Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
File:                     OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json)
Hash identifier:          gLq1BerXRqjpp1bxKC5ttVpTkAEzeCopCdKzQKezFQY=
Subject key identifier:   48:75:3A:43:10:A6:73:CC:77:0A:61:0C:A8:17:EA:83:87:D1:8B:72
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       01A0D493FB9989EB2A6A3628477479349678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
Manifest number:          10FF
Signing time:             Thu 24 Sep 2026 18:01:03 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:03 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:03 +0000
Files and hashes:         1: 1de8pjWZdbZ222YYe2GXtR0jHsA.roa (hash: nh2vUuTt0Og2aMiOlGOrS+L6/mjzmIQi3XaIf1H65RY=)
                          2: 72rogKEUs1fjFAjfM7Cy9UHe_kw.roa (hash: Z8ZWpoeVc5I33UXwalFKXVV5S6etbriIYRPgHvGgfKI=)
                          3: 7WH7MNjgKQECpcfeO5Kiimb7Df0.roa (hash: Jicb2Ne1P8KiYy+rp1J4QMe3h0nRexvVyWXvg4N4jbE=)
                          4: 9JzB_fLsIZkzxzin2R8Wl5zsThg.roa (hash: zo4ZNsXVTAK6EOsgV3BJxS3TB/kgAKw2MtLEp37xiy8=)
                          5: Ir68V4nnZXMcM6su4E53Z2sPiPY.roa (hash: lSuOvFNbw/w4QoIfL4Sy9erXzeD0fPgJM5VGjdoFZuQ=)
                          6: JVHz_wFOaKlGa58bai3EZCkfl4o.roa (hash: Y2zjYlZsQWvQMF2i9AMdA74KrKWztyg082FTOrRHXB8=)
                          7: M--TDwBebYUuyU8m_hJhv6lANn0.roa (hash: ng0FfscKlU2HqCySpQvVoxWawyYxW3g+qpkRloBHnkM=)
                          8: MltfaSDzKKivi1ba6fyL603ZViA.roa (hash: o/h5nKm2TLBULoQARQH8ZnVSg+ceTA0UZkwLaI/sNkY=)
                          9: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: 4y6/vwqZmiRBU5a98ADvKrVkNtKAnw/7wR7VjkUBCQE=)
                          10: TRYASeew79G5zn73E_j8Aa7JY-4.roa (hash: A844v0atomupwaPDxBuN0WbPBoix8FPtluT4rtEa/Ek=)
                          11: XIqvmqOdi_1zuzz2kKUxoCjwnVU.roa (hash: aMJOD4Mp/WfwOzWMvVMOZcZY7T1v0Kzr3ZB6XKJtt8o=)
                          12: YhEfS85SYBMPKRthi3IBpgKLVMM.roa (hash: GHyyiR6rzvrtE1D+fKHBtSmJRDZFZe0bkqf0kjPYJfQ=)
                          13: _BB0ZdbUeeGFKqBB6D8keNkJhmM.roa (hash: T/kG9iPqWLLw7hdfMQ7fu7gcEyRzV3wIoGwtmsPPr8s=)
                          14: bemkvInvV_hUeKqlnNmpEY5yC3Y.roa (hash: KxeHwHUdqp1DIrqMScxqgnhP2cyId7zoWYENlA59cfE=)
                          15: dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa (hash: lfjBFM+1U9k216beb8eucrAzFXFmpoPSWELuxMZ26Pc=)
                          16: fqQlRQwK-2wrNU-IeMiDlz1UUIQ.roa (hash: 2hB1XoiIKlvoTBHmFJiFMt9dWbsieH4fir3aAbxezO8=)
                          17: lJKm_LqFIVtk8fG-fe1_yBQ6EHo.roa (hash: 5zV7j1uxdw2hrQqRjN6UaXy8pRasBHhvGZI+Khd0zVU=)
                          18: lSUGE_d_qT6-86LK03VWiCsMsbM.roa (hash: 7WobUs7M0Xn7OFwQ+ogGC49nWaSQqiEzFFsE29+lB2c=)
                          19: nrEO1LwODrFmSevli7_t9F7GPZ4.roa (hash: Zoj1yWH/o3nIYH7s5SfUXzlnm7ibfpx4Jw+0Ke350ZM=)
                          20: oaCnhGMhdbVCFdLv5FOSrT3I9tQ.roa (hash: KkAhvipDUPcdct9NVtT6rFLK2Q9jqY4swc/w5BOh69w=)
                          21: vOWo1GQ1w68tjwUzx0l9rWhFA_U.roa (hash: QjCNNacz3W8ZP7gcVbXQu/IR68WGrwMKhSESak/wE6A=)
                          22: yTZqlhAkkerpe2L4CyUvh9Svaqs.roa (hash: hMnmd7o1av9aOhsK5OjFywbUYNzo9xYVVgQ8qsY2PHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:93:fb:99:89:eb:2a:6a:36:28:47:74:79:34:96:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Sep 24 18:01:03 2026 GMT
            Not After : Sep 25 18:01:03 2026 GMT
        Subject: CN=48753a4310a673cc770a610ca817ea8387d18b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:1e:6b:94:2b:9f:e8:99:79:c3:e3:9b:e3:
                    fa:a6:2b:99:21:a4:af:3b:2a:c7:69:ea:65:33:68:
                    50:d1:cd:d1:74:f0:05:8a:82:4e:42:8a:c5:aa:2c:
                    62:5d:7a:bf:e6:f1:3e:b3:46:28:80:db:19:e0:d0:
                    62:2f:72:7c:97:31:ad:db:ea:37:96:fe:c1:a1:77:
                    0b:0f:b9:20:41:ec:ca:ff:74:66:21:92:e8:c9:56:
                    73:2a:d7:83:fc:de:a2:5f:20:66:1f:0c:13:15:02:
                    6b:51:32:2c:89:ef:21:29:76:f1:5e:4f:04:16:d0:
                    a6:93:39:df:95:ee:ef:a7:a7:94:ba:4c:eb:fb:7f:
                    03:c3:ba:73:9c:ac:bc:2e:82:78:f9:4c:a4:19:72:
                    62:28:b0:ce:fc:86:4f:85:ad:5d:53:0c:76:b2:0d:
                    42:cf:41:5a:cd:d1:0a:e7:6d:9a:18:2e:ce:0c:a7:
                    dc:df:a8:3b:49:d1:9a:5d:bd:ed:c3:9f:52:27:c8:
                    00:7b:c8:2b:91:15:35:f1:99:cd:01:ce:59:34:a9:
                    8b:0c:e1:b4:59:25:e3:97:fb:78:9d:be:04:8a:16:
                    52:44:1b:8d:1d:f5:4e:c1:ca:2f:b3:bc:11:77:60:
                    ea:49:2b:30:c5:fd:cd:db:34:ff:be:44:f3:0e:11:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:75:3A:43:10:A6:73:CC:77:0A:61:0C:A8:17:EA:83:87:D1:8B:72
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:36:43:d6:17:ff:c5:3e:34:7b:5f:c8:17:28:46:46:8b:
         57:0b:87:b4:f0:11:5d:9c:de:46:97:63:3d:e9:47:bc:95:1d:
         8c:61:88:f1:6a:e0:74:f7:1e:9e:8d:b7:aa:d4:07:eb:21:a9:
         f6:f9:31:35:6a:14:b3:0f:d2:5b:70:e7:1c:aa:79:ef:fe:d0:
         ce:b7:63:50:c2:e8:68:5a:f1:09:05:4a:94:14:22:71:b8:93:
         70:33:7a:ba:0a:e3:f3:09:e7:0c:08:22:2c:53:22:37:05:89:
         ef:e0:03:91:06:e2:2a:1e:0f:24:d8:ea:7b:0e:77:0d:4a:a2:
         78:2d:be:1a:ab:1f:d8:32:a9:99:60:44:42:35:d5:3a:3e:ba:
         64:8f:84:37:9c:a5:01:8c:87:4c:55:53:52:f1:5a:a5:07:ee:
         7f:ac:be:c3:3b:6e:56:2e:c2:c9:c6:b3:60:38:6c:9f:8f:0f:
         21:41:19:60:2e:5f:c0:66:81:7b:f1:d4:9a:0d:a9:5c:37:e6:
         f6:93:50:72:83:e6:81:44:5b:0d:f9:ae:e6:95:8f:ea:8f:d6:
         f4:42:02:1f:45:44:f6:18:f4:66:9d:15:3f:21:64:e6:24:ad:
         66:22:56:58:87:ab:ca:c1:19:c1:e5:2b:12:27:4f:13:3f:f1:
         7e:da:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:43:37 2026 by rpki-client