Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File:                     o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier:          fBXWO6nZQAzcmtukU5iTSlVrHaSwH0SDA8I/fGzeCN8=
Subject key identifier:   C5:37:99:FE:FC:64:3E:DE:88:8D:8A:81:98:E8:01:16:28:43:CC:5B
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer:       /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial:       019F9211B3CD8853C330F4D6FF96E6ABA132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number:          0905
Signing time:             Fri 24 Jul 2026 03:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:01 +0000
Files and hashes:         1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
                          2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
                          3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
                          4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: REpOxP8iafVNI0dBQX9KduKhzZsQ5Dp2pslbjifAXb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:b3:cd:88:53:c3:30:f4:d6:ff:96:e6:ab:a1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
        Validity
            Not Before: Jul 24 03:01:01 2026 GMT
            Not After : Jul 25 03:01:01 2026 GMT
        Subject: CN=c53799fefc643ede888d8a8198e801162843cc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:df:fb:ee:83:6a:a7:d2:12:45:e0:50:85:
                    c1:f4:57:f2:80:1b:dc:e6:80:24:3e:0c:97:9c:fa:
                    8e:dd:0f:9a:03:6a:e2:60:3c:9b:6e:76:25:77:62:
                    06:fa:6d:0b:45:b5:b3:de:96:fd:21:fe:5f:0d:2d:
                    33:41:7a:b8:6c:c1:dd:5e:20:ce:5e:3a:10:2b:f2:
                    e1:75:b3:86:b5:7d:7a:82:8d:7e:ea:64:22:07:d4:
                    06:a5:03:25:f7:80:32:42:39:d8:6d:e3:1c:d7:43:
                    e9:4e:3b:35:07:81:f7:cf:15:72:e6:8e:86:90:a4:
                    a5:b6:76:81:f2:70:39:d9:2b:8a:cc:b5:3a:bb:09:
                    fd:cb:ad:2c:44:47:1a:6b:58:1c:74:a5:53:03:fe:
                    e3:7d:64:c9:5e:1b:81:cd:5c:8a:82:f4:b8:1e:dd:
                    a0:32:d5:c3:ab:93:ba:f7:67:f1:47:8b:dd:4b:66:
                    05:85:f8:c6:f9:ab:c1:78:91:61:17:6e:26:0e:aa:
                    29:7d:0d:86:34:4c:2d:09:5d:fc:7f:7f:c9:49:db:
                    ab:72:a3:ae:7b:40:68:f8:ba:ce:7b:15:2c:e7:40:
                    c4:c2:81:b6:19:71:b9:2f:81:35:ad:9b:1c:06:37:
                    b8:24:d7:b2:1f:ff:d5:9a:c5:aa:bb:e9:a7:bb:ec:
                    93:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:99:FE:FC:64:3E:DE:88:8D:8A:81:98:E8:01:16:28:43:CC:5B
            X509v3 Authority Key Identifier:
                keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:67:97:55:f6:c9:d0:e4:00:e0:92:29:9a:1d:16:bc:12:87:
         86:79:12:a0:13:cc:7e:43:1d:35:de:d1:ec:3d:98:8f:58:df:
         21:3f:0c:3b:59:f7:61:ca:1d:4c:cf:05:d0:93:7d:be:40:f8:
         d2:3c:83:7f:14:08:f2:75:55:61:2b:54:c5:36:cb:53:5a:6b:
         4b:7f:b1:f3:2f:ab:93:85:f6:ca:f4:a2:27:84:14:bf:b0:33:
         7e:c2:37:b7:a1:92:9c:34:7b:97:08:a9:43:bd:ed:df:74:5d:
         2b:e5:00:6b:3b:c6:72:dd:97:67:e1:08:44:26:b6:2c:45:ff:
         c9:19:5e:79:64:d2:6a:2d:30:62:54:a8:57:71:49:19:3e:38:
         4a:4b:0c:3d:bf:2a:87:4c:b4:4e:c0:b1:7a:99:bd:86:19:41:
         52:18:4b:0a:dd:53:74:f9:f1:99:46:48:27:a1:c5:7f:02:54:
         2f:fd:28:d9:fe:07:f3:05:82:39:2f:82:f2:54:44:6c:16:f2:
         85:91:34:2d:ac:cd:88:19:02:71:af:7a:42:15:a2:58:b5:e2:
         5e:8a:59:3e:03:af:36:44:39:9c:ae:7e:2e:fc:fb:6b:98:67:
         96:e8:e7:93:32:6e:fb:ac:27:5a:35:93:0f:aa:4b:0a:dc:ed:
         17:35:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:02:12 2026 by rpki-client