Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          VwnCAOoEBvexw96oH6COgMXAwr5D4HvmivnL7SxA+Kc=
Subject key identifier:   7B:48:41:18:B6:F5:81:D0:7D:B6:18:0D:E1:83:AB:6D:D8:2C:E4:D8
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       01A0E407B8DA62E55051B5BCA3DBDFE1E50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          0A38
Signing time:             Sun 27 Sep 2026 18:01:46 +0000
Manifest this update:     Sun 27 Sep 2026 18:01:46 +0000
Manifest next update:     Mon 28 Sep 2026 18:01:46 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: vESZK8eHqU5k61wBK+oGXGwIU0YZZ0qQjAJBc9G7q88=)
                          2: XpRtGgpQMgfYPr6Ae4n-CrXAlUE.roa (hash: NDYAShaJd5oq4XV/s8UZ9bjqNMFDxRAsxUeNLahhptc=)
                          3: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (hash: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk=)
                          4: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (hash: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:07:b8:da:62:e5:50:51:b5:bc:a3:db:df:e1:e5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Sep 27 18:01:46 2026 GMT
            Not After : Sep 28 18:01:46 2026 GMT
        Subject: CN=7b484118b6f581d07db6180de183ab6dd82ce4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:24:0e:71:21:78:39:bd:05:63:a3:5f:35:
                    fa:97:44:3f:d8:c2:f2:4f:89:82:15:83:75:03:70:
                    9c:dd:0f:47:d6:61:b1:15:b1:9a:4b:f9:25:8b:e5:
                    f9:02:7a:98:55:3d:d5:18:b4:d1:01:5c:da:e0:5d:
                    69:e1:b6:cc:be:e2:70:3b:95:a3:50:15:22:bb:86:
                    ae:aa:71:8c:0c:28:b6:5b:2c:73:f0:7b:cc:14:87:
                    0f:9d:4c:a0:73:72:32:56:e1:04:75:10:bd:92:57:
                    2d:51:39:3c:72:f7:e3:25:7a:a1:a8:2d:f8:f9:2c:
                    c9:bf:ef:60:8a:63:37:6f:93:ec:ac:35:18:fd:cb:
                    04:1e:01:de:be:c9:82:7e:35:4f:74:bc:d2:16:f6:
                    f5:68:b8:04:c3:83:55:f9:06:3a:b0:3a:b4:9f:c8:
                    54:15:e5:fb:e8:10:1e:49:78:66:1f:0b:b6:27:8a:
                    d5:1d:6c:76:0d:4e:20:26:9b:96:af:02:29:1f:68:
                    7d:b1:94:23:4d:53:aa:fd:b1:80:93:3b:8c:f9:b6:
                    57:c3:1e:76:e2:58:8f:92:f5:34:25:8e:7d:a3:6d:
                    b9:5a:fe:c7:98:2c:f7:55:e0:8e:ee:7b:f2:a9:d0:
                    7d:1a:63:68:f9:21:e0:c0:34:1c:49:fc:03:c7:b1:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:41:18:B6:F5:81:D0:7D:B6:18:0D:E1:83:AB:6D:D8:2C:E4:D8
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:3f:26:15:b8:73:39:d5:87:8d:a7:f8:93:d2:ef:5e:73:
         47:aa:20:0e:c0:82:98:2a:28:72:2d:83:e8:97:f2:f9:20:5c:
         da:d3:61:a4:a4:53:bd:c3:e3:61:61:4f:08:04:4e:95:48:f3:
         64:a3:cf:45:f7:86:74:72:2e:3d:12:f3:32:17:81:77:6a:0b:
         b7:62:9f:d4:db:3e:1e:bc:75:26:21:cd:4e:d0:b1:96:88:a7:
         a9:19:e2:ff:ef:70:5d:2a:d4:b8:a9:3e:32:07:19:e6:28:9e:
         fb:e4:bd:41:24:f5:91:17:e3:3e:9e:d2:ef:6b:18:f2:b8:ab:
         80:5a:e0:5f:91:75:45:a9:f5:bc:05:8a:c5:2f:52:46:0b:4d:
         8c:46:48:3b:2e:4d:9c:d0:a1:b6:1f:cd:50:72:ac:41:2a:e6:
         78:ac:49:d8:25:1d:f7:ec:58:04:7c:81:28:42:2b:bf:e9:e6:
         9c:6b:29:40:8a:0d:d8:c5:0a:a8:27:d5:cd:10:60:04:97:65:
         3e:02:c9:22:de:65:f3:0b:63:3d:9c:1c:4d:80:df:f0:d2:b3:
         e1:a9:d2:f3:08:93:05:d6:c1:f7:77:85:1b:6e:3d:32:54:9d:
         7d:78:3a:09:1a:ee:82:ea:0b:36:6c:2b:c1:c0:4c:6f:85:a4:
         4a:38:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:51:50 2026 by rpki-client