Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File:                     oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier:          /BMrME2Ud6D4CvFYjuGprSi1m2Dr4B0PVzVHyDv2RJI=
Subject key identifier:   FB:DA:D7:32:4D:5E:41:DD:59:A4:60:33:7B:B0:3D:68:65:26:B0:99
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer:       /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial:       01A0F11EC45171C337E77378E128232F6B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number:          1A7F
Signing time:             Wed 30 Sep 2026 07:02:00 +0000
Manifest this update:     Wed 30 Sep 2026 07:02:00 +0000
Manifest next update:     Thu 01 Oct 2026 07:02:00 +0000
Files and hashes:         1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
                          2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: OtXV7ewcL2GUoMS+ZI4wZcYYPzvgCS8+C5gKemrvQmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:1e:c4:51:71:c3:37:e7:73:78:e1:28:23:2f:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
        Validity
            Not Before: Sep 30 07:02:00 2026 GMT
            Not After : Oct  1 07:02:00 2026 GMT
        Subject: CN=fbdad7324d5e41dd59a460337bb03d686526b099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:fa:0c:da:04:79:9a:6c:af:9a:dd:b4:c6:
                    e5:5f:2a:8f:97:37:58:ad:d4:65:19:58:9f:0b:9b:
                    2f:80:b2:32:19:c0:9f:3a:7f:c8:21:f8:4f:45:1c:
                    2a:7a:c1:c9:e2:61:5f:61:45:a0:b6:8c:b1:a4:d9:
                    7d:79:50:a4:b6:08:fc:4e:0e:a1:ed:a7:f4:f5:2b:
                    90:ad:b3:b5:95:f1:a5:de:d6:d5:b5:24:eb:7b:0a:
                    29:74:1a:72:71:c0:63:ee:bc:16:29:7f:9c:db:9e:
                    00:b9:57:7d:43:af:2b:b7:89:9a:8b:bf:3d:4d:0a:
                    47:4b:96:bc:28:fb:15:c3:4b:93:d9:79:db:c2:21:
                    1d:a6:87:d2:63:5c:99:f6:26:2f:95:33:4e:ac:b3:
                    b7:a9:ad:57:2e:91:80:79:4e:20:e3:e9:1a:b7:fb:
                    98:c8:63:3e:86:09:14:4a:90:cd:cc:0b:80:49:11:
                    f8:f2:3d:4e:07:86:43:a7:87:28:44:89:a0:e3:f8:
                    8f:df:bd:76:c6:29:97:8f:12:3c:6d:ee:cf:a0:0d:
                    e4:32:46:23:c8:5f:d7:be:b8:61:fb:c6:d2:b8:45:
                    1d:66:45:07:46:9d:02:44:fb:4c:01:6b:0f:06:32:
                    8b:00:d4:64:ef:f4:10:fd:2c:42:ce:6a:14:9c:fd:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DA:D7:32:4D:5E:41:DD:59:A4:60:33:7B:B0:3D:68:65:26:B0:99
            X509v3 Authority Key Identifier:
                keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:b8:fb:c2:c5:28:89:b1:22:65:54:9f:39:71:f3:69:7e:
         79:74:6b:74:ba:10:eb:69:e2:39:68:3e:d6:b4:75:83:c5:79:
         ea:6d:79:24:dc:dd:43:f4:ce:0c:42:67:b3:39:26:73:fd:41:
         b7:53:2e:62:eb:43:fc:06:8d:93:75:8f:6f:3e:87:da:bc:10:
         f1:ec:64:73:88:5f:85:a1:48:3f:87:52:1d:ed:b0:73:5d:33:
         57:4d:b5:37:2a:8e:db:0a:a1:c4:80:08:37:80:da:d3:70:ff:
         f4:06:7f:da:d6:bd:23:66:45:69:84:bf:6f:31:8a:25:f1:29:
         fa:c1:a4:a7:be:ed:e1:dc:c3:48:04:99:c1:cd:da:84:79:8d:
         bb:c1:57:e5:f9:5d:99:b7:83:40:17:2d:45:56:a5:1a:d8:f5:
         a3:8f:0f:4a:a0:93:79:36:a7:b7:87:98:77:9b:09:ac:e4:95:
         dc:08:fe:89:6e:0a:d9:c8:c0:ab:ac:27:46:36:70:25:9c:43:
         dd:99:dd:50:43:58:20:ee:fc:e0:ec:d5:01:69:d5:49:79:71:
         ae:b2:a4:5e:a6:63:a1:45:97:e8:9d:5e:89:2b:ad:c5:24:8f:
         da:25:2e:95:6c:56:c9:6f:93:d8:ff:40:2c:10:2f:bb:8c:d0:
         71:ca:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:52:03 2026 by rpki-client