Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File:                     oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier:          SzCsl51V6twJPzqDTCNP7V4sXvu5d8Zdohpd4CXHQAk=
Subject key identifier:   68:81:B9:F9:9F:F5:01:BB:91:2A:10:62:83:34:50:A7:C8:09:23:5A
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer:       /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial:       019D97AA9432CF02257604BEF35C56280715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number:          18DC
Signing time:             Thu 16 Apr 2026 19:00:31 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:31 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:31 +0000
Files and hashes:         1: 7YBZcKVViMTWDrcb33ThKGDDu_M.roa (hash: IHCu4cQWdFxSyysMTzK5fSm+R+NUGrWc2Oz3D3xdFh4=)
                          2: GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa (hash: pErOAng/hMAVplt5BEW7zkhrPBcrawDRAlwBfNH3YGU=)
                          3: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: CEpP880WkCVJXt2JxQJBOhhHdY0YWK8LU5bUfoZ4elE=)
                          4: tLFRg_bTx97O6i5WBrjpjR1Uclg.roa (hash: tAKe6SFpNg6TVOf+ij5N/AwpZZGW6IDo9qGmcBBSkj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:94:32:cf:02:25:76:04:be:f3:5c:56:28:07:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
        Validity
            Not Before: Apr 16 19:00:31 2026 GMT
            Not After : Apr 17 19:00:31 2026 GMT
        Subject: CN=6881b9f99ff501bb912a1062833450a7c809235a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:14:37:a7:25:b3:93:86:e3:2f:61:f0:63:
                    a4:10:84:6a:c7:6c:36:b6:be:22:3b:cd:19:f2:81:
                    88:8e:cd:7d:57:cf:8c:7f:f0:c2:53:fc:bd:12:bf:
                    85:a7:b2:d8:a3:53:6f:86:42:c7:98:ab:a4:74:57:
                    d0:ca:91:04:2b:dd:12:f0:29:3e:a6:60:aa:7b:23:
                    76:24:c5:2d:1a:62:38:06:b5:4f:fc:4e:6a:6d:4d:
                    30:65:50:3a:f5:b1:20:b8:90:70:d4:27:30:3d:8e:
                    5b:4c:cd:eb:73:da:5e:a4:f3:cd:9d:ef:0e:ca:10:
                    fc:59:2d:5c:9d:14:6f:19:52:11:36:03:c7:d0:35:
                    44:f0:c1:18:5e:7b:e7:4c:72:ab:80:00:62:71:b4:
                    b2:0d:77:17:d7:ef:f6:54:a2:12:58:f1:da:50:e3:
                    ae:5f:ea:03:6d:3f:35:16:13:0c:7b:01:c5:81:c0:
                    f1:bf:a1:ba:c2:85:5d:74:da:48:31:6a:c8:cc:09:
                    47:5d:72:21:4e:b3:22:0f:5b:14:89:4a:74:3f:ae:
                    cd:07:e4:d2:ae:2d:d0:f3:cd:bf:fe:74:af:73:72:
                    81:a9:c3:2d:48:81:b4:de:3f:0e:27:6d:59:e8:4f:
                    ec:22:11:85:0a:64:9a:02:d8:8a:73:0c:04:07:68:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:B9:F9:9F:F5:01:BB:91:2A:10:62:83:34:50:A7:C8:09:23:5A
            X509v3 Authority Key Identifier:
                keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:39:0d:14:1c:4f:15:38:6a:73:c6:2a:4b:6b:3c:9f:7d:
         24:c5:8c:a3:75:41:e6:5d:e5:d9:82:65:dd:8a:63:e8:55:10:
         7a:8b:26:dc:c2:7b:64:38:9d:88:8d:b7:99:64:19:f7:8b:27:
         b1:4e:7d:61:a4:9c:7b:52:ae:93:49:44:e0:39:e4:88:b9:7c:
         e8:4a:21:fd:9d:c0:8b:f5:7c:ee:56:a7:14:e0:05:69:44:06:
         91:de:9d:1f:0b:06:e1:15:d0:46:fb:c6:47:c6:0b:18:f3:82:
         e3:7d:78:85:b7:2b:e1:87:54:f4:55:d8:2c:76:41:9e:32:cf:
         c8:bd:65:b3:5a:cf:8b:a7:ef:43:63:f0:db:ff:43:8c:ae:c6:
         52:01:91:f0:60:50:a2:b7:4c:bb:f3:49:41:80:1f:39:7d:62:
         b2:2e:b6:cd:67:2a:59:f0:4d:7a:68:a6:68:5d:34:5b:31:b6:
         8a:ac:6a:8d:23:29:83:93:40:94:d1:9c:a1:06:e7:b1:92:44:
         bc:4e:8d:b4:35:9f:6b:44:4c:38:72:3c:25:72:4d:73:07:99:
         54:df:d9:5e:15:7f:86:35:c9:52:f3:d6:7c:fe:48:48:ae:ad:
         cd:c4:c9:17:86:ed:5e:ff:3d:43:d0:fa:bb:50:26:57:88:1a:
         7f:93:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:31 2026 by rpki-client