Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          nWQV/7YEYWUcL1aNzXuz8YU2FKVgeGQbmsmneIPVZC8=
Subject key identifier:   36:B2:E9:7E:40:02:89:AF:64:1C:36:12:92:BF:47:F2:27:65:86:91
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019FAA19AC58E3DA611045FA66C1CD809223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          05DA
Signing time:             Tue 28 Jul 2026 19:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:36 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: Y5O4NQSuvt3JhcM62qazh5Wsi8apexvtaBdYeEuERIc=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:ac:58:e3:da:61:10:45:fa:66:c1:cd:80:92:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jul 28 19:00:36 2026 GMT
            Not After : Jul 29 19:00:36 2026 GMT
        Subject: CN=36b2e97e400289af641c361292bf47f227658691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:fa:61:29:4c:35:ba:8f:b6:06:6f:0d:c8:
                    70:51:59:44:d0:b8:65:fa:3a:9e:67:1e:1e:8f:9b:
                    bf:35:3e:d7:7a:17:b7:ce:0c:c5:2d:e7:68:73:dd:
                    ee:37:25:21:fd:e1:06:6e:68:60:ce:8a:36:27:af:
                    02:ee:0c:e0:4a:2c:cc:e4:c7:d5:09:df:fd:37:69:
                    3b:9a:60:2a:32:f7:1e:02:fa:45:e1:36:83:6f:36:
                    ea:09:18:d8:bb:bc:57:be:0d:74:66:38:a5:09:7d:
                    a0:1e:61:26:06:6b:ce:c4:8a:3a:ca:70:34:a7:c7:
                    bb:b5:f6:42:9e:8d:0f:4e:52:4a:d6:b7:77:ba:16:
                    d1:7d:2b:e7:ff:6a:65:96:9b:6a:a7:fb:17:d5:e4:
                    f8:1d:1b:ab:91:66:cc:17:05:0d:c7:9d:11:c5:81:
                    3e:42:9a:d0:e4:ff:4b:9f:fe:69:65:b9:30:dc:24:
                    20:73:e9:14:a1:ca:d0:a5:07:c3:b9:7c:2b:b7:09:
                    2d:1f:94:f9:46:92:ad:e9:f9:ab:d7:0c:eb:b8:77:
                    87:90:1a:de:58:d7:66:dd:56:cb:53:e0:10:ff:6b:
                    2c:20:f6:ff:c8:a5:92:c5:5c:bd:10:c6:4e:34:6b:
                    7b:c7:a8:2b:65:e0:fb:f7:24:f3:4f:39:78:d3:e2:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B2:E9:7E:40:02:89:AF:64:1C:36:12:92:BF:47:F2:27:65:86:91
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5f:c5:2f:91:f6:a7:f7:ba:5a:68:82:86:6c:58:8e:a0:01:
         73:18:c4:5a:c9:b1:9b:3c:bd:2b:4e:fd:e9:64:01:13:1c:a6:
         14:9c:c1:db:30:5b:10:81:3c:d6:5e:b3:34:e7:50:3a:73:19:
         a3:27:a1:86:28:45:eb:4f:ed:0a:63:32:a2:9d:cd:9c:98:7f:
         3f:26:80:cd:35:3e:85:d7:e1:7b:14:8c:70:ad:fb:63:5c:1e:
         9c:8d:ee:31:55:bc:5f:1f:f2:30:dd:3c:8a:17:f7:de:fe:32:
         b3:4e:6f:ef:b5:2e:4b:54:bc:c8:fb:96:f9:fe:25:1b:af:50:
         19:67:d6:a6:08:52:0a:05:bd:2c:56:8f:01:84:95:c3:96:fb:
         92:63:37:45:20:ef:f5:f1:a7:4a:e4:6e:f4:18:ff:58:05:8c:
         2f:23:a9:98:ce:de:fc:ce:ec:a5:78:a5:81:52:c0:a3:32:50:
         7b:bc:9e:58:a2:4c:b1:60:8d:0e:21:0d:25:df:16:b2:1c:72:
         f7:43:cb:ec:ae:07:bf:05:a3:aa:a4:b2:de:3a:a7:24:6b:60:
         65:31:71:db:7e:36:c4:08:cd:ec:bf:35:00:61:e7:1e:e6:11:
         35:8c:83:36:a0:74:93:df:95:b2:ab:4a:70:76:32:63:80:33:
         50:fd:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:24 2026 by rpki-client