Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          gTwPMtS+vvad7qBXfn3dNitdfU+As8w6ffrFlkNH+EU=
Subject key identifier:   1B:E9:FE:10:A0:AB:81:A1:0D:F2:C3:98:3D:B4:D7:43:5F:39:45:9F
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       01A115989993ECE7F89E5B73FA7E7B7141B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          1AA0
Signing time:             Wed 07 Oct 2026 09:01:24 +0000
Manifest this update:     Wed 07 Oct 2026 09:01:24 +0000
Manifest next update:     Thu 08 Oct 2026 09:01:24 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: iKaNY+FYZQZQUWGbq+AMxWkD7tsiFE4AXNcmBI5q58c=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:98:99:93:ec:e7:f8:9e:5b:73:fa:7e:7b:71:41:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Oct  7 09:01:24 2026 GMT
            Not After : Oct  8 09:01:24 2026 GMT
        Subject: CN=1be9fe10a0ab81a10df2c3983db4d7435f39459f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:15:67:1f:94:1d:d6:73:b3:cd:39:a3:d3:
                    13:17:af:f3:6f:62:67:42:f1:2d:35:b3:1b:f4:c7:
                    2a:f5:92:11:28:7f:36:c5:9b:0e:2c:d5:43:31:ad:
                    de:81:01:93:94:f4:f2:44:0a:93:e5:1a:e2:c1:a8:
                    3b:af:33:b6:a7:8f:c2:3b:b6:f1:53:99:cf:54:13:
                    75:a4:6c:67:a3:d4:01:7e:2a:91:c1:02:9c:87:c7:
                    51:96:ed:e8:7d:f8:e3:e0:13:a6:dd:1d:2c:c2:95:
                    31:64:2e:b0:46:b5:c7:1c:e6:2a:ea:30:dc:7b:01:
                    c1:0d:43:fc:0d:09:c4:9c:b1:bb:82:bf:ab:c6:3c:
                    b6:cc:85:24:6d:02:43:92:b4:7d:77:eb:3d:52:23:
                    a4:44:99:31:2c:2b:88:6f:c8:50:b5:a7:c7:40:d8:
                    0c:e0:b9:a4:ad:ce:b5:fd:b9:4d:09:1c:27:71:f7:
                    87:52:82:10:de:84:e6:21:26:8f:27:7b:b2:81:8e:
                    ca:46:e6:03:5d:dd:15:61:8d:52:07:8f:16:af:69:
                    e3:04:0a:0a:94:05:a2:50:61:be:c1:34:3b:ea:36:
                    96:28:15:fc:bf:c6:53:24:d5:14:0f:c9:40:3e:72:
                    57:75:76:68:c8:43:ca:4c:6d:eb:2e:8d:0c:97:53:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:FE:10:A0:AB:81:A1:0D:F2:C3:98:3D:B4:D7:43:5F:39:45:9F
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:dc:35:e4:e6:18:e5:10:15:50:39:4a:66:3f:51:ab:f2:2f:
         af:8c:55:b5:5c:cf:c6:24:fb:e8:07:bc:75:da:7d:cb:8c:d6:
         71:a9:94:8f:08:83:65:81:c5:79:a5:bd:18:18:88:d1:e9:05:
         11:f1:9d:41:5c:80:64:89:2b:04:54:c4:64:60:78:83:a5:96:
         cb:63:cf:ac:f4:f2:51:a8:ab:9f:86:c0:53:16:d8:92:30:bc:
         4e:58:5f:6d:f4:00:d9:c8:26:00:cb:40:f2:4e:69:4c:00:ee:
         71:94:e7:0d:64:91:6f:6e:cd:28:de:84:cd:c7:93:c1:de:c1:
         cf:44:41:ab:23:76:db:f9:2f:29:22:b3:60:e7:f6:a0:ad:de:
         d1:36:44:90:07:94:51:78:c8:e2:99:85:e3:6f:96:05:86:38:
         f6:d4:9c:41:6b:a6:9f:8d:53:a7:33:91:58:2d:6a:c7:6e:65:
         b9:0f:d8:bd:59:95:3a:04:cc:2e:e4:07:61:fa:1f:ec:f5:73:
         18:80:3b:53:9d:2a:19:50:be:77:d9:17:cd:90:44:23:4a:aa:
         97:6f:49:a9:d7:1c:ce:f1:c5:9c:b1:1d:0d:4f:e1:43:4a:32:
         07:5f:fd:b9:20:54:69:d1:92:b0:c2:6f:c0:c3:c2:b9:ca:4f:
         b9:89:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:16:09 2026 by rpki-client