Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File:                     OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier:          uYXc6SLlN+k8J2qQh8rNLC4iQlQXf380DSl2kNzkD0c=
Subject key identifier:   CC:81:BC:8B:6C:9B:58:1A:79:DF:05:F6:18:5B:92:05:81:DC:17:E9
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer:       /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial:       01A12C8E403EA5FF31D9C5B1B9E4FC8A3C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number:          118F
Signing time:             Sun 11 Oct 2026 20:01:22 +0000
Manifest this update:     Sun 11 Oct 2026 20:01:22 +0000
Manifest next update:     Mon 12 Oct 2026 20:01:22 +0000
Files and hashes:         1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: YtNJ9lnQKq9ba5AJTq4uqNsfOL2jdn1+bp63tuW3V2A=)
                          2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:8e:40:3e:a5:ff:31:d9:c5:b1:b9:e4:fc:8a:3c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
        Validity
            Not Before: Oct 11 20:01:22 2026 GMT
            Not After : Oct 12 20:01:22 2026 GMT
        Subject: CN=cc81bc8b6c9b581a79df05f6185b920581dc17e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:04:ac:81:d8:d7:32:97:c2:3d:c2:df:dd:
                    e9:be:79:2a:31:77:5f:2e:41:7f:de:29:75:85:86:
                    c7:3a:81:6e:7b:55:6b:6f:c0:94:da:98:4c:76:5f:
                    fa:05:95:05:d6:1d:1e:29:02:5a:bd:d9:a4:21:b4:
                    68:c0:2d:63:ab:29:a4:ea:96:0b:2e:10:c4:68:2b:
                    c9:6f:ea:56:40:3e:01:17:43:16:ad:93:a9:d0:9f:
                    a9:73:35:eb:65:2f:88:8e:75:cb:e3:59:af:1f:4f:
                    0a:a7:58:b2:36:7a:66:64:fa:d4:46:4e:35:dd:66:
                    8f:ef:ac:63:ca:9c:28:41:9c:7e:d4:e5:ab:84:ef:
                    9a:be:e4:21:91:d6:c5:17:eb:55:e2:b9:0a:18:99:
                    6e:c9:e2:b7:9f:96:30:72:48:0f:2e:07:25:05:cd:
                    f4:12:c1:c7:a8:4a:9a:bf:74:aa:92:51:5d:ed:ba:
                    cf:a5:b0:78:7b:fd:f3:af:c9:f8:d0:ea:04:4d:b1:
                    62:0d:4e:19:6b:41:2f:e3:a2:d1:38:b6:52:04:d8:
                    42:d0:77:a4:98:c1:34:61:7f:c7:f0:d2:47:48:e2:
                    86:19:70:ea:40:af:06:4c:49:49:9a:8b:5a:a1:ef:
                    d9:fe:90:ee:98:a7:40:b6:72:18:67:cd:f0:5c:92:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:BC:8B:6C:9B:58:1A:79:DF:05:F6:18:5B:92:05:81:DC:17:E9
            X509v3 Authority Key Identifier:
                keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:41:86:40:35:27:17:2f:f3:a0:4f:48:d0:9e:ab:34:a1:
         c4:2a:51:42:e2:ca:ae:84:5a:15:10:4b:65:f5:ed:1c:6d:5a:
         ed:91:23:ef:85:53:15:30:72:bc:2a:23:34:78:46:0a:c7:c8:
         a7:75:e5:21:f8:0f:f0:9f:53:db:8b:aa:47:0f:33:c3:ee:a9:
         7c:5a:05:51:f4:bf:77:25:8f:8a:e6:49:c3:a1:fc:45:4a:59:
         a1:ae:72:d7:4f:72:1c:45:07:f7:53:72:c3:a1:99:70:cb:fe:
         c2:f8:56:2a:26:37:41:8c:21:40:ef:ab:49:94:b4:3b:af:b1:
         4f:25:76:08:2f:04:c9:07:39:73:59:d2:3a:d9:9b:4f:92:06:
         36:3d:81:e2:f0:b1:6e:bc:ce:4e:04:9e:1b:87:1b:d7:95:90:
         64:2a:35:64:8e:1c:ba:6c:e3:39:39:5d:c4:e7:83:61:01:42:
         ec:12:1b:4d:4b:01:29:ac:7f:86:b5:20:23:31:61:06:50:74:
         ad:f0:58:82:69:8c:0f:d4:3b:01:6b:c0:be:5f:6c:9a:6f:5c:
         2e:6b:56:44:b1:c2:f7:b2:15:91:cf:46:6b:b3:4f:d7:81:d3:
         08:f0:74:8b:63:7e:4a:1d:ed:4e:de:1d:0f:53:54:13:49:cb:
         13:8e:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:26:01 2026 by rpki-client