Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
File:                     OWaV1J6GRw-alqgbSiQxm_l7x64.mft (raw, json)
Hash identifier:          5/KF33oE9M9vHtsQUzp147iOlqvgIMJv7drXLR2Niq0=
Subject key identifier:   05:82:8D:96:04:0F:32:29:CC:5F:6B:45:13:5C:CF:81:C0:59:59:E9
Authority key identifier: 39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE
Certificate issuer:       /CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
Certificate serial:       01A0D26DE9622094C6B7B76E6D2C7CF5E62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 08:00:13 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:13 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:13 +0000
Files and hashes:         1: HffM29R42fpCfN2qzwUjeJ-H-S0.roa (hash: PTCqTbI3aQtr5zYX+8hriBPXqPfTgAil3GxXOXcU5Nk=)
                          2: OWaV1J6GRw-alqgbSiQxm_l7x64.crl (hash: dFhjCjTjNtRH6xx/dgFubbz0Gg9gV8AB+jpI3PQWM3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6d:e9:62:20:94:c6:b7:b7:6e:6d:2c:7c:f5:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
        Validity
            Not Before: Sep 24 08:00:13 2026 GMT
            Not After : Sep 25 08:00:13 2026 GMT
        Subject: CN=05828d96040f3229cc5f6b45135ccf81c05959e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:b8:22:84:a5:09:ba:3b:23:66:28:63:a3:
                    80:17:0b:36:e1:ed:3a:7f:fd:24:e5:d0:4d:c8:e8:
                    bc:60:c5:62:3c:38:2a:f7:7d:97:e0:7d:90:a5:b3:
                    95:17:a1:33:7d:c7:82:fa:3b:4d:c8:d4:fe:2d:29:
                    b6:0f:3c:64:3d:0f:21:e9:af:b7:e9:63:73:18:93:
                    78:72:4f:ae:7e:fe:13:f9:d8:14:36:f1:df:2f:a6:
                    c8:95:7e:06:fb:82:db:7e:51:fe:91:a3:72:58:a6:
                    e4:1c:60:bb:fd:c0:38:86:c0:91:99:d9:45:15:df:
                    a7:14:da:1b:01:83:5f:a6:3f:46:fe:02:db:3b:20:
                    9a:55:38:6a:6c:4e:1a:22:d2:53:8c:f3:98:23:66:
                    66:3a:4e:07:88:e1:f6:74:f5:e4:69:e3:dd:1e:c5:
                    78:7b:62:3b:fc:40:6c:85:81:f7:90:a6:ee:21:86:
                    63:ab:70:6f:9f:89:e3:ec:1d:2a:0c:bc:2c:3e:ae:
                    c3:9b:b2:d2:5a:f7:c8:c9:df:36:db:d4:30:b5:94:
                    44:ed:48:27:f4:59:41:10:ec:c9:ee:c6:70:e1:60:
                    6c:9d:f3:47:b4:49:70:e1:47:05:88:f8:5b:54:d0:
                    90:d8:a2:a8:54:b7:6c:62:7e:a8:ec:6b:e0:d5:11:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:82:8D:96:04:0F:32:29:CC:5F:6B:45:13:5C:CF:81:C0:59:59:E9
            X509v3 Authority Key Identifier:
                keyid:39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:b5:0e:87:6a:96:77:60:8e:28:49:e8:8c:e4:1a:66:d6:
         e7:a0:b9:f8:ad:77:9d:e5:4e:dd:96:a3:20:8d:16:e4:ac:2e:
         1a:37:3b:fd:2b:c9:b5:ae:50:a7:7d:1d:fc:2c:7d:56:63:fc:
         34:af:6e:18:a7:97:d0:ac:f0:9e:f9:a0:6f:a2:ba:e3:48:28:
         28:99:55:da:9d:33:c3:14:89:f8:50:17:cf:32:1d:3e:fd:d9:
         75:15:a5:e9:16:9f:5d:cf:fa:bc:18:62:55:66:0d:b6:ce:7a:
         89:12:58:2d:da:8e:c5:79:78:88:7b:31:cf:b1:dc:fa:a8:09:
         d3:0d:f8:9b:5b:b8:e7:d4:0e:69:a8:f3:d4:9c:ca:6c:ee:7d:
         97:df:75:31:60:6a:b9:09:0b:8c:65:f2:33:23:84:c7:32:97:
         32:50:a7:b1:66:10:b6:41:ef:15:f7:c7:1f:40:eb:0b:95:cb:
         10:a5:d9:20:ac:01:e8:8c:60:7b:1a:ed:ac:ac:1d:b1:63:9a:
         a8:56:be:4a:89:1f:09:70:ae:46:64:6a:9f:ef:51:25:17:ad:
         4c:1d:a0:26:45:dc:f2:38:4a:cc:32:3c:4c:8c:27:19:2b:eb:
         3c:48:56:18:c7:f3:a9:b8:ed:5e:58:cf:33:7a:8c:74:77:fd:
         0c:d3:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:22:48 2026 by rpki-client