Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File:                     OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier:          9mK+hf0/aAdJpyTXofDza/3iTzPm6A8mljZTHtD4nmM=
Subject key identifier:   B6:40:26:1A:1B:5F:3B:18:50:AF:59:6A:15:55:7C:95:29:E7:1E:DF
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer:       /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial:       019FAB637C569C657C88CD705A91D9FD6F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number:          1667
Signing time:             Wed 29 Jul 2026 01:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:51 +0000
Files and hashes:         1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
                          2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: G0ld+au5mCj/d4h7W6dwM/Mh7gI8mKycntWsqSr7kNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:7c:56:9c:65:7c:88:cd:70:5a:91:d9:fd:6f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
        Validity
            Not Before: Jul 29 01:00:51 2026 GMT
            Not After : Jul 30 01:00:51 2026 GMT
        Subject: CN=b640261a1b5f3b1850af596a15557c9529e71edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:ce:5f:85:87:7b:6c:3e:ec:ab:fa:b2:9e:
                    ad:d0:39:b8:7c:54:14:dc:18:45:85:8f:2c:15:5c:
                    80:d4:84:d9:10:f0:6e:09:48:0b:94:61:24:31:3e:
                    cb:20:08:b8:af:71:c9:b3:fc:1c:8f:1f:a7:5c:8a:
                    20:f5:25:0c:54:be:86:b2:31:07:44:cd:81:40:0c:
                    2a:7e:fc:87:ff:3c:e0:05:73:03:92:ce:99:17:29:
                    15:70:ea:6c:12:3c:7b:58:c1:b8:90:bf:b9:a6:25:
                    83:c6:0c:3b:70:af:99:76:be:e4:73:62:e6:03:8b:
                    9e:ee:9e:b2:ba:e4:bc:5d:ba:60:0c:ca:91:1b:e6:
                    18:d6:42:1a:4b:b6:44:4c:87:42:64:9a:3e:b1:97:
                    33:5d:97:92:f7:21:4f:a5:2d:43:74:fd:4d:9e:30:
                    c8:eb:aa:0b:7f:98:ba:c2:2d:32:bc:b0:2d:19:eb:
                    10:fe:be:e9:0d:94:b1:79:32:85:28:9c:9d:11:3e:
                    be:da:ce:1b:40:e7:72:10:71:44:d8:f9:0a:0b:38:
                    90:76:aa:4d:01:a9:f8:b7:06:81:ef:c6:2f:66:05:
                    00:d0:71:a5:14:9e:bf:67:6f:9e:37:2b:a0:af:aa:
                    13:80:92:19:90:82:a0:8d:54:e1:7f:29:67:85:46:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:40:26:1A:1B:5F:3B:18:50:AF:59:6A:15:55:7C:95:29:E7:1E:DF
            X509v3 Authority Key Identifier:
                keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:29:e2:38:42:69:3e:0d:2c:59:6b:45:90:07:b4:3c:bf:e8:
         6e:13:25:e2:87:2a:e1:37:ff:17:1a:c2:d8:59:d2:99:a1:d0:
         34:b5:59:f4:27:e2:ba:a2:fd:45:f1:4c:fa:91:6c:c4:00:50:
         cd:69:63:84:9a:8e:4a:23:0a:4f:8b:2e:01:cb:5f:81:53:b6:
         84:84:bd:0b:5c:f5:c8:54:a5:bc:09:ac:56:89:f0:73:c9:e3:
         36:ee:5b:42:8d:8b:14:54:3b:1b:fd:fc:54:f2:17:d6:28:24:
         4c:f1:cf:7f:fc:b5:5e:42:07:1d:d2:2d:30:9c:10:1d:39:33:
         8c:6b:70:0f:fd:b1:4c:52:d2:da:0c:91:14:7e:63:b5:5b:df:
         a7:5b:92:42:3b:f2:30:d8:9f:58:20:3a:ac:06:73:db:e7:f5:
         db:d0:f4:17:10:20:59:99:84:f4:40:2e:d8:f6:fc:23:bd:5d:
         1d:6e:6a:22:91:70:de:c3:15:b9:51:0a:54:27:62:d5:e3:9c:
         33:de:f5:80:71:9c:ab:44:c1:69:0e:fd:fb:af:67:c7:42:68:
         46:46:d7:83:f9:82:a0:ae:74:7c:ea:ea:b0:1f:16:e5:79:7d:
         23:cf:a0:1e:f8:3e:7c:08:72:88:fe:55:ed:d5:0b:b9:8e:58:
         3d:9b:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:48 2026 by rpki-client