Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d15303-3ac4-4522-9586-b3f6f1ded45f/1/OFHNugDSeuuoewsYBI04zNnhDHI.mft
File:                     OFHNugDSeuuoewsYBI04zNnhDHI.mft (raw, json)
Hash identifier:          m8PdPLNB3B6W+AAIu+rJwy4M/UlbaBsc6YEQMQ/FI4A=
Subject key identifier:   52:58:6F:C3:D9:07:ED:24:40:7A:3C:76:C5:BE:F3:99:C2:40:3D:DB
Authority key identifier: 38:51:CD:BA:00:D2:7A:EB:A8:7B:0B:18:04:8D:38:CC:D9:E1:0C:72
Certificate issuer:       /CN=3851cdba00d27aeba87b0b18048d38ccd9e10c72
Certificate serial:       01A119E26F577DDD392D626F1720D943EE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFHNugDSeuuoewsYBI04zNnhDHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d15303-3ac4-4522-9586-b3f6f1ded45f/1/OFHNugDSeuuoewsYBI04zNnhDHI.mft
Manifest number:          FC
Signing time:             Thu 08 Oct 2026 05:00:32 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:32 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:32 +0000
Files and hashes:         1: A5ubQVqRQ0cJD9qvIcg0aPBsaPY.roa (hash: AZfIeZc0GtLHEhr94NVm0bBw14J9Y1137b3f8jEpPzI=)
                          2: OFHNugDSeuuoewsYBI04zNnhDHI.crl (hash: gVlSzpXjvYBt5IAVrZqZvzoOQ/VbaXGj68Yu5gWIjg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d15303-3ac4-4522-9586-b3f6f1ded45f/1/OFHNugDSeuuoewsYBI04zNnhDHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d15303-3ac4-4522-9586-b3f6f1ded45f/1/OFHNugDSeuuoewsYBI04zNnhDHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OFHNugDSeuuoewsYBI04zNnhDHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:6f:57:7d:dd:39:2d:62:6f:17:20:d9:43:ee:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3851cdba00d27aeba87b0b18048d38ccd9e10c72
        Validity
            Not Before: Oct  8 05:00:32 2026 GMT
            Not After : Oct  9 05:00:32 2026 GMT
        Subject: CN=52586fc3d907ed24407a3c76c5bef399c2403ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c7:f7:95:7f:0a:74:b9:44:ec:83:0d:f7:02:
                    ee:57:28:7c:01:c5:1f:a9:34:b3:98:1c:d8:8f:60:
                    f8:e3:73:f3:f3:07:95:0d:f0:f3:dd:77:1a:91:aa:
                    a2:d8:5b:a0:3a:23:68:98:a8:82:43:43:12:d3:37:
                    ca:17:19:9a:71:d4:2e:93:91:bf:73:6b:68:ef:ec:
                    18:98:d0:eb:d5:34:de:71:d7:11:60:dd:6d:16:3a:
                    5c:e6:e4:30:d3:82:52:61:52:e4:26:00:2e:d2:bc:
                    cf:6c:26:06:94:e0:68:6f:4c:01:ae:8b:44:ae:8d:
                    c7:e8:ab:fb:32:f9:26:67:4b:c0:73:7c:bb:85:81:
                    11:4a:b8:80:50:aa:13:b9:eb:12:07:a7:2f:36:29:
                    e4:29:51:f7:54:6a:04:a2:65:b4:b3:17:59:3d:47:
                    29:59:7e:36:ce:e7:04:10:d1:0a:9b:f0:61:90:34:
                    2f:55:7e:50:5a:52:c6:b2:cf:82:4a:9f:43:39:c4:
                    1d:bc:15:a3:0d:5c:58:b6:72:2b:f6:ec:4a:4a:35:
                    33:03:c0:a5:5b:d9:92:3a:7a:44:b6:f0:9e:e0:64:
                    5f:ba:51:65:c8:74:b1:56:ad:80:54:cb:73:56:ea:
                    18:dd:3f:78:8b:36:74:5b:fb:f6:36:fe:1b:df:4c:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:6F:C3:D9:07:ED:24:40:7A:3C:76:C5:BE:F3:99:C2:40:3D:DB
            X509v3 Authority Key Identifier:
                keyid:38:51:CD:BA:00:D2:7A:EB:A8:7B:0B:18:04:8D:38:CC:D9:E1:0C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFHNugDSeuuoewsYBI04zNnhDHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d15303-3ac4-4522-9586-b3f6f1ded45f/1/OFHNugDSeuuoewsYBI04zNnhDHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d15303-3ac4-4522-9586-b3f6f1ded45f/1/OFHNugDSeuuoewsYBI04zNnhDHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:69:14:93:99:b9:15:fe:13:11:c8:4e:41:06:e7:f3:c7:
         c0:6e:f4:04:0e:5d:ab:58:61:f4:d7:36:bf:54:00:d7:70:78:
         25:06:f0:21:7b:ab:57:d1:c8:74:62:91:06:21:5c:a7:55:24:
         14:46:ff:78:44:f3:d1:db:d8:01:a9:68:1d:ac:ad:90:79:fa:
         1b:88:39:48:73:72:73:d4:0b:1a:61:c3:8d:f2:a9:b1:b4:98:
         bd:d5:9a:1d:e8:42:da:f4:e8:0d:fb:19:96:9c:c6:16:3a:8b:
         19:5f:34:b3:5e:90:04:ea:37:31:9c:4c:43:64:da:44:22:38:
         f0:1a:7b:47:a2:aa:82:63:42:5b:1b:a7:b7:e0:d3:7a:9a:dd:
         a9:2e:38:2c:b6:63:b2:a4:02:a7:a0:dd:2b:f0:72:6c:1f:1b:
         15:eb:16:38:51:8f:4e:04:18:3f:9a:92:bd:a8:26:bb:8e:ff:
         cc:8c:a8:ce:ea:41:33:dc:70:1d:cb:fd:45:e2:ea:c3:3d:de:
         81:02:39:be:58:29:6d:93:7b:ed:59:09:65:a3:21:19:aa:d4:
         bc:fe:fb:77:bb:cb:ff:2a:be:9f:b2:98:25:91:49:20:3f:30:
         d6:1f:e4:48:4b:54:25:bb:e9:12:95:8a:f0:f8:f1:60:16:c2:
         77:a2:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:43:03 2026 by rpki-client