Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          HMMpHUx30rzFvzjFmn3sCKdK2xSj++W2tHNVeuWBQIQ=
Subject key identifier:   48:4D:01:05:D6:29:81:B1:DF:5B:34:17:3C:70:F0:6B:1A:E7:FD:DF
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       01A0D15BDE13FCE80BFAD1ECE97DBB68EEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 03:00:53 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:53 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:53 +0000
Files and hashes:         1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: 3K0xVyUrS6uaXSP8xZHbrZd8QeSi+NUU2jvZi6/QnEs=)
                          2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:de:13:fc:e8:0b:fa:d1:ec:e9:7d:bb:68:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: Sep 24 03:00:53 2026 GMT
            Not After : Sep 25 03:00:53 2026 GMT
        Subject: CN=484d0105d62981b1df5b34173c70f06b1ae7fddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bb:de:f6:a2:00:d2:16:4e:2f:12:d9:69:6b:
                    e7:98:3a:83:dd:c4:fc:af:8c:1a:46:a4:98:9d:7c:
                    a1:7f:63:93:5c:af:3a:17:67:2e:f7:13:bd:b2:1f:
                    7d:49:2c:3a:1d:f3:25:69:96:1d:e1:9a:4d:aa:61:
                    96:ac:c3:a5:35:a8:6e:19:7c:c3:1b:16:b7:8b:e4:
                    e5:89:16:35:4b:ce:6c:ed:36:4f:3d:ef:d6:ea:93:
                    8d:65:ea:27:4c:d5:ea:c3:82:05:59:a1:f1:8a:0c:
                    8c:46:72:85:8e:7a:c7:ad:ec:40:6e:87:a6:93:e5:
                    60:34:96:71:e0:a9:c6:f2:4d:b3:5e:0e:1e:05:41:
                    a0:5e:d9:f5:9c:b0:a9:12:0e:3c:09:af:57:45:e5:
                    6a:51:f0:95:da:61:8e:00:7d:20:7b:bf:97:98:e7:
                    a0:05:24:b1:ef:fe:0d:0b:f8:51:7a:7c:1b:c8:c7:
                    33:a3:17:1a:18:87:6a:33:92:c1:de:5c:41:89:fd:
                    e6:15:27:49:c2:74:f2:33:d0:88:9f:4a:43:ee:53:
                    3b:bc:58:c6:68:be:d2:cb:56:82:71:ac:76:b1:f5:
                    f8:7f:a3:66:bf:22:e5:58:0d:4b:63:b3:28:b7:1a:
                    bf:d1:9e:4f:b0:06:7d:cc:9b:a2:1f:c2:a5:c4:59:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:01:05:D6:29:81:B1:DF:5B:34:17:3C:70:F0:6B:1A:E7:FD:DF
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:f9:ab:39:10:ab:10:58:bd:4b:e5:f5:88:68:48:43:97:
         ef:de:39:04:7f:e7:b6:e0:f3:e8:98:fe:02:f3:ac:98:ec:90:
         ba:dd:6e:12:63:63:01:3d:95:f9:e2:b0:43:a3:39:5d:7c:d3:
         bb:64:c6:4e:0e:d2:c0:37:d4:54:6e:27:3f:78:3a:a9:90:f8:
         22:68:ec:c1:54:07:97:4c:99:32:eb:a0:39:c2:10:9c:6f:91:
         40:e3:74:9e:74:b7:7f:25:d2:86:b6:ee:04:18:6b:74:0a:de:
         6c:c8:4e:98:0b:7f:41:4f:d5:83:bb:a2:ca:8e:69:65:c5:15:
         25:1e:91:36:44:a7:9c:14:65:1b:50:7b:2e:71:92:04:6a:b6:
         8d:32:f9:90:41:92:49:9f:d5:a2:6e:8d:f7:ce:49:ab:61:6c:
         b4:8e:de:41:44:19:f4:7a:9f:de:98:e6:8c:d7:4e:bf:5f:55:
         09:8d:13:9f:1d:81:0f:23:f5:d0:34:f3:81:1f:4f:30:fe:72:
         ef:45:53:fb:ca:92:7d:0a:5c:0a:ec:07:94:70:3f:63:07:af:
         9a:23:a5:95:d0:7f:98:2d:f2:10:9d:ce:98:7d:b2:32:3c:b1:
         18:2a:70:37:01:7e:8f:37:98:18:ab:59:d9:26:2d:0b:20:b7:
         3e:dc:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:07:45 2026 by rpki-client