Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          hDipUrwxpUtYUchMEhH0dAMp9y1UBUuymJw3ocaZPo4=
Subject key identifier:   12:4D:38:8C:C0:6A:C2:01:22:B8:94:1E:96:16:57:1B:D1:AD:82:9F
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       019D9A74E1D2A9685DAE771D9233B401AB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          16C8
Signing time:             Fri 17 Apr 2026 08:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:44 +0000
Files and hashes:         1: GJBycD0z-Vwt49rxYIkUFvJmg34.roa (hash: ntE/dfk2CI0GAxVSBHDhu+/dJpNEVggZuAuaXY3BXZQ=)
                          2: jVpJP6BkkS37GOi50LHsrQuqbCY.roa (hash: U3tlxtXg3FRS8xNHFRy4ADqG3hKBCU+Zah1l7VaUwVk=)
                          3: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: N5podEFU9UVX8wHsSvRIyLMBC2Q8b8/IQ3TSw+qMGQk=)
                          4: ytyVm3S7Nek5fptdKjR4lszyxVE.roa (hash: fg0+8WvdZTPMhDV0ypT87n2uD/xPs/qDgjBlkh4kxkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:e1:d2:a9:68:5d:ae:77:1d:92:33:b4:01:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: Apr 17 08:00:44 2026 GMT
            Not After : Apr 18 08:00:44 2026 GMT
        Subject: CN=124d388cc06ac20122b8941e9616571bd1ad829f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:b5:ea:f3:10:7c:c9:c5:64:eb:e3:63:3b:
                    13:3b:3f:5c:c2:10:36:7a:c6:4f:8a:b5:13:f5:3a:
                    c4:97:22:a0:59:2e:01:3a:96:c8:ea:f0:fa:e5:de:
                    c2:51:87:42:5b:49:59:e6:0a:4a:e9:1a:14:dc:59:
                    e7:a5:2c:7a:13:c8:1c:f4:8c:e0:08:28:9e:3b:f7:
                    56:a4:dd:81:93:d3:5f:4c:31:a2:57:52:2a:6d:1e:
                    d5:58:18:74:4c:63:f1:c9:06:70:ff:93:11:be:03:
                    ce:50:71:db:0b:db:0f:12:2c:88:92:cc:3d:d4:82:
                    9a:b6:47:a2:fb:b8:01:ce:f4:26:b8:28:c9:7c:9a:
                    11:a7:41:39:0a:43:d1:40:b6:60:48:c9:bb:4a:40:
                    0a:f8:ec:e2:83:6a:95:9e:41:67:7d:36:4d:c1:aa:
                    fa:74:8d:3e:d5:e1:05:a4:02:97:24:91:d1:ad:62:
                    3b:bc:32:f9:51:e8:a0:7b:91:b1:75:9d:27:07:00:
                    e3:de:f8:fc:4c:47:8e:b0:90:60:b6:6a:fb:1b:c5:
                    86:b5:92:6b:84:76:4e:e3:c9:42:36:53:d5:19:c2:
                    17:04:f7:00:ed:9f:c7:d6:90:81:13:42:ba:9e:a4:
                    66:4f:4a:d2:dc:2b:3b:f7:36:ea:89:4c:08:db:6d:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:38:8C:C0:6A:C2:01:22:B8:94:1E:96:16:57:1B:D1:AD:82:9F
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:04:23:6c:61:28:ee:7e:d3:a2:63:2e:f2:01:05:9b:9a:
         46:1d:ae:83:86:18:75:2e:09:d6:56:85:91:7b:2f:77:a7:a5:
         88:74:ae:8b:2e:5b:c0:e3:6d:8b:65:33:96:9c:ab:3a:3f:e9:
         f5:19:7d:49:5a:4b:ae:43:cc:a9:3a:5e:46:07:ab:a0:f2:52:
         bf:ed:73:15:07:a3:65:09:55:1c:89:74:6f:9a:62:09:e4:fb:
         ac:42:dc:67:6c:2f:32:7c:d5:3d:85:c9:b3:52:bc:45:09:bd:
         92:bd:4f:c0:1a:ff:e4:d9:09:4c:46:b6:46:b0:30:8d:c0:d7:
         30:9b:ed:8f:63:d4:3d:4c:01:82:a6:7a:44:0c:0c:56:26:65:
         53:2b:47:9e:70:4b:6c:61:51:6b:21:5b:60:82:92:38:e2:9e:
         dc:a7:c2:eb:ca:c9:6f:8a:54:8d:fc:15:4d:b2:07:c8:74:2a:
         fc:91:89:e3:1f:46:f6:09:bd:37:35:02:d0:b1:80:5c:fb:08:
         2a:2e:88:5b:1c:73:52:96:51:7b:42:e1:73:f3:99:4d:9a:7e:
         cf:50:a2:b4:d9:da:5c:24:da:44:49:f0:c1:17:14:c7:46:2c:
         c0:dd:9c:f5:47:aa:27:da:f5:1d:cc:98:d4:62:a1:3b:9a:bf:
         1c:e6:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:27 2026 by rpki-client