Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          7BX2uzTIUI24T8Dg39Nemv4PfEalUlnVGCVPU5In4yY=
Subject key identifier:   8B:97:0E:34:14:35:F3:21:94:D8:14:A1:B8:91:D3:F2:39:93:A2:F2
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       019F93C8E96A417CA63BC9A3A88FBBA5F320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          0992
Signing time:             Fri 24 Jul 2026 11:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:45 +0000
Files and hashes:         1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: 7xqMCYtjUcv3+cnrnTSeR8zMIGRXpQMFSo7MqIFABt4=)
                          2: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (hash: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY=)
                          3: y2_r5sbY9Lv_uRDh7BVz6TP_Rqk.roa (hash: elggw6C3t4Wz+4yMu7U0O34nBVY/GyhPWM7xDo4hWNU=)
                          4: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (hash: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:e9:6a:41:7c:a6:3b:c9:a3:a8:8f:bb:a5:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Jul 24 11:00:45 2026 GMT
            Not After : Jul 25 11:00:45 2026 GMT
        Subject: CN=8b970e341435f32194d814a1b891d3f23993a2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:83:54:c0:43:e5:be:b6:77:ee:f5:7a:f0:
                    e0:47:33:64:73:31:28:a9:ba:f9:e1:1a:bd:f8:5b:
                    7c:b5:a3:f7:0c:5a:02:57:f4:43:4c:e6:4e:0b:0c:
                    95:d2:4e:a2:dd:c0:e7:4e:57:39:bb:46:c1:2b:40:
                    71:7e:43:7f:5c:8b:ba:fe:36:f7:a6:ea:4d:3e:67:
                    40:df:41:68:c8:70:1d:05:66:8a:11:39:1b:a6:d8:
                    b1:cc:f0:84:0d:92:7a:6f:0c:b7:78:4d:fc:5d:4e:
                    60:79:94:4d:4c:8e:b5:5d:e7:9f:39:ef:dd:f3:74:
                    59:da:26:5c:48:eb:48:aa:3b:85:bc:3f:df:0d:e3:
                    66:21:84:b1:e8:af:b5:75:65:c3:b0:de:f4:a7:a9:
                    0c:d1:1b:08:aa:61:0e:33:3a:bc:1f:6f:86:13:98:
                    26:c2:82:bf:af:cb:5e:33:75:8d:ff:e2:56:77:27:
                    52:41:cf:32:2d:72:f0:34:b1:93:77:50:0f:62:21:
                    da:a0:b3:18:e6:b9:85:6c:c7:42:06:1a:03:bc:4c:
                    d2:cb:45:0c:5c:26:66:77:b3:65:8d:42:eb:c1:9b:
                    66:ae:b3:88:58:91:3d:4a:08:39:0e:66:14:98:30:
                    b5:c2:9e:2d:ae:41:6d:83:c5:a8:c4:17:15:63:04:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:97:0E:34:14:35:F3:21:94:D8:14:A1:B8:91:D3:F2:39:93:A2:F2
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:5e:30:30:fe:72:08:2e:2c:b9:75:86:3c:c4:3d:8a:69:
         be:56:df:64:b1:95:c2:8e:7f:05:cc:2a:e4:cf:24:79:0b:7d:
         b9:8f:9b:3b:80:04:fc:86:ae:5e:89:fa:06:19:5c:6c:ee:04:
         dc:87:6e:a7:f0:40:00:a9:6e:f0:a2:a6:c7:8d:25:cc:42:b2:
         b1:99:d8:21:70:54:30:16:80:0b:8c:ea:27:ac:c6:af:a4:44:
         d4:cd:1d:3e:22:7c:96:b7:2e:9f:5c:7e:56:dd:a5:72:ab:f5:
         3d:54:fb:3c:a1:7b:5a:e2:da:61:1a:d0:5f:d7:86:d6:e6:2b:
         0d:39:ca:cb:b9:0a:95:f7:c4:05:8c:79:a8:50:f1:b0:06:94:
         ed:57:36:93:44:33:b7:46:d9:f0:f3:c1:47:77:54:1f:70:02:
         ed:aa:bc:f5:f4:12:67:49:e7:25:41:ac:41:fb:fd:62:fd:6a:
         14:ff:4a:93:9e:28:a9:80:bc:5c:3a:6d:43:af:28:1f:91:93:
         00:db:88:ad:b3:c8:3a:c3:e9:8c:24:13:00:6b:82:a4:aa:c2:
         c1:68:ae:fd:1f:ca:4a:a5:6a:87:27:20:a2:9f:c0:c6:11:a8:
         92:6f:72:c9:94:14:02:2c:0b:7c:67:c7:9e:6f:0a:d9:a0:46:
         d1:ab:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:18 2026 by rpki-client