Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File:                     1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier:          Tm2V3rXsFyHfMh+Hag/yLTvJ/7ZMdglW1MtD26fPlXc=
Subject key identifier:   30:E2:48:A2:CA:2C:F5:65:FF:64:56:13:03:CC:5D:F5:25:EE:69:32
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer:       /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial:       019F8FEC24BF570628CE68C8285017092066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number:          14D2
Signing time:             Thu 23 Jul 2026 17:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:45 +0000
Files and hashes:         1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: Ruvok/p2K+kZNQ79em/KsA9VvS00qSFOXWmYZcdOfjs=)
                          2: __aKgcBqV6i_mXN76rfxria8AHQ.roa (hash: zwh2UkhbJc0t+pZ8vBFFopuCCkIr7SkveCVxpby2P9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:24:bf:57:06:28:ce:68:c8:28:50:17:09:20:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
        Validity
            Not Before: Jul 23 17:00:45 2026 GMT
            Not After : Jul 24 17:00:45 2026 GMT
        Subject: CN=30e248a2ca2cf565ff64561303cc5df525ee6932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:4d:dc:34:e9:50:1d:38:7a:7d:62:6a:90:
                    f5:3e:0e:01:e8:28:f6:66:8b:3b:a7:52:ed:52:40:
                    0d:d6:b7:a9:9c:0d:af:94:f4:ee:f3:4b:41:8c:6c:
                    d2:ff:c3:a5:18:3a:70:66:33:f9:45:a0:21:cf:be:
                    5c:c8:17:04:a5:84:63:6d:e9:32:6d:24:4e:3e:44:
                    06:ef:7f:fa:64:d1:54:b4:92:4e:00:0b:7b:47:9f:
                    d0:08:8f:7c:b9:56:98:43:1e:1f:8d:73:5e:d4:28:
                    20:01:6a:62:f5:85:9e:df:98:54:d2:33:1a:42:64:
                    75:2b:e6:0d:c5:84:10:9b:96:ad:3e:01:0e:64:fb:
                    89:02:10:0c:f8:79:20:e2:2b:fe:d0:e1:67:bb:2d:
                    bd:ea:9b:33:bf:ce:ed:37:b3:99:63:84:6b:26:6b:
                    90:b4:20:37:2f:20:73:fe:4b:3b:4b:e8:81:69:8a:
                    9f:d7:da:4c:69:0f:08:9e:43:7e:70:21:07:9a:3d:
                    57:d6:8d:46:c1:07:81:5d:1c:be:db:b2:e5:a2:10:
                    64:94:37:3d:8f:79:cf:b7:4f:d2:ec:a0:d2:af:82:
                    1f:d3:a5:4f:62:9f:f6:db:de:e9:91:cd:79:e6:72:
                    5d:7c:45:75:69:5d:aa:8f:12:fc:a2:13:d8:a8:ca:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:48:A2:CA:2C:F5:65:FF:64:56:13:03:CC:5D:F5:25:EE:69:32
            X509v3 Authority Key Identifier:
                keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:42:f0:51:4e:74:4b:ed:3d:9e:c3:82:74:e8:76:ce:3b:ce:
         d2:47:66:f4:f0:42:23:06:fe:7e:1e:4b:88:3b:dc:6c:77:e2:
         43:07:d2:44:27:db:44:a6:ea:f2:a6:74:a9:36:54:da:b5:cc:
         24:f6:ad:10:dd:d9:9e:ed:50:10:18:ea:64:0c:b1:f4:05:43:
         31:6a:23:0c:c6:5d:72:b4:2f:01:b8:e3:ac:c4:eb:3a:e9:50:
         e6:d9:a0:c3:cc:be:00:87:99:b4:49:a2:5c:2e:33:84:b0:5b:
         ce:12:d6:82:ad:3a:65:62:e1:a7:43:05:4f:57:8d:47:84:78:
         30:58:9f:ca:79:7b:62:99:e7:ec:37:f6:ec:a0:f4:48:ab:d9:
         86:92:1c:4e:f1:b9:40:9f:94:25:39:d9:b7:2a:b0:02:63:ae:
         df:86:6a:d3:89:7b:f6:15:58:80:0a:98:13:f4:3c:c5:fa:69:
         5e:a6:a0:eb:f3:fe:e6:e6:d2:8a:0c:71:68:72:e1:ed:d7:9a:
         a0:53:94:95:a6:7a:f5:35:a9:bc:82:59:c7:78:fe:fe:af:d5:
         27:8b:8e:03:61:08:35:a0:f2:be:07:c8:82:41:00:88:35:56:
         d8:52:f4:44:b6:fb:8c:28:49:a6:f2:ad:ec:14:b5:32:42:d0:
         9e:92:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:12 2026 by rpki-client