb:e7:
         f9:e5:f8:65:39:82:bb:70:39:30:cc:0b:e2:75:83:1b:62:f0:
         81:cb:51:73:2c:bf:e2:8f:0a:f5:04:c9:02:23:9c:4c:ab:5b:
         8f:dc:76:f4:07:22:ff:29:0e:ee:97:7e:40:9d:c1:94:08:d2:
         cf:bb:86:51:65:88:63:f5:2e:62:40:bf:db:0c:8e:01:a5:04:
         63:52:53:b4:0d:2c:56:14:77:de:23:57:dc:67:c0:73:dd:d9:
         5b:29:cd:a2:d5:0d:53:32:15:0f:81:fa:63:b8:66:6d:80:8d:
         46:ff:d3:2f:24:93:dd:55:8f:0f:6a:f6:72:93:ea:ec:0b:2c:
         6d:4f:e6:5c:5a:59:22:c1:b0:03:69:c9:67:10:b3:fe:96:09:
         01:dc:19:c3:15:22:43:e3:18:6c:4a:0d:5c:a2:17:fd:0a:cc:
         94:63:69:99:c1:33:47:7b:f9:f5:3a:2c:9c:05:ca:69:cb:cc:
         d0:12:97:c2:51:d3:5b:0e:d4:44:ba:c9:67:c7:2b:57:84:b4:
         18:9a:61:0c:88:ab:fc:91:c0:b7:a7:13:55:b7:1d:c2:30:ee:
         85:18:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:52:46 2026 by rpki-client