Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
File:                     oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft (raw, json)
Hash identifier:          /64NKPK8m5yVuJ+OFVhCnvPlWHiH3D885N5/EQrkGT8=
Subject key identifier:   61:E9:F4:FB:3D:82:BD:E4:26:DE:BE:C9:2A:7F:38:A3:44:23:47:41
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Certificate issuer:       /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial:       01A0C557B64031E52BBA89769E2838EA8684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
Manifest number:          09
Signing time:             Mon 21 Sep 2026 19:00:54 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:54 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:54 +0000
Files and hashes:         1: mT4iExO_8k6m2zUFxjqyyXX_B5M.roa (hash: MP6E3DYsYt8ooikR41wucpeN+Eiz9yRT03CjiUtKRVQ=)
                          2: oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl (hash: 37kWba6dKxFuqHrcssqwKxPU01GT1GRwkLpIIz+B51E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:b6:40:31:e5:2b:ba:89:76:9e:28:38:ea:86:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
        Validity
            Not Before: Sep 21 19:00:54 2026 GMT
            Not After : Sep 22 19:00:54 2026 GMT
        Subject: CN=61e9f4fb3d82bde426debec92a7f38a344234741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:05:a9:4a:02:54:9d:e7:10:dc:89:d8:f0:
                    3b:38:89:e4:af:72:e7:27:c9:34:9a:64:c5:e1:37:
                    d0:43:e5:f9:03:7d:d5:cc:5a:13:06:f5:9b:13:fd:
                    57:7a:ad:45:1a:32:5b:ce:56:ce:a1:c2:5e:dd:d1:
                    8e:36:6a:ed:89:2a:cf:c1:3a:c6:de:5e:ff:96:6e:
                    84:f0:85:61:44:e8:19:a1:18:d9:79:64:93:65:06:
                    8d:7e:e8:fa:20:46:04:07:0d:14:79:95:f4:43:48:
                    42:75:7e:34:2d:e2:56:d5:b3:d0:5a:dc:15:fd:f3:
                    71:10:5c:35:d9:66:75:65:68:bc:50:21:37:69:43:
                    eb:3c:e9:0b:97:5c:5a:42:4d:0b:aa:36:2e:f9:ac:
                    6e:a2:62:cd:b8:83:37:d1:46:a5:1c:89:24:bb:bf:
                    d5:23:ef:b5:80:00:2a:b3:44:f1:49:8a:83:bf:d5:
                    a5:83:10:ce:63:69:b4:3a:2d:b8:66:cf:9a:2f:6a:
                    55:b4:1e:99:bc:86:fd:21:14:8c:0a:5f:c4:bb:34:
                    f3:91:3a:52:75:ad:13:ce:ce:a6:c1:6a:a4:00:ee:
                    f9:99:6a:93:54:57:8f:6b:31:2f:45:fc:51:6b:c4:
                    42:a9:95:0c:6a:80:e2:0f:8e:67:0e:70:f6:d6:95:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:F4:FB:3D:82:BD:E4:26:DE:BE:C9:2A:7F:38:A3:44:23:47:41
            X509v3 Authority Key Identifier:
                keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:04:1d:e7:29:b2:15:c1:3f:58:f2:ad:77:4e:99:3d:6e:
         2f:ed:bc:ef:ab:2b:e5:8d:22:e7:0e:30:d8:80:1a:e0:22:69:
         96:7f:ff:8f:a5:77:78:2f:6b:f8:c9:bf:69:04:1d:ce:9e:bc:
         af:7e:64:35:ca:cc:57:0e:eb:a0:df:2c:be:42:13:fd:70:72:
         00:33:4c:93:da:86:05:57:42:67:b1:53:fa:af:78:18:04:3e:
         b1:9d:2e:dc:4a:41:de:46:6a:96:9c:95:5b:ce:ff:eb:a1:db:
         0a:a4:68:36:78:e4:11:6b:dd:ca:22:3d:54:ac:22:64:c2:15:
         07:de:58:a4:28:56:c9:36:c2:65:a1:9c:6a:23:82:35:3f:e3:
         01:b8:e8:dc:62:77:53:ea:5e:cc:d7:dd:33:cc:bc:10:cd:57:
         b0:66:65:7d:f7:d6:31:58:a2:0e:4e:14:f2:ee:af:32:76:ac:
         c0:58:d7:06:0a:aa:3f:ca:db:a8:fc:f2:cb:d2:bf:0f:80:b0:
         40:76:84:23:29:d6:44:23:10:3c:aa:c0:01:7e:4b:05:89:52:
         b9:f0:42:b1:d8:a4:ac:55:95:73:ba:b7:ee:bf:6b:e9:bc:fe:
         fd:73:83:fa:0a:dd:8d:7a:d1:23:31:08:a6:1c:db:c3:b8:d0:
         e0:d1:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:50 2026 by rpki-client