Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          Bd+EdZsS2afiQd62gjr6XzN6xue+UuQeno0IvXnhxFo=
Subject key identifier:   5A:D1:4A:4F:D7:0C:48:F9:CB:A3:46:0D:AF:61:89:11:62:E8:B0:DF
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019CAA58D46A43D7777F22F10EF0B368ACE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0DD9
Signing time:             Sun 01 Mar 2026 17:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:14 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: 9cZ13GKJZUZRi652nNFxZHGS45ANElcO8mB9vwkMClU=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:d4:6a:43:d7:77:7f:22:f1:0e:f0:b3:68:ac:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Mar  1 17:01:14 2026 GMT
            Not After : Mar  2 17:01:14 2026 GMT
        Subject: CN=5ad14a4fd70c48f9cba3460daf61891162e8b0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:23:d7:28:67:61:71:e7:fd:22:f9:58:60:
                    b4:5c:cb:5a:9c:de:9f:c6:43:ef:96:db:18:ce:f3:
                    de:25:52:4c:96:68:33:e6:61:07:06:97:90:f9:45:
                    6d:33:5e:bf:af:d1:f2:e5:f0:ef:8a:5f:87:dc:f5:
                    f9:b8:fb:0d:ee:3b:8d:a5:3e:30:40:38:18:14:f3:
                    03:ce:3d:be:b9:c7:af:37:6b:57:d5:de:32:19:c1:
                    1e:73:18:54:c4:42:ff:25:c7:cf:cd:1e:74:8c:cd:
                    64:03:b9:1f:ce:92:a0:7f:5e:f9:07:48:7a:22:7f:
                    c4:3f:b4:9d:7e:9b:63:58:0b:83:e1:91:f8:9f:1a:
                    99:f1:12:0d:a7:95:9a:52:51:59:d0:e7:46:ce:af:
                    d0:87:95:2d:42:60:3e:4f:a5:cc:09:d7:72:e9:ae:
                    83:3e:c1:9b:66:44:ca:ec:97:8b:44:53:35:fe:63:
                    47:54:3a:1f:38:ef:e4:7b:75:be:7e:5c:12:9d:27:
                    03:82:cc:c3:0b:a7:f5:9b:e0:1c:dd:dd:be:8c:43:
                    0c:07:7e:50:51:90:b5:b4:af:20:c4:8e:a1:a0:b1:
                    ca:21:30:c0:6d:76:a9:13:79:b2:8e:fc:a5:07:db:
                    41:74:4c:71:24:63:93:f8:b7:71:d8:c3:09:7c:fc:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D1:4A:4F:D7:0C:48:F9:CB:A3:46:0D:AF:61:89:11:62:E8:B0:DF
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:fd:05:58:d4:28:5f:3b:f9:92:76:c0:a3:1b:b0:9c:39:
         4f:5a:6b:f4:5f:6e:78:31:78:a5:3e:76:40:8b:82:c1:5b:bb:
         26:97:14:99:60:78:e0:99:0a:7a:c4:20:0d:f2:b7:78:ea:84:
         28:f6:fe:6d:97:ff:1c:ce:5f:55:94:21:e9:e8:b4:0a:ee:9c:
         79:cc:30:da:1b:de:94:84:f5:13:28:b7:da:45:0d:46:f8:0a:
         c3:52:e4:cb:1a:29:10:11:0f:78:9d:a6:23:c1:c1:47:07:a7:
         a8:fd:63:2a:7b:bf:6d:6a:27:e9:88:ef:5e:cc:3e:60:01:94:
         d4:e2:fb:b8:c7:d2:68:d4:6a:57:a3:6c:3a:da:5a:27:de:d6:
         5f:6e:0e:b2:fd:ba:40:a4:46:85:74:9a:24:48:de:16:21:45:
         44:db:7a:f1:10:af:c3:af:b9:9a:9a:35:41:6e:69:ec:64:cd:
         20:4e:26:19:9a:b0:52:3e:17:4e:dd:1f:78:23:1e:37:52:80:
         bd:12:bb:07:e2:0f:23:8e:fb:f6:f6:1a:76:6f:b7:a4:ce:6a:
         00:7e:a4:37:f1:6e:ef:96:50:55:e1:8e:bb:a8:c8:de:7b:c8:
         a5:36:e2:56:a9:f0:b6:41:1a:60:cb:15:f8:81:8b:08:5f:2e:
         57:db:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:09 2026 by rpki-client