Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          DZII2Ek+qIsLnAyg/MDvDR2i6LygqPsFPalJVr/75Rw=
Subject key identifier:   E5:2D:D8:A7:02:7B:B4:77:BC:82:9B:A2:1B:12:FC:A6:79:CF:AD:CB
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       019E1EA38C9E5852F75E425DB8B35F34C58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1913
Signing time:             Wed 13 May 2026 00:01:35 +0000
Manifest this update:     Wed 13 May 2026 00:01:35 +0000
Manifest next update:     Thu 14 May 2026 00:01:35 +0000
Files and hashes:         1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
                          2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
                          3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: rTmk2Vth2Mj8POx5A5AT56ai16PY6Tx8ks07P99zq9g=)
                          4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
                          5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
                          6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=)
                          7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=)
                          8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:8c:9e:58:52:f7:5e:42:5d:b8:b3:5f:34:c5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: May 13 00:01:35 2026 GMT
            Not After : May 14 00:01:35 2026 GMT
        Subject: CN=e52dd8a7027bb477bc829ba21b12fca679cfadcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:c0:9f:ee:6d:ec:31:22:31:e4:31:82:93:
                    c9:a9:a0:ee:91:31:56:54:34:00:8c:39:9b:45:f0:
                    a0:2c:a1:f8:62:c9:e5:ba:f3:fa:ca:55:d3:43:38:
                    cf:72:13:8a:e3:2e:d9:42:61:57:03:7b:9b:26:c3:
                    91:35:8d:5c:9d:d0:9f:6e:68:08:ae:64:50:04:fe:
                    49:55:26:6e:22:4c:ef:c3:5f:f0:3d:9b:8d:dd:20:
                    40:1c:6f:c2:36:99:39:44:06:a9:b1:5e:ba:48:7a:
                    9c:89:b4:c0:c0:23:5c:74:76:f0:e0:98:22:43:ff:
                    81:2b:7f:1b:9b:c6:5e:77:3a:81:25:d8:9e:32:01:
                    b4:67:de:9d:2d:4f:9f:a5:ac:f4:8e:9e:26:98:cc:
                    56:ce:85:e4:32:33:d8:13:7c:34:64:cc:55:9c:05:
                    7f:ff:82:5a:0f:df:eb:31:b9:29:a3:95:43:d9:a4:
                    3b:bf:cb:b5:e2:48:ea:eb:a9:8c:64:15:18:53:9e:
                    c8:2d:76:f1:48:4d:82:b7:58:ef:24:71:ff:91:9f:
                    64:7b:77:fd:57:f0:63:af:a0:35:96:25:ad:00:5e:
                    77:98:70:2d:4f:db:71:89:ec:32:52:8b:f3:ce:42:
                    48:7f:9b:90:7d:a0:63:44:80:22:e6:4a:aa:ab:0f:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2D:D8:A7:02:7B:B4:77:BC:82:9B:A2:1B:12:FC:A6:79:CF:AD:CB
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:57:e6:22:79:fa:68:53:e3:2a:ab:36:7a:9a:7a:eb:f8:89:
         b2:c8:4f:86:7d:1a:68:6a:75:7f:b3:0f:8a:49:43:e7:72:55:
         af:f2:bc:92:5a:73:0a:c9:04:c9:4b:af:ce:f2:75:31:ea:20:
         45:5d:c9:c1:bc:1f:14:83:7a:93:e3:81:dc:35:bc:f6:11:cb:
         e3:b2:75:50:75:89:18:e0:75:6a:9f:89:98:7a:e4:ca:70:bd:
         f8:07:51:67:e6:af:84:fb:bc:df:13:c0:1d:59:af:55:a0:9b:
         09:5c:2e:c9:da:e5:03:bc:3a:f0:d9:5b:15:90:70:31:b5:ed:
         81:a7:69:25:7e:74:1e:75:de:d6:8d:b8:13:f1:1c:a4:8e:e4:
         b2:cf:eb:43:8f:de:cc:fb:89:07:7c:0b:dd:5b:16:1e:56:70:
         68:fc:62:22:3d:97:08:93:20:dd:2b:65:d1:39:70:16:a3:bf:
         14:98:43:f0:a3:e5:bd:06:48:61:49:94:ef:6c:af:b4:4d:de:
         86:82:1d:8a:88:07:4d:63:66:d3:a4:3b:91:8a:87:7d:aa:81:
         24:f4:b5:c6:88:3d:a2:6e:dd:25:66:32:3b:fb:ab:eb:4c:bc:
         03:7b:02:7c:c9:08:9b:57:6c:8b:5e:80:6a:e5:eb:35:25:a5:
         9d:72:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:23 2026 by rpki-client