Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          9jLHqI6k5ZCkpOGBN+JvlIILaGWJYVubq15Mb+0Iw3Y=
Subject key identifier:   00:F6:6D:2E:EE:D2:B6:12:D7:E9:CE:AF:8F:DE:5B:6C:FB:0E:00:77
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       019D99D0566E1D23CDF07D973F0D2A3C94B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 05:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:00 +0000
Files and hashes:         1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
                          2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
                          3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: INv5xJJW2gZSHhugshCAyyhIXNV3XSCASVMwlSKhXEc=)
                          4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:56:6e:1d:23:cd:f0:7d:97:3f:0d:2a:3c:94:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Apr 17 05:01:00 2026 GMT
            Not After : Apr 18 05:01:00 2026 GMT
        Subject: CN=00f66d2eeed2b612d7e9ceaf8fde5b6cfb0e0077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:01:1e:79:97:19:74:68:bb:0a:fe:5e:5d:12:
                    03:27:cb:5f:fb:2a:cb:a7:73:2e:79:5c:d7:b3:ac:
                    01:bc:e7:da:28:34:7e:a4:ea:35:35:4a:1f:3f:c4:
                    e0:84:bc:57:f4:4d:9d:de:90:8f:a6:18:ef:bb:da:
                    c1:05:8d:66:ed:df:05:38:d3:60:f2:2b:6a:57:a1:
                    f9:e3:b6:17:e3:ce:55:7e:04:58:29:63:5c:12:0b:
                    d2:61:1d:07:8c:a7:45:bc:98:d1:46:76:0c:fb:63:
                    9a:8f:06:a2:4c:bf:d9:50:68:e8:6b:b3:23:48:31:
                    36:01:4c:d8:2f:99:05:2d:a3:63:39:d8:cd:1f:f4:
                    2b:be:48:0a:e5:de:5e:62:c4:f3:32:6e:a2:63:ed:
                    01:96:b6:51:75:19:4c:d7:af:d9:1a:b1:ec:48:64:
                    6c:58:05:09:7b:22:0d:c8:ba:2e:84:3a:bb:0c:67:
                    50:fc:34:71:b9:75:6a:39:23:5d:43:5e:66:c7:67:
                    86:22:de:eb:98:d9:8a:8e:21:a7:70:50:65:ed:4c:
                    81:2c:c3:8b:fd:d7:d2:f7:a3:d8:9c:e0:98:2e:8f:
                    21:80:98:13:30:57:45:58:7e:d2:36:03:09:1c:02:
                    e8:f0:aa:73:a3:4e:96:f7:ab:ee:00:25:9c:a9:91:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:6D:2E:EE:D2:B6:12:D7:E9:CE:AF:8F:DE:5B:6C:FB:0E:00:77
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:df:8b:9b:54:e1:e3:b5:2d:57:f0:78:66:0b:7c:52:d0:
         91:82:dd:bb:a9:d0:6c:b2:03:09:79:b5:b5:fb:c6:d8:93:e1:
         26:19:17:6c:53:e0:be:05:c7:93:93:2b:12:cb:83:69:a7:13:
         d9:40:d0:81:8c:e1:3d:fa:c0:be:a1:0f:01:a0:18:e4:eb:26:
         6a:b6:78:d8:97:b4:4c:70:32:b3:62:ae:0a:16:e5:3b:da:3b:
         58:2b:c8:9a:93:32:6d:ba:0d:6f:65:6b:ee:f9:b2:be:7d:3c:
         d4:1e:77:e6:8a:1a:09:43:33:33:63:c3:6a:c8:c9:fc:83:9b:
         e0:f6:80:e8:37:1c:ed:f9:92:5b:a8:7f:ab:98:fc:87:66:b6:
         f0:51:9d:50:9a:f8:de:f9:fd:5e:4e:f5:7e:ef:f6:ea:16:17:
         a4:7c:2e:46:fa:cf:52:2a:93:94:d4:db:f3:f3:20:7a:d4:50:
         00:eb:66:67:ff:1c:00:42:8f:d0:6c:dd:bd:e6:a6:e4:2b:7f:
         df:92:8e:45:f4:e3:fc:9e:ea:a5:c0:cd:ce:33:bf:20:d3:0a:
         b5:cb:e9:a1:58:06:bc:8f:c3:0a:ee:fd:02:9e:47:07:bb:e1:
         fa:95:d4:10:98:92:03:7a:c7:8f:8e:3f:8c:16:f9:04:78:c7:
         9b:d4:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:03 2026 by rpki-client