Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          RlVTCDb/QkbPn+ucyQNznoiuvPtfzvmZxvW2SpgOOP0=
Subject key identifier:   B5:0D:46:2F:84:26:A6:F2:DD:4C:A3:7D:A9:B3:05:A5:18:8D:7F:01
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       01A0C96B4CB665FBA880AF5F0A13FD6AA037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1A79
Signing time:             Tue 22 Sep 2026 14:00:47 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:47 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:47 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa (hash: RWTdXUa+iSybycGajkLlOunVuvAlO58dNpaXACjUKZs=)
                          4: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          5: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          6: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: xQpOZdm9J6kTmh/ct/u4Te7Tv3yrSr/Bw4Cyxt8dqn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6b:4c:b6:65:fb:a8:80:af:5f:0a:13:fd:6a:a0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Sep 22 14:00:47 2026 GMT
            Not After : Sep 23 14:00:47 2026 GMT
        Subject: CN=b50d462f8426a6f2dd4ca37da9b305a5188d7f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:8a:7e:34:c8:24:d9:fb:15:bc:92:00:5f:
                    22:86:8c:4a:fe:81:7a:38:0a:82:a2:ef:01:ca:d7:
                    c6:75:60:3f:c7:50:f2:14:9c:2c:55:27:4d:a9:d6:
                    8c:9b:ec:e2:f1:b1:39:76:af:f5:69:3c:33:02:72:
                    0c:86:15:c3:71:98:fd:e7:b1:e1:5e:a9:e8:9c:0b:
                    eb:d0:0e:9f:e9:7c:32:61:d3:ec:65:5c:b8:39:78:
                    ff:e9:f0:35:63:91:97:78:b3:fb:84:6b:1d:af:b6:
                    58:e2:98:5b:d5:9e:7a:ad:23:f0:a6:92:8b:43:aa:
                    a0:9a:87:2b:5e:c9:89:7d:d8:2c:61:16:04:ae:78:
                    90:a1:5f:ca:11:87:31:76:b3:52:5a:34:b1:39:9c:
                    0b:58:11:2a:b1:7c:3d:22:da:4c:65:af:24:da:de:
                    ba:e7:95:89:2d:db:b5:a8:26:f4:32:07:65:e0:de:
                    db:31:10:1e:17:d6:a4:d1:ec:17:61:ea:1c:19:ff:
                    fe:be:04:db:5a:e4:9f:81:7e:2c:3f:af:77:13:81:
                    e1:d9:cd:2c:45:b9:73:a8:c8:76:21:94:1b:a5:82:
                    5b:f3:23:b2:e2:81:bc:a4:59:00:49:cd:14:a2:c3:
                    ea:3d:2b:71:f8:4f:11:40:3f:74:2e:4f:c1:66:b1:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0D:46:2F:84:26:A6:F2:DD:4C:A3:7D:A9:B3:05:A5:18:8D:7F:01
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:cb:77:36:13:e4:61:47:07:8e:d6:46:94:53:7c:aa:7c:
         62:5e:bc:ff:ba:5f:ef:7c:37:85:1d:0d:d9:c6:12:03:6e:40:
         81:78:24:6c:46:c3:2a:fc:33:d2:17:44:6e:48:46:f5:23:80:
         d1:3a:4f:ca:10:dc:f3:ad:b5:f0:8b:de:31:d2:88:6e:8e:a1:
         d8:e3:e2:7a:4d:27:89:0d:6e:19:1c:eb:3b:c1:90:4b:7b:e2:
         42:ec:51:c5:04:c1:4b:79:97:51:69:3c:54:73:60:e3:e5:39:
         8c:9c:c5:73:d5:ff:d9:52:d3:bf:0c:14:0a:e5:b6:90:c0:ad:
         81:22:17:7c:a3:81:8c:88:0c:dc:07:56:c4:bc:fc:1d:8b:d3:
         7a:15:3b:ba:42:5d:65:2d:88:ca:bd:e9:07:57:19:10:47:2f:
         28:e1:87:97:18:83:7e:a3:a8:ca:4e:7c:d6:49:9e:c4:8b:90:
         41:31:bd:5e:30:18:1b:d2:47:40:5a:65:8f:a9:04:bc:c2:72:
         20:57:de:ec:86:75:0a:a6:13:fc:7c:c9:d2:88:17:11:d3:1c:
         5f:54:e0:f8:5e:c6:33:5f:05:35:25:97:c1:63:7f:8e:7b:b0:
         a5:c2:4f:77:24:1e:d6:ed:8e:96:20:c3:c8:8c:da:51:f1:25:
         21:cd:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:18 2026 by rpki-client