Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
File:                     oBZYi9HMst0iHG-Hg4VnR11-8ps.mft (raw, json)
Hash identifier:          ovbZPcvAfI1QzNxjgoQ8PyfoIZE73myh6W8mYwmckVs=
Subject key identifier:   26:27:8F:F9:15:B6:E3:8B:23:24:B4:2F:7E:88:98:11:BD:60:6B:DB
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Certificate issuer:       /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial:       019D25BA7FD723F4675866A8E3D10A54F26F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 16:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:12 +0000
Files and hashes:         1: RLTHCNVsHHa59u_OLOD-BY98XIM.roa (hash: /4P5/TVl7dn9mtDrJhCSmSp/VCxhHR3xnDXrEVq8GTk=)
                          2: khLmo6pZaOrLwXMJOcUYOmIkZns.roa (hash: gi+g9993Zl2pUKqBDeYYkZSu9n9p5P8ycYJ+ziZGiaI=)
                          3: oBZYi9HMst0iHG-Hg4VnR11-8ps.crl (hash: 6rgtcIE0De/GYpBq0tzIkiy7YV0tsuKYIHX9mHB8tKs=)
                          4: qFZ7lh8M_-7BVtcvqO7osX3FgC4.roa (hash: yh2XXW5ZPxb8ONMOAy9MOsAXO8sXA77efW4ZZFy3j/U=)
                          5: qYcaFh5k_WFgYNOOfWChkSb45-A.roa (hash: SGuMC52Sw1yR7jo31UVDgHPa5SFl4NAmO7Lfy91dnrg=)
                          6: to_9i5U3WEoW-TwQd4tU-j4O8dI.roa (hash: TimrXHXLyujQh5Wycw3AbO7giA3f+GFzcRdsqnTGqko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:7f:d7:23:f4:67:58:66:a8:e3:d1:0a:54:f2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
        Validity
            Not Before: Mar 25 16:01:12 2026 GMT
            Not After : Mar 26 16:01:12 2026 GMT
        Subject: CN=26278ff915b6e38b2324b42f7e889811bd606bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:04:8e:a1:7c:5a:fa:39:30:56:a8:74:4b:
                    9b:88:e5:bc:6f:1e:4e:9f:eb:68:a5:09:5b:68:10:
                    a9:f8:2d:f7:64:45:e1:b8:00:65:31:2f:d3:ef:b8:
                    48:c5:d3:ea:e7:aa:c3:5c:58:d0:d8:6c:ce:9c:84:
                    3a:a4:95:c1:34:a3:07:3f:c3:24:a5:ae:ca:75:55:
                    43:e4:7e:b8:8c:3e:20:b0:6b:74:d5:98:99:63:89:
                    82:86:5e:ac:9c:dc:36:95:71:60:55:3d:3d:b7:f2:
                    5e:69:43:fd:eb:f6:20:94:e4:11:e1:52:2c:b1:60:
                    fb:c6:a9:b5:72:8d:6c:13:94:02:9b:2b:68:da:e2:
                    b1:c6:3a:a4:23:c9:fb:2d:05:02:1e:cb:7e:ff:47:
                    af:2c:80:ff:32:78:fd:1b:e9:6e:2e:0f:30:ce:a9:
                    90:44:ea:a2:5b:b7:01:0b:b1:0b:b4:8d:5d:c5:e4:
                    5c:bc:42:11:46:f4:25:2f:42:03:33:91:c8:df:53:
                    f8:30:13:98:bc:f6:0e:ad:47:2f:43:6a:06:36:d4:
                    a3:b6:d7:c2:49:1f:cb:77:a4:07:dc:de:0c:29:1e:
                    cd:72:f5:43:34:88:ce:bf:c9:28:05:1d:f2:94:92:
                    ae:74:06:74:de:77:8d:5e:a4:a9:97:a2:8b:86:12:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:8F:F9:15:B6:E3:8B:23:24:B4:2F:7E:88:98:11:BD:60:6B:DB
            X509v3 Authority Key Identifier:
                keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:20:f1:11:b0:9d:8a:0f:75:e0:5a:cb:43:62:0d:62:71:d4:
         26:0d:15:2e:d9:3d:a8:37:a0:b3:95:ac:26:9e:95:c8:39:20:
         c4:fc:cc:17:89:2d:97:9c:c4:53:51:d0:93:78:01:74:d2:1e:
         4a:72:f6:37:ba:60:8d:ef:9e:11:29:db:56:66:c8:20:77:9c:
         3b:c7:2c:c5:c9:5e:81:e6:ba:f5:7c:00:35:e2:a2:d6:bd:aa:
         20:19:6d:7d:8a:bc:bf:b4:9d:54:c4:5e:d8:80:12:53:da:79:
         94:11:96:d0:80:4a:fc:cf:63:10:3b:5a:e4:60:05:e5:30:28:
         6d:4a:e1:4b:56:43:7f:4c:28:d2:b1:d9:1f:6b:69:b3:1f:fe:
         a6:52:29:5b:31:a5:4d:be:f0:b2:b0:7a:58:2f:32:ec:9b:71:
         e2:37:c4:ad:2f:d9:f0:7d:db:1f:f3:d1:a7:93:8c:38:4b:38:
         2e:82:48:a8:b3:8f:25:68:ac:b8:dd:1d:43:04:50:1b:58:21:
         b4:34:04:3d:77:17:fc:3c:eb:30:00:92:35:65:97:c9:c1:4c:
         05:25:e6:7c:59:1a:eb:6a:89:65:6e:e5:81:4a:ef:b5:e2:9b:
         38:8a:ab:1e:cf:61:37:26:c0:19:95:f7:b5:60:f9:e6:a2:5d:
         36:6d:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:46 2026 by rpki-client