Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File:                     oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier:          8Ccqg0oI79X7dh7jRHTm+hDV6UZ/LIzNdmgbOCxKOCU=
Subject key identifier:   E7:58:4D:DF:73:5D:F7:EE:17:EC:39:75:CB:DB:BE:54:3C:C0:A3:00
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer:       /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial:       019FAC75EAFA46E1F3E5679F167EAA8FA6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number:          0351
Signing time:             Wed 29 Jul 2026 06:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:36 +0000
Files and hashes:         1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
                          2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
                          3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: XuG9Z66lYjgpDuFnJxWGTHJyfLA2HLhBK0grUfiBYq0=)
                          4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:ea:fa:46:e1:f3:e5:67:9f:16:7e:aa:8f:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
        Validity
            Not Before: Jul 29 06:00:36 2026 GMT
            Not After : Jul 30 06:00:36 2026 GMT
        Subject: CN=e7584ddf735df7ee17ec3975cbdbbe543cc0a300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:5f:bc:be:09:7a:fc:d1:6c:de:3a:e5:9f:
                    15:fa:f1:eb:80:a2:1a:e5:48:2c:15:cd:39:f7:f3:
                    21:8f:0c:d9:0e:37:42:6c:2a:6a:67:2d:21:8c:bb:
                    f2:e0:32:8c:b2:b3:79:e9:99:e8:d0:23:29:be:40:
                    90:31:fe:7b:b8:77:87:07:06:e2:99:b8:64:2d:51:
                    e2:bc:2d:54:e9:f1:ab:2e:08:76:64:7b:f7:ca:39:
                    a3:fd:16:bc:3e:9f:8f:a2:93:86:93:b0:26:7b:b1:
                    1d:72:e1:36:d6:22:9c:3f:98:d3:a9:b1:82:40:06:
                    2c:a9:28:a5:d5:df:f8:62:2c:e7:8f:c3:04:f9:cb:
                    d8:4f:3e:32:ff:8a:95:ab:9f:73:87:62:10:98:d7:
                    94:57:7f:26:dc:dd:11:fb:8e:ff:d4:34:55:78:aa:
                    c4:f8:c2:ec:f0:bd:1b:af:30:87:09:44:38:e0:2f:
                    a6:98:48:6b:55:fa:df:7d:ec:f6:5e:ef:1b:03:6c:
                    cf:77:12:7c:41:98:0a:a5:cc:93:e7:c9:86:36:7a:
                    ef:f7:f9:54:30:db:fe:d3:eb:46:c9:56:ed:78:3a:
                    71:d6:4e:22:7b:42:1c:56:f4:38:40:ac:6d:17:91:
                    76:18:6d:e9:d3:e2:10:eb:f7:9a:15:d0:59:77:48:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:4D:DF:73:5D:F7:EE:17:EC:39:75:CB:DB:BE:54:3C:C0:A3:00
            X509v3 Authority Key Identifier:
                keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:44:17:33:ed:cd:3b:63:e7:04:31:4d:a4:f3:2e:b7:38:79:
         3e:d5:23:f4:94:16:29:db:22:cd:9a:c0:eb:ab:f5:38:d8:6a:
         8b:2a:7c:db:e9:ff:b5:bb:05:7b:26:79:0b:17:69:03:f8:d6:
         09:51:8c:95:47:46:84:ae:1b:c6:4c:2b:9a:c4:18:27:96:e3:
         93:71:20:8c:c0:2c:67:08:d2:34:82:4f:35:f5:ea:00:31:c9:
         ee:c9:2b:be:2e:0e:a4:96:68:71:c5:04:22:4e:6e:0c:29:47:
         e0:21:fc:82:df:ac:a9:a7:b9:6b:08:c9:99:91:98:25:60:94:
         19:cb:43:9f:23:e5:db:e9:14:7b:39:f7:d0:46:42:6e:43:67:
         d3:f6:49:2f:eb:21:59:9c:b1:ff:0f:3b:cd:dd:77:b0:0d:48:
         3c:01:d3:7b:86:8c:1e:5a:22:dd:ba:7b:f5:ad:1c:a7:88:f8:
         7b:94:dc:a7:8e:50:40:d0:f5:de:e1:ec:4a:ab:0f:17:06:96:
         ef:dd:c4:98:f0:76:dc:7f:80:c6:fb:6a:ec:8d:2c:39:4f:0c:
         8b:54:41:a1:4e:20:82:6b:c1:a0:f2:ca:59:9f:87:0f:4c:c1:
         1e:68:8a:80:81:50:35:ad:e2:e0:04:48:c4:8a:26:97:bb:5f:
         35:9f:1f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:53 2026 by rpki-client