Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File:                     obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier:          Klz949nY9iRVmo3+m4ld6QLSAbhM2YEP8lhO/Sk/6Tw=
Subject key identifier:   09:83:6B:AD:E6:C9:7E:DE:52:22:6F:1F:B2:0C:6B:B8:71:44:24:19
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer:       /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial:       019D992B65E60CA4B9578511B32D118E1FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number:          1357
Signing time:             Fri 17 Apr 2026 02:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:51 +0000
Files and hashes:         1: ckHYyGr3Mw8Qija2YP60OUa1ew0.roa (hash: ublouyar7OpXVPh6lwDgL3vowMyRYwZv2+erG4mp4zU=)
                          2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: TrUzmyYnINI5hc3gY6ViXsr+7yxqWoVfN97pYrI/9gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:65:e6:0c:a4:b9:57:85:11:b3:2d:11:8e:1f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
        Validity
            Not Before: Apr 17 02:00:51 2026 GMT
            Not After : Apr 18 02:00:51 2026 GMT
        Subject: CN=09836bade6c97ede52226f1fb20c6bb871442419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:83:df:38:30:7f:fb:49:9b:82:e8:38:58:
                    56:6a:c0:79:57:67:41:d4:2e:bb:fe:74:c3:12:72:
                    d3:e3:10:34:5d:55:1a:2b:6f:98:8d:f5:04:a9:62:
                    be:9c:d8:c8:a8:05:90:0e:df:51:96:59:b1:16:36:
                    75:fc:71:10:5c:53:9a:6d:19:5a:45:9b:50:86:f2:
                    41:0f:9e:01:6a:68:f4:45:db:f7:a3:37:48:33:38:
                    3c:81:3a:c0:42:21:37:a9:4e:a5:6f:e9:20:98:c1:
                    d5:7b:ce:70:a5:0b:6d:28:3b:e4:20:cf:10:92:1f:
                    7a:cb:20:df:10:91:6b:d3:34:30:6b:c5:18:f4:33:
                    a1:90:4e:8f:78:52:e3:01:95:18:5a:02:9f:6b:a7:
                    96:3f:54:c1:22:ec:97:c4:b1:46:5f:e1:b7:76:29:
                    b4:dc:9d:79:e6:0d:88:4f:07:49:84:a6:2b:05:b9:
                    7a:ac:f7:49:71:9f:4c:43:f5:f8:b4:76:24:a4:76:
                    6b:d7:ed:b7:65:18:8b:21:fe:eb:b1:94:11:73:34:
                    29:65:4b:57:ff:aa:c6:4c:37:a1:80:df:91:6a:4d:
                    56:c3:d4:55:f5:e5:5b:7c:61:e9:33:05:43:a2:96:
                    16:31:5b:74:0b:cb:cd:32:79:70:75:49:59:95:3e:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:6B:AD:E6:C9:7E:DE:52:22:6F:1F:B2:0C:6B:B8:71:44:24:19
            X509v3 Authority Key Identifier:
                keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:5a:22:7b:13:ff:6e:0c:6d:8b:c8:13:e0:68:2e:8f:f1:
         8b:c2:27:a1:c2:32:82:f5:47:cc:63:aa:22:90:a6:42:03:24:
         c5:bf:f5:bc:5a:c9:03:05:28:52:2f:87:ba:71:30:b1:a5:ff:
         63:8c:6f:9d:9e:a3:db:6d:52:38:4a:dc:da:dc:ca:4b:d6:08:
         7f:63:59:3f:bf:d8:f9:60:08:ed:8a:05:f0:e6:60:c8:c0:35:
         97:c4:2a:a1:05:7d:f5:06:0e:a0:74:72:2a:57:9f:74:32:df:
         b1:9b:67:49:ae:ec:5b:f9:47:33:54:10:62:ce:b1:32:10:2a:
         83:ce:1c:c0:8e:2a:b2:5f:0e:29:a2:38:69:d4:1d:af:d6:ed:
         4e:4d:03:c5:d9:6f:eb:cd:51:4d:90:0a:8c:10:e0:3f:bb:6f:
         14:f4:8e:f1:2d:ef:66:55:d9:67:39:5d:d4:4f:aa:b9:75:7e:
         75:34:f7:e4:70:af:3d:10:7e:6d:14:71:22:1d:47:93:d4:d9:
         44:b8:f0:cd:6f:90:e8:59:64:b3:0d:8f:75:ee:d9:af:ac:ec:
         23:69:77:65:dd:a7:b4:91:01:fa:26:c4:ac:ae:a7:1d:60:3d:
         ef:41:02:cf:72:2c:03:b2:8e:6d:98:6a:9f:b3:30:ef:9a:e7:
         75:a8:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:51 2026 by rpki-client