Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          TnhQKm6PYe4lARso/WUnwIaDwpJreIT9eDxNgGe2c44=
Subject key identifier:   CF:7E:56:FC:94:FE:64:1D:78:BE:1D:B2:51:5F:9F:B8:5B:3B:95:FE
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       01A0C934F2746C82D31D95EF501DF4978684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          1A6C
Signing time:             Tue 22 Sep 2026 13:01:25 +0000
Manifest this update:     Tue 22 Sep 2026 13:01:25 +0000
Manifest next update:     Wed 23 Sep 2026 13:01:25 +0000
Files and hashes:         1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
                          2: nltuA6nF3AnGb_5t0LkwbVL_F8g.roa (hash: aZHiurjYO5FfRYF8bJt1fIJHsdtiFBEhu82Wl5pUEMU=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: 9lDyCRmrjTqQjWAMrbsWUANtb786HbUbXpXkxYJ7WG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:f2:74:6c:82:d3:1d:95:ef:50:1d:f4:97:86:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Sep 22 13:01:25 2026 GMT
            Not After : Sep 23 13:01:25 2026 GMT
        Subject: CN=cf7e56fc94fe641d78be1db2515f9fb85b3b95fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:93:24:e3:b1:67:a8:85:1c:50:75:87:b6:
                    51:e2:aa:40:5e:1f:f8:b0:c3:aa:3c:83:20:e9:9b:
                    fb:bd:ae:d7:cb:d8:e5:72:8c:e6:79:4d:4b:23:d3:
                    c8:61:c8:32:a8:08:e9:04:75:39:c6:7b:f4:09:19:
                    fa:87:3e:63:58:64:ea:0d:c6:5f:38:bd:67:66:cd:
                    4c:98:dd:76:47:61:31:71:16:0a:fe:f1:76:00:1b:
                    6a:26:55:d9:20:85:5e:04:54:ba:2c:13:86:9d:c5:
                    f5:a9:db:bd:cc:5d:72:9d:5c:58:78:08:74:07:31:
                    e9:f3:c2:ff:d1:5d:04:e1:0a:6e:cf:9f:94:de:61:
                    e3:36:23:bd:ef:d2:18:28:a2:e5:92:8a:cb:fc:2f:
                    7c:27:bc:4c:a3:66:53:b7:e9:88:9f:39:bd:1f:f2:
                    bb:a3:5a:ff:b9:ae:40:25:45:a3:08:d6:33:45:91:
                    31:5d:07:54:b7:13:5c:8c:9c:bc:9c:8c:7c:3a:42:
                    1b:c5:06:95:00:f9:b8:46:f5:db:a3:dd:b0:75:b8:
                    22:9c:33:44:6d:89:1a:4b:07:8e:29:fd:11:93:2b:
                    5e:b8:8e:33:7f:e8:e3:6a:f8:a1:60:bf:b6:75:3f:
                    8e:1f:a5:1f:00:58:ae:4e:fd:7f:c0:67:4d:d2:58:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7E:56:FC:94:FE:64:1D:78:BE:1D:B2:51:5F:9F:B8:5B:3B:95:FE
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:26:b4:90:04:a9:ff:60:cd:0f:06:e8:e8:eb:6f:c8:be:01:
         f3:c3:75:6f:21:07:5f:0b:73:1a:f4:83:91:cb:e2:20:93:22:
         b9:35:c3:2a:5c:f3:51:92:55:d7:20:cb:a2:d3:06:b0:78:d9:
         4b:81:a1:57:40:d5:2d:89:80:fe:da:41:d7:81:b4:6b:c1:44:
         01:be:db:02:ae:b9:95:51:c5:78:df:66:dd:3d:2e:01:34:53:
         0a:a4:43:fb:06:a6:37:aa:a8:27:4b:80:30:27:02:19:b8:0b:
         75:72:c4:33:93:9f:62:45:64:52:dd:91:59:ec:73:cf:00:0f:
         59:4c:62:e8:45:52:4d:3e:5d:ff:5f:48:25:4c:56:72:1d:78:
         3d:ed:90:d2:3e:33:4c:60:b2:3c:96:bd:0b:7e:2d:05:78:79:
         1d:4d:35:3e:d8:f3:80:09:b9:c8:99:c2:8a:75:1d:02:e7:17:
         9e:c6:e0:cf:5b:04:fd:46:cf:0b:26:d0:54:2d:60:4c:89:13:
         bd:fd:fd:79:07:d3:72:74:a8:b4:20:93:9a:4c:b9:7d:fb:aa:
         94:2e:91:50:f3:c4:31:4b:84:ac:5e:c1:20:fb:06:32:44:5c:
         c1:30:3c:66:fa:0f:91:25:3c:2c:3e:4b:68:b2:ac:2f:c3:39:
         db:5f:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:22:21 2026 by rpki-client