Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          Z/K4GgHzWtbtnQWyKNl5P+7TUpLh6DJY3baEt/lzkW0=
Subject key identifier:   C6:18:5A:A0:1E:55:C9:1A:C2:44:23:F4:27:2E:B2:0B:8A:A5:51:CE
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       01A0C4E983389C9BEF6FD5E96E2225373B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0FF9
Signing time:             Mon 21 Sep 2026 17:00:32 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:32 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:32 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: Lsz0JAdXpp/wvfCEOBkQYRCyzHdFTHtjiDbpcysgeo4=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:83:38:9c:9b:ef:6f:d5:e9:6e:22:25:37:3b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Sep 21 17:00:32 2026 GMT
            Not After : Sep 22 17:00:32 2026 GMT
        Subject: CN=c6185aa01e55c91ac24423f4272eb20b8aa551ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:91:67:41:ef:ea:1b:02:04:45:9f:8c:c6:
                    f2:78:c2:d6:ea:e4:78:a0:8a:3d:d9:91:e2:cd:ac:
                    f0:94:46:a5:73:a1:f5:0c:bf:b7:95:a2:b1:a0:53:
                    e5:70:f5:3a:30:84:ae:dd:13:f8:02:b7:96:6c:56:
                    01:bf:c3:d3:31:eb:68:a3:a5:6a:f9:0a:18:6f:92:
                    82:a8:0e:b0:db:37:b1:a8:40:37:5a:42:df:77:25:
                    a8:8c:70:e2:c3:73:c0:a5:d9:ba:6e:9b:3e:ad:e0:
                    4d:b3:31:59:e9:bb:3a:76:30:b5:3c:0e:fc:38:d3:
                    e9:98:84:d4:82:d5:21:b3:4b:58:68:5f:e3:25:05:
                    54:84:42:0b:e7:4b:b6:f7:ea:a2:c2:60:8f:99:7e:
                    1d:00:bd:21:a1:cf:cc:c3:11:b7:ba:e8:ca:21:03:
                    32:63:c0:49:d1:56:de:6e:1d:9d:b1:43:71:eb:bc:
                    4d:3e:3c:b1:5e:f5:9a:ac:b8:f2:08:6a:5f:d5:21:
                    08:ac:cd:e9:55:ad:22:ad:20:26:74:b5:da:bf:d4:
                    3b:90:e1:9b:17:76:98:28:6f:cc:05:d9:ed:8b:af:
                    a7:fe:bf:4c:04:25:74:f2:5c:ba:36:43:71:3b:ea:
                    0d:b4:fc:fa:13:bb:47:13:53:80:37:71:b4:01:55:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:5A:A0:1E:55:C9:1A:C2:44:23:F4:27:2E:B2:0B:8A:A5:51:CE
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:77:f5:b4:c4:c6:b4:23:97:c6:f9:79:9c:d4:4e:08:2b:
         d3:6c:b5:e5:4c:09:bb:66:0f:3d:51:24:53:cd:cd:45:c7:88:
         9c:b1:c5:d5:24:13:21:82:6e:b6:15:30:ef:95:a4:6c:1f:6e:
         1e:51:28:3f:ea:b2:09:6b:a9:c2:d5:da:a5:17:45:12:1c:31:
         34:28:68:b2:60:c0:2d:2b:5f:c8:79:c1:1d:72:e8:93:7d:e0:
         8e:04:55:27:92:a0:15:85:28:70:e3:8d:52:ea:fd:55:c7:06:
         16:33:40:18:a0:51:a1:28:71:1a:0a:bf:ee:51:65:48:4c:ea:
         d0:7d:b0:58:b4:3b:c6:61:e8:1c:b0:0f:82:77:92:24:76:8b:
         9b:b5:8e:2c:df:6f:f4:48:21:19:52:45:26:38:db:7f:97:d1:
         72:dd:5b:0b:8a:58:0a:4a:4b:95:8d:df:de:19:6c:0e:d8:b6:
         f9:09:11:f8:ee:4b:4e:3a:45:6b:f1:60:3c:9d:ea:61:77:8e:
         1c:5c:b4:e5:72:02:1e:0c:21:02:ca:a7:c5:de:5e:e9:e5:41:
         1b:f9:3a:81:5c:ad:fa:6d:ec:47:fb:fc:6b:4b:60:74:5b:a1:
         cb:87:31:6b:39:9f:b0:5a:26:c8:f2:3c:80:c9:f2:f3:3b:5e:
         69:90:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:29 2026 by rpki-client