Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
File:                     oEGdRgkuRJjImA9ydB3ICBKViRM.mft (raw, json)
Hash identifier:          N6kiSPsPe3w47cdnFBupizl/Leigv1cy/Vy3/1LLo54=
Subject key identifier:   47:9E:A8:DE:87:85:75:9B:51:27:2F:3D:BD:92:D5:67:86:56:4D:7D
Authority key identifier: A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
Certificate issuer:       /CN=a0419d46092e4498c8980f72741dc80812958913
Certificate serial:       019FAA88BF57E6C2AD310943FC28CF3B4CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:56 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:56 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:56 +0000
Files and hashes:         1: bYlwrMMouNe0wX8geEjx6w5BJcQ.roa (hash: L0irFgfGqAy5AaADSGRWA2XK+/VEh5b8QXvaP7jtIlM=)
                          2: oEGdRgkuRJjImA9ydB3ICBKViRM.crl (hash: aCd50u7qqvAUM2iBE8wur9+LDy0IwzEKeWkH04AA7bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:bf:57:e6:c2:ad:31:09:43:fc:28:cf:3b:4c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0419d46092e4498c8980f72741dc80812958913
        Validity
            Not Before: Jul 28 21:01:56 2026 GMT
            Not After : Jul 29 21:01:56 2026 GMT
        Subject: CN=479ea8de8785759b51272f3dbd92d56786564d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:87:1f:17:ec:2c:46:e2:cd:8b:a9:82:cf:
                    a5:8d:fa:d6:a3:8e:cf:a8:0c:d7:f3:b5:cc:ea:2c:
                    3f:61:33:62:23:9b:cf:a6:7e:ad:88:2c:bb:be:9c:
                    ff:90:c3:e6:79:d1:22:5a:72:10:50:ce:64:6b:86:
                    0e:8a:8b:50:a2:27:8c:6e:ad:fb:19:e4:e6:32:e8:
                    8d:65:d3:1b:fb:3b:1d:b6:c0:a9:a4:42:f5:d6:fa:
                    f6:25:ea:58:13:f2:e3:48:be:85:e6:9d:55:a7:9a:
                    55:b8:1f:7d:e6:63:b1:66:18:25:75:a6:d5:90:18:
                    e9:46:d9:8e:71:56:1e:06:dd:b2:fe:d6:b9:28:1d:
                    71:76:e4:19:60:a5:3f:5e:fc:58:af:64:8e:86:e3:
                    e8:5f:7c:fd:eb:37:ea:82:f8:03:82:52:1d:a0:d3:
                    4d:f3:a5:45:f7:54:1c:ea:82:13:01:bc:a6:f9:9e:
                    0a:ad:5d:30:d9:71:08:19:8a:17:ba:95:5d:4f:d6:
                    98:4a:5e:6c:7e:d7:12:b9:ae:6a:ef:a8:46:ba:b5:
                    ff:d9:f5:d8:23:bd:49:5e:49:6a:12:a1:c0:8a:71:
                    33:df:dd:91:a1:2d:82:39:b2:f3:60:10:72:49:db:
                    0f:3b:d9:96:c4:fe:7a:82:2a:0d:a3:55:2f:5f:f9:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:A8:DE:87:85:75:9B:51:27:2F:3D:BD:92:D5:67:86:56:4D:7D
            X509v3 Authority Key Identifier:
                keyid:A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:55:39:6c:10:d9:65:5c:b5:d4:3c:cd:39:d0:cc:0c:86:0b:
         19:ae:4e:7e:d1:6b:c1:fd:b6:e4:84:a7:6b:3a:dc:39:6c:6e:
         ae:29:3e:37:d3:1b:90:c6:45:83:c3:a1:6c:2a:65:fe:7c:ef:
         5d:0e:ca:8f:12:1d:2c:a3:22:90:10:46:5b:3a:87:86:e5:0e:
         a7:2a:c1:7e:fa:f3:da:71:1b:b0:dd:a3:cd:6a:3d:2e:18:cd:
         0e:a1:2a:a5:dc:e5:21:dd:f5:aa:58:aa:b6:60:fb:10:d8:f2:
         79:32:f7:3f:ec:27:47:70:32:86:cf:4a:a5:43:9b:52:7c:3b:
         a5:6c:ea:79:29:da:04:52:7d:cb:9b:39:ce:02:b7:3f:36:98:
         bc:bc:3b:9a:8f:c9:40:84:e4:94:7a:70:3d:49:94:5e:6a:97:
         10:18:e3:c1:2d:da:14:d7:a2:30:a7:9f:26:96:7d:50:38:4b:
         6b:e5:ae:8d:a7:e3:fa:f8:35:84:47:df:3c:b0:13:84:ea:03:
         de:ce:d8:df:e9:0e:e6:c4:e7:45:b6:12:e0:5e:36:e7:b3:44:
         35:b3:b8:63:78:7e:98:8e:95:e0:d7:04:c9:b1:b0:18:bf:48:
         e3:aa:8e:2e:43:24:51:3e:b1:1b:12:56:38:42:b4:63:0d:42:
         8e:2f:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:25:32 2026 by rpki-client