Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          fynwiuiFe80cgdvuOKOG0VLMBSEeTzrHZCULJM7cdrY=
Subject key identifier:   EA:18:B4:5B:1F:43:44:A4:22:80:1D:2E:7E:48:4B:99:99:6F:81:CD
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       019FAAF5C45B64091D61E7FF90029FE52DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          19D9
Signing time:             Tue 28 Jul 2026 23:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:00 +0000
Files and hashes:         1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
                          2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
                          3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: OXUgVzm+Xsbeu+ZgMrUAk/+N8eyctWRcaTjnWut6w8A=)
                          4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:c4:5b:64:09:1d:61:e7:ff:90:02:9f:e5:2d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Jul 28 23:01:00 2026 GMT
            Not After : Jul 29 23:01:00 2026 GMT
        Subject: CN=ea18b45b1f4344a422801d2e7e484b99996f81cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:88:3d:22:bb:fc:94:fd:4a:1c:34:b2:ba:
                    99:24:39:5e:a5:3c:4b:67:30:c6:39:0c:e2:74:d9:
                    61:05:08:ff:18:66:ce:d6:d8:b3:d3:ea:8f:d0:6d:
                    d3:b5:d3:9f:3d:4c:7b:a8:23:de:38:2f:7d:c3:17:
                    3b:cb:2a:30:ad:c6:d9:8b:b1:72:80:2d:5c:1f:7a:
                    e7:f6:b4:ce:0b:bd:fd:8f:b7:54:89:57:a4:71:95:
                    8b:99:52:d4:97:53:dc:96:0a:e2:85:91:1f:ae:9d:
                    d4:ae:69:62:b0:08:8b:04:cd:0e:8a:a4:3a:70:70:
                    04:4e:3b:01:22:aa:cb:5b:8d:dc:7d:bd:bf:55:de:
                    32:c3:5c:47:9a:99:48:fa:f1:80:97:4c:02:d7:d6:
                    58:4b:9c:b0:70:97:b2:f6:b5:3f:71:b5:1d:2e:f8:
                    e8:62:91:f3:2c:63:8d:5e:45:89:29:c4:99:11:fb:
                    16:1c:e5:75:d2:c4:61:a0:b4:b5:0b:f6:7c:b3:f1:
                    cf:37:e0:6e:41:1b:44:37:57:6f:6c:ad:54:e9:17:
                    ec:cc:df:99:e2:71:23:ef:2e:4e:de:f5:4e:74:06:
                    32:8d:7d:27:f8:1f:ea:6a:7b:c9:cd:ea:2c:7c:d8:
                    e0:e5:25:40:cd:8b:b3:93:70:0f:af:cd:3e:7f:50:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:B4:5B:1F:43:44:A4:22:80:1D:2E:7E:48:4B:99:99:6F:81:CD
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:20:75:0e:cc:2e:2a:c8:46:a7:fa:04:7e:a4:c2:77:6f:40:
         5d:fd:6e:e9:a0:1d:29:5c:28:31:45:71:95:b4:5e:3a:c7:c1:
         09:c1:a1:67:9b:2d:68:92:7d:4e:94:95:45:3c:b5:02:22:b4:
         f8:43:14:06:96:00:23:93:62:28:bb:11:c3:3b:e4:27:22:56:
         cc:26:b4:ea:46:45:6e:53:3a:55:df:5e:9a:64:2c:f3:66:fc:
         bf:9b:94:f8:0c:8b:6d:ea:fd:7d:c2:68:d2:63:00:73:60:09:
         17:ae:de:34:f5:8d:10:f8:19:71:ef:6f:20:e2:3c:b1:b3:da:
         39:e4:5b:0e:1d:98:41:9f:04:c3:a3:dc:e4:0e:da:8a:12:da:
         04:9a:db:5c:7c:66:1c:b0:1c:7e:45:49:3f:c4:4f:23:eb:09:
         f6:20:93:cb:ab:0c:58:dc:e9:7a:f9:81:45:b4:c1:cd:35:9e:
         6b:b2:4a:26:89:ea:a6:6c:5c:9d:a4:4a:0b:62:ea:f0:96:0a:
         78:ce:1c:e7:d3:3f:ac:23:6e:9a:42:a1:a2:18:9c:b8:9b:38:
         7b:f8:1b:dc:62:4d:be:6a:1b:6a:35:90:2d:ce:a0:3e:fc:50:
         40:ac:32:8c:bc:d9:37:6b:f4:e0:37:ba:4e:13:72:16:29:b8:
         5c:1d:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:52 2026 by rpki-client