Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File:                     oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier:          TBBzQ0192/r/yDC4Kh5l8COWaiQZjeaPiTxBsRkL6lI=
Subject key identifier:   00:0F:3B:2F:49:78:F8:6F:88:82:E4:C9:61:97:01:CC:45:F3:2E:6E
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer:       /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial:       019ED4CFE56BE4F0165B743104B2D7839D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 09:00:54 +0000
Manifest this update:     Wed 17 Jun 2026 09:00:54 +0000
Manifest next update:     Thu 18 Jun 2026 09:00:54 +0000
Files and hashes:         1: OU2kt5pP9LNwwlGwfRZGFyH5hzI.roa (hash: 6flWuRYE3Zk0uPFYWYiQzcnSra7IhOrzHZC3EVLgp5s=)
                          2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: 0eMqUtPR3RQTcUHudOHW/6hAzlBB3GyMw/1mmkB6ejw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:cf:e5:6b:e4:f0:16:5b:74:31:04:b2:d7:83:9d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
        Validity
            Not Before: Jun 17 09:00:54 2026 GMT
            Not After : Jun 18 09:00:54 2026 GMT
        Subject: CN=000f3b2f4978f86f8882e4c9619701cc45f32e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:f6:77:61:77:c2:24:a5:31:6e:d3:5b:a3:
                    e1:e1:72:36:d3:5d:f0:7f:d2:22:a4:82:a4:15:31:
                    9b:8d:d6:41:fa:f7:bb:aa:b6:7d:7f:78:d4:a0:34:
                    e4:24:4e:0d:2e:b6:36:40:04:89:15:b6:19:bb:bb:
                    62:64:14:be:12:f4:58:df:c6:ed:78:8b:8b:ad:52:
                    68:f4:41:f5:0a:37:fe:25:72:48:3e:fa:d8:73:25:
                    48:91:35:67:20:42:1b:dd:f9:8b:49:ab:7a:de:05:
                    70:8f:12:4e:43:03:4b:c3:b6:d8:2d:77:ee:9a:92:
                    9d:34:d7:11:71:35:19:e4:f4:a5:e3:7b:74:42:ee:
                    2a:53:93:4e:8d:14:42:4e:1d:c8:2c:c9:4e:a7:a3:
                    1e:8a:1c:fa:57:60:24:dd:81:83:62:0b:69:56:17:
                    1b:4c:79:0a:b2:c6:e3:59:7a:bf:88:b1:59:c2:bd:
                    36:c7:b0:54:7e:cd:f9:b4:78:1b:3b:23:b4:06:80:
                    22:1b:8e:fc:71:e8:77:fd:f8:56:e2:7e:f4:7d:4a:
                    90:20:63:93:11:4b:41:15:28:89:ac:ad:43:0a:48:
                    51:7a:03:7d:93:a1:62:6b:34:e3:23:7a:a0:ac:1b:
                    dd:cb:b3:fa:39:8f:79:11:92:15:3e:ac:79:b7:8e:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:3B:2F:49:78:F8:6F:88:82:E4:C9:61:97:01:CC:45:F3:2E:6E
            X509v3 Authority Key Identifier:
                keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:e8:4d:15:42:7c:52:08:9d:69:14:57:ed:3a:19:ef:f3:
         15:1b:e5:4e:6c:b8:bd:f0:b4:dd:dc:81:42:38:ed:43:c8:b4:
         93:f6:d9:d9:4a:0c:64:bf:fa:63:79:94:91:63:a8:c0:1e:fb:
         61:c2:32:90:ef:70:c4:32:be:86:1d:63:e1:d4:02:69:5f:36:
         53:b3:14:bd:0a:df:ad:29:0f:91:36:82:2e:22:d6:ed:44:90:
         99:7c:09:3a:d2:ff:6a:50:7e:ff:3c:f4:93:11:dc:68:08:f3:
         d5:fc:5d:36:21:a9:42:8f:db:ed:00:a7:a5:5b:db:a5:e0:19:
         97:41:c7:0b:8d:b1:28:aa:2b:eb:1b:bc:8e:09:33:b3:09:fc:
         26:80:34:f3:7f:8e:3d:3c:a8:54:06:b2:ee:ab:bd:28:1c:1c:
         1c:fe:3c:8d:33:5f:08:8c:b6:2d:25:6d:8d:cb:7a:d2:5f:6f:
         b2:27:cf:f3:e4:9d:72:66:ca:5f:e3:6f:d7:0d:7d:46:c0:97:
         fc:65:7c:5e:f3:6c:30:00:45:49:f8:d3:4d:8d:cf:96:3c:17:
         b6:62:63:00:6e:1f:e4:e9:1f:79:06:88:c7:62:03:28:c8:37:
         fc:ad:16:bc:c3:47:6f:b5:7d:41:b1:99:8b:d5:1b:8e:9a:29:
         a1:42:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:50 2026 by rpki-client