Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          73JftPvO6b4+KcVDZVVYGdr9lp1HnWMZecwc4BGO5HQ=
Subject key identifier:   BD:90:D4:3A:EE:C0:97:F4:16:0E:63:C5:B6:1E:47:3E:2B:ED:5D:B4
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       01A1DB389423D5A50EB7F7D26223D249C311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          1B08
Signing time:             Sat 14 Nov 2026 18:01:20 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:20 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:20 +0000
Files and hashes:         1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=)
                          2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=)
                          3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=)
                          4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=)
                          5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=)
                          6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=)
                          7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: Z5UKPkh/s195ERcL4kNcjREvlF02YIAqv5yDWL4xp2A=)
                          8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=)
                          9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=)
                          10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=)
                          11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=)
                          12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=)
                          13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=)
                          14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=)
                          15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=)
                          16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=)
                          17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:94:23:d5:a5:0e:b7:f7:d2:62:23:d2:49:c3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Nov 14 18:01:20 2026 GMT
            Not After : Nov 15 18:01:20 2026 GMT
        Subject: CN=bd90d43aeec097f4160e63c5b61e473e2bed5db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:93:67:b7:f0:21:a5:97:20:1f:4a:32:ef:
                    b4:75:75:41:f0:c0:99:03:2f:7f:24:6e:02:1f:ae:
                    a8:1b:2d:bd:f7:cf:b7:0c:11:ad:dd:fb:5b:ef:c5:
                    e4:d4:70:c1:f9:8d:23:2c:96:81:bf:e1:20:65:72:
                    08:80:4c:7a:41:af:1d:50:f0:43:d4:de:5d:30:d2:
                    fe:d6:3c:8f:ac:b5:d6:55:e8:f6:e4:19:ff:03:58:
                    b4:32:55:0a:fc:82:ce:e7:be:a6:53:30:68:3d:c7:
                    e7:43:70:c7:c2:bd:e7:df:52:22:50:5e:be:e0:e8:
                    3d:96:1d:8b:2c:60:30:59:f8:ad:93:e3:36:14:5a:
                    96:21:b3:04:89:0a:23:8c:83:44:50:f5:4b:8b:7e:
                    c1:19:7b:6a:b2:42:fa:86:b5:55:5e:dc:fa:e4:3d:
                    71:48:01:1e:44:8c:59:a1:df:e9:80:8c:ca:c5:64:
                    58:a5:9f:d5:89:21:3d:4d:a3:4d:25:a8:6c:59:ad:
                    d8:7a:2d:84:8e:92:a8:b3:e4:e5:fd:c4:51:cc:0b:
                    d6:01:72:1a:ac:bc:9a:64:75:a2:65:df:91:16:6b:
                    98:fb:09:36:4a:e7:d0:6c:16:08:2b:45:9d:87:e2:
                    d7:db:eb:90:57:e0:dc:9b:84:f1:d7:c5:17:8d:8f:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:D4:3A:EE:C0:97:F4:16:0E:63:C5:B6:1E:47:3E:2B:ED:5D:B4
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:0b:a1:60:2f:95:d0:95:d7:fb:87:d5:9c:19:0d:38:85:
         53:30:4f:aa:01:a0:58:dc:c0:c8:ee:0f:e3:3e:7c:17:4a:a6:
         0c:c2:45:bf:e0:32:77:79:83:6c:21:b0:1d:23:7e:7f:9a:08:
         be:6c:04:61:5e:fd:eb:a2:99:66:db:6b:ff:0c:0e:c5:6b:6b:
         09:5f:e5:9c:69:9e:f0:c4:65:4a:f8:a7:be:f7:31:84:66:6a:
         e1:fd:77:f8:13:1b:b1:b7:a7:96:2b:7f:ef:4a:22:b5:a5:b4:
         c3:1b:bb:26:ea:84:e6:06:10:1b:ac:8a:9b:07:93:b2:a4:6c:
         b5:7d:2e:19:38:8d:e5:32:1f:04:2b:4e:a4:99:cc:c5:ce:d6:
         4e:d2:ff:ca:40:1e:8b:60:03:6d:ed:48:fe:94:c4:4c:f9:3b:
         69:85:a2:fd:bd:50:75:16:1d:1d:c0:57:5a:f9:de:2f:2c:5d:
         53:48:23:8c:c2:46:09:c1:77:02:d0:0c:99:21:34:ae:84:29:
         e2:ad:21:9b:6b:cc:57:b4:00:20:e4:96:8d:a3:e3:9d:03:57:
         22:73:fe:a9:b8:7c:19:31:9c:e5:1b:09:77:ae:d1:42:81:02:
         2d:1b:83:a9:ae:f3:1b:30:04:d2:54:17:2e:2a:b9:53:23:5d:
         b9:79:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:38:59 2026 by rpki-client