Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          1+ZkO/zD52wiEBs+1bRB//vncMJAyvhgH/TaA6v1VYE=
Subject key identifier:   1B:BB:54:E8:7B:05:7E:EB:7E:FE:5A:48:F7:85:05:34:6B:84:FD:35
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       01A1DD9506656E550A7BDF59721E20589DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1B08
Signing time:             Sun 15 Nov 2026 05:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:33 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa (hash: RWTdXUa+iSybycGajkLlOunVuvAlO58dNpaXACjUKZs=)
                          4: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          5: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          6: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: TPPToWMeDS52M56G8JEY4LBFaWfpvuS+3ulbVAc81X8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:06:65:6e:55:0a:7b:df:59:72:1e:20:58:9d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Nov 15 05:01:33 2026 GMT
            Not After : Nov 16 05:01:33 2026 GMT
        Subject: CN=1bbb54e87b057eeb7efe5a48f78505346b84fd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:28:be:12:7b:5b:2d:f5:5e:f8:1d:4d:6c:
                    e0:4c:dc:53:a5:84:0f:f4:13:73:52:6a:13:5e:c9:
                    9e:1a:89:46:d0:34:3f:2c:36:0c:f7:96:b9:45:8e:
                    bf:c2:4d:5e:0a:29:4c:3c:57:4f:02:5d:b9:fb:c4:
                    e4:be:44:17:1c:67:af:22:84:f1:50:1d:65:f0:f0:
                    fc:05:04:96:15:1d:0f:26:12:7e:c0:be:fb:2f:9a:
                    ed:de:ab:ec:d9:42:45:66:77:96:54:b9:58:f9:1f:
                    da:b1:d0:ce:45:b8:44:dc:e5:6d:3d:05:41:b8:fc:
                    7f:67:00:13:ea:40:e5:28:33:0b:20:47:cd:1d:7b:
                    b2:a6:a9:65:7d:47:b0:da:09:cc:b9:a5:25:42:53:
                    25:15:b7:6c:41:b1:8a:a2:40:a4:b7:09:a2:83:4f:
                    2e:53:55:cd:14:b1:df:5c:19:94:13:73:64:20:42:
                    63:53:25:3f:4f:b0:ce:25:01:cf:5b:f7:1c:1f:3c:
                    5a:bf:35:71:64:b8:ee:b5:50:ed:f0:bf:bb:cc:11:
                    55:bc:6e:31:56:e0:c3:a0:b5:81:56:74:f5:19:db:
                    6d:23:be:d1:30:39:c9:ed:05:79:d8:de:12:99:d4:
                    92:fa:bc:8d:ee:ec:91:d4:50:b6:dd:c8:be:62:51:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:54:E8:7B:05:7E:EB:7E:FE:5A:48:F7:85:05:34:6B:84:FD:35
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:e5:b6:ec:ca:fb:a8:c1:aa:29:42:0c:19:d0:1d:a0:c7:
         5c:58:e5:19:93:b6:30:bb:12:2e:3a:72:42:71:a4:93:1d:3a:
         2b:c5:98:cb:35:ca:2f:e1:58:0b:09:ed:16:e5:06:1c:99:f9:
         29:c8:35:66:56:89:77:54:14:d0:17:81:89:da:66:c5:31:c0:
         08:c6:1a:dd:06:32:f3:7e:2e:8e:0f:48:3a:52:aa:15:0e:88:
         f2:32:59:8a:0f:d3:a9:59:ac:c9:8b:fd:f3:cd:6a:ae:e4:4a:
         1f:36:2a:a2:8e:5b:d8:48:30:03:7b:ed:69:5c:ff:64:ea:4d:
         53:50:23:ca:7d:9c:da:60:de:7d:5d:18:cc:e6:ef:31:60:97:
         c7:bb:95:9a:8e:9c:13:f0:8b:70:95:e5:42:5b:2f:d3:c4:00:
         59:70:35:76:2d:73:cb:58:fd:77:e2:bf:6e:aa:b0:db:95:92:
         74:0d:69:78:0a:f0:8f:7a:4c:bb:7c:bf:c6:f4:7c:5a:ee:08:
         22:d8:92:09:cd:0b:4c:2d:13:cb:01:e6:ec:41:5f:5e:23:8f:
         e0:6e:88:54:66:83:f2:1b:a6:e9:4a:67:a6:f6:b5:96:8b:b1:
         a9:28:b3:3f:a4:0a:ab:b5:26:4b:57:5e:9a:66:25:c7:a8:02:
         b1:cb:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:11:22 2026 by rpki-client