Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File:                     mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier:          EYWmJP2OpPWcU9ukPCyGBp6X5hPtawV08yr53Z4gr6U=
Subject key identifier:   26:71:F2:BC:46:22:28:10:73:4C:BF:E8:70:1C:31:41:14:15:70:E0
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer:       /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial:       019CADC7BCFE88DC7E7B4B89F037D8123FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number:          059A
Signing time:             Mon 02 Mar 2026 09:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:14 +0000
Files and hashes:         1: e7AS-h8UVzO25ySDY88gNZMJcDc.roa (hash: nbzFORwCh+VhrVrfEhpvS2wccja5BBY0hNY1kpvLUoM=)
                          2: jQQwHQnxt60DZocx5cyYSn7BPpc.roa (hash: uzGsYYKtRtXMEU0FMjrboZQzPWlbaFPHYavLo2IswP8=)
                          3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: vDKDg/y7H2VQJ3ZcnovS0FbZaDrDrcaZrZqfdRPHjDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:bc:fe:88:dc:7e:7b:4b:89:f0:37:d8:12:3f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
        Validity
            Not Before: Mar  2 09:01:14 2026 GMT
            Not After : Mar  3 09:01:14 2026 GMT
        Subject: CN=2671f2bc46222810734cbfe8701c3141141570e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:d4:3c:de:8b:d2:5b:8f:8e:ab:d2:fa:91:
                    a8:c0:69:ba:04:48:47:97:bc:ea:43:5e:71:dc:d9:
                    34:2c:e8:71:67:b1:41:56:02:63:8e:83:df:60:d7:
                    ae:42:cb:0f:b2:3e:91:d6:ea:8a:31:78:a2:16:46:
                    13:e1:61:ee:a4:0b:b5:47:e0:24:65:ae:29:4f:1f:
                    ab:61:b4:77:ba:8d:97:13:e2:a9:9a:f7:08:10:97:
                    85:80:6e:8c:db:75:8c:04:b2:2e:35:a6:e4:d5:82:
                    04:36:ed:e9:47:81:4c:91:41:0d:06:8e:10:ce:a2:
                    b6:43:d0:5e:87:09:4b:27:db:a4:1b:c3:b7:39:4b:
                    3e:06:11:b9:8b:44:16:ce:8c:97:c7:ee:9a:be:2b:
                    bc:a9:25:0b:4b:72:84:dc:08:c9:58:bf:81:15:b8:
                    12:e7:37:7c:8a:fb:98:31:d8:d1:2a:0f:9f:ac:25:
                    9c:a7:1f:23:47:34:4b:ac:0e:44:76:48:32:4a:c2:
                    95:19:fd:2e:8f:4d:1e:7a:e5:be:ad:ed:a1:52:ad:
                    04:3e:2a:36:2b:df:70:73:ca:8d:e6:ef:13:f8:c8:
                    20:ad:5d:b9:01:83:fa:ce:a1:db:af:ff:d7:ad:58:
                    8f:8a:17:5b:75:5c:bf:79:85:09:42:b5:94:bb:59:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:71:F2:BC:46:22:28:10:73:4C:BF:E8:70:1C:31:41:14:15:70:E0
            X509v3 Authority Key Identifier:
                keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:56:19:d5:0d:3a:f1:3e:c5:db:97:36:32:83:ec:5c:cd:3e:
         f2:2c:98:b6:b4:cf:66:b2:2d:0c:b3:cd:93:27:f1:f0:ba:ae:
         26:72:52:8d:04:57:c1:58:6c:d4:2a:aa:eb:8b:c9:44:eb:b7:
         96:06:ee:f3:b4:6c:a2:41:fb:8e:9a:b1:a2:72:39:27:2b:f5:
         24:b8:37:76:81:d0:3d:87:b0:26:db:e5:43:ae:85:96:68:d1:
         86:1a:65:77:36:4d:05:2b:09:15:60:bb:ee:62:63:19:0d:f0:
         31:0d:90:b8:d2:5f:01:ef:c3:75:bb:f2:51:3c:29:ab:23:fb:
         1c:df:38:23:70:4e:94:25:95:28:0c:ee:d9:98:3b:85:77:d6:
         9c:52:28:a8:23:69:ad:34:c8:a2:2f:d2:3f:c0:b3:f4:84:23:
         8a:cb:cb:ef:60:ea:38:17:15:42:7c:a0:78:44:0f:19:b9:78:
         20:71:5f:ec:f3:80:1a:6d:b1:b3:65:6d:23:31:e6:b1:31:b9:
         36:65:62:ab:d1:7c:ab:40:1c:48:24:5c:5e:4e:6c:e9:ff:80:
         eb:ab:40:4c:28:72:31:1c:c5:b7:4c:2f:bb:c1:f0:ab:f7:a2:
         8a:9b:c4:39:90:ae:38:6f:73:8d:7a:4b:5d:31:0f:c7:37:7b:
         9c:f1:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:42 2026 by rpki-client