Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          YwgbHPINKRSlMFCY2KwUmVX1fdUWxL3Cr74NUiBeP20=
Subject key identifier:   D7:1F:1B:A1:D5:77:F7:58:D3:9A:B0:D7:B2:69:A8:D2:77:E5:07:E2
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       01A12B7B5305748DE5DC342250C95D78971E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          0A5D
Signing time:             Sun 11 Oct 2026 15:01:04 +0000
Manifest this update:     Sun 11 Oct 2026 15:01:04 +0000
Manifest next update:     Mon 12 Oct 2026 15:01:04 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: 7Ji9Re9xGdiEU4aqvMUpK287uCS3orEgeHyHW+61hCk=)
                          2: XpRtGgpQMgfYPr6Ae4n-CrXAlUE.roa (hash: NDYAShaJd5oq4XV/s8UZ9bjqNMFDxRAsxUeNLahhptc=)
                          3: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (hash: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk=)
                          4: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (hash: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:53:05:74:8d:e5:dc:34:22:50:c9:5d:78:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Oct 11 15:01:04 2026 GMT
            Not After : Oct 12 15:01:04 2026 GMT
        Subject: CN=d71f1ba1d577f758d39ab0d7b269a8d277e507e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:19:27:51:9c:2c:b4:27:9e:87:58:c4:a6:
                    dd:da:e1:43:b7:93:a7:8d:68:15:83:68:4f:25:ed:
                    c6:75:3c:90:90:99:81:60:99:60:76:3a:ae:50:c8:
                    90:35:05:c2:0d:8e:73:94:ca:0f:74:1b:df:72:b1:
                    3f:27:a4:49:bc:97:8a:17:a5:b3:53:d0:49:d4:3f:
                    70:c5:6f:d6:6a:f2:6c:7d:f8:ae:ce:3c:1d:4e:24:
                    59:d7:48:e5:2f:49:ca:51:05:d8:9f:df:1d:b5:b8:
                    68:f6:f0:b3:d1:d8:41:50:12:d3:19:01:16:70:2f:
                    84:2f:79:cf:c3:26:8e:e4:35:e3:05:72:15:51:c4:
                    b9:aa:fe:9a:3e:fc:30:d2:fb:d9:63:30:48:dd:c7:
                    6b:62:30:6d:c1:f2:89:8e:d6:88:1d:51:d2:69:5c:
                    63:1d:72:1e:c3:76:4d:40:65:74:97:74:b5:f5:c1:
                    21:c3:cb:a0:e7:94:8e:73:0f:98:29:f4:d9:ce:e2:
                    c5:a8:d7:4c:a2:77:62:71:f8:28:28:51:6b:10:9f:
                    82:99:e1:6f:f2:48:f5:6c:4a:24:1e:10:f0:42:1f:
                    3a:a4:c0:5a:d5:b3:96:24:43:70:f9:46:74:80:95:
                    4c:66:5c:cc:36:32:17:55:6f:fe:6a:60:3f:37:a3:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1F:1B:A1:D5:77:F7:58:D3:9A:B0:D7:B2:69:A8:D2:77:E5:07:E2
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:d6:5a:30:00:5f:24:90:f4:44:3a:1d:91:22:3d:77:4c:
         68:77:f0:53:84:4e:b9:8e:12:fd:a0:56:ee:48:1b:f3:ef:e8:
         be:82:11:08:9b:f9:ee:6d:1c:4d:cb:eb:1b:0b:2b:70:a4:44:
         c7:51:ee:c2:63:c1:87:0f:ab:d9:d1:14:77:fb:ce:6b:28:d8:
         e5:ec:2d:5f:da:ee:0d:de:06:68:a5:94:f5:c8:3e:d2:8f:f6:
         36:df:d9:3e:65:c4:aa:6c:19:67:d2:e1:07:52:00:bd:70:7e:
         ce:7d:ea:5a:9c:3e:e3:be:ce:9e:ef:65:e6:fe:e9:9e:17:e3:
         45:0f:d2:55:cc:48:92:2d:e9:4d:c5:e2:54:56:42:2c:00:77:
         29:c9:a9:a0:45:20:3d:5c:7e:1c:ff:26:4b:b2:4c:8c:e4:69:
         48:aa:30:82:27:bf:b7:38:8e:b7:23:e3:5a:f8:d8:79:d0:57:
         17:53:47:8b:27:73:62:d2:db:e9:8e:06:c6:29:03:54:c4:79:
         dd:1e:89:58:ea:b6:7e:47:14:1e:e6:5e:c5:a0:74:47:b2:ac:
         8a:71:52:b9:02:07:5a:5c:06:aa:c5:15:e9:e3:72:7b:96:3c:
         69:93:91:97:c6:e0:e5:43:4f:12:ac:62:93:00:ba:9c:a0:87:
         0a:5a:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:44:00 2026 by rpki-client