Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File:                     Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier:          6ljdW2Jy4RKIKdmjW3mvF5AsGpiwwRRQkSEdHm1WDAk=
Subject key identifier:   9C:F5:D6:44:4E:E6:B0:5A:88:46:24:45:1B:A4:31:19:3A:53:FA:C0
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer:       /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial:       019D2B84E0B55AD3C3D0EF539123512486EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number:          1730
Signing time:             Thu 26 Mar 2026 19:00:21 +0000
Manifest this update:     Thu 26 Mar 2026 19:00:21 +0000
Manifest next update:     Fri 27 Mar 2026 19:00:21 +0000
Files and hashes:         1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: gqM9DR4fJzOozgxiDqAKsdPNaH3Dnh2socZg88pcmO0=)
                          2: Qy-ZqZ-jFhHCOPZ47OX-IzpI3k4.roa (hash: AVuHjYGHpdavtskqaHni01DMFP0XY0do4Ph60K5Cn6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:84:e0:b5:5a:d3:c3:d0:ef:53:91:23:51:24:86:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
        Validity
            Not Before: Mar 26 19:00:21 2026 GMT
            Not After : Mar 27 19:00:21 2026 GMT
        Subject: CN=9cf5d6444ee6b05a884624451ba431193a53fac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:05:48:a4:a4:96:ed:46:ca:2c:60:38:4b:
                    b9:48:48:3a:0c:2e:8c:8f:23:e6:32:d5:02:4f:c2:
                    cf:eb:cc:30:18:f3:d8:61:ec:56:f9:ab:be:e8:88:
                    63:89:e7:6e:3b:4e:1f:11:19:1f:c3:a5:fa:38:40:
                    82:87:41:4a:3f:de:e1:29:e3:22:c9:4a:cf:cc:c6:
                    80:e9:2f:0a:70:c5:be:7f:c3:cf:7d:a1:09:24:0f:
                    e1:a5:d8:23:11:f9:2c:1d:82:c5:40:dc:d3:fc:83:
                    fa:a2:6b:70:60:a5:74:83:fa:ce:e1:eb:a4:ec:94:
                    57:b2:72:4e:89:39:04:73:a7:55:87:8c:8d:19:9c:
                    d8:ea:40:ee:e8:39:b4:fb:d5:be:fa:16:e1:25:ac:
                    1c:5b:52:a7:58:47:65:15:ec:2d:55:9b:f5:50:13:
                    bc:bd:51:06:d9:83:cf:a8:ea:de:da:11:7c:d1:6e:
                    db:8e:c9:a8:33:8a:e6:ac:06:1c:64:3d:8c:69:5c:
                    91:c1:90:10:38:6f:0d:f3:53:27:90:44:24:b6:c6:
                    43:55:83:a5:5c:6b:f3:25:26:f0:6b:7e:18:b6:61:
                    ef:a0:1a:98:e9:99:2e:2c:aa:ca:a0:99:16:d9:92:
                    32:66:84:79:c1:c5:29:77:65:59:3e:2c:45:3f:b7:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F5:D6:44:4E:E6:B0:5A:88:46:24:45:1B:A4:31:19:3A:53:FA:C0
            X509v3 Authority Key Identifier:
                keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:df:e1:53:c2:30:51:cf:99:1f:fd:ef:62:d1:d4:1c:50:49:
         38:77:ab:18:07:05:62:47:21:21:77:d3:aa:cb:35:b7:9a:20:
         cd:47:f5:4b:2f:07:2d:06:d1:be:d2:58:fa:14:35:55:3a:3b:
         65:9f:1b:da:e2:9f:c8:b9:e0:6e:82:0f:42:89:49:28:69:6b:
         63:1c:10:f3:12:ae:28:43:f8:5d:29:6f:12:34:b2:44:7b:18:
         1f:9e:d8:aa:85:05:bc:36:c6:f3:bd:ac:24:0e:a7:16:c1:dd:
         5c:39:33:bf:35:8d:20:0f:77:6f:11:c9:03:45:68:16:99:f9:
         c5:7d:e5:4e:9c:d9:1f:14:2d:e1:9a:c0:cc:5b:93:f5:7e:7f:
         53:c3:4b:96:dd:c4:d8:ca:f1:2d:4b:fb:08:03:95:18:7a:b1:
         b5:cc:15:1c:e5:67:80:39:10:25:11:61:72:aa:97:ea:e4:d7:
         8f:91:5c:d0:8c:68:db:af:fc:a7:50:75:16:13:0d:d8:4a:89:
         e3:da:95:02:12:52:9c:c1:f3:be:0d:0b:d9:2f:a8:6f:ba:d7:
         23:3f:a7:0f:da:d3:f1:e1:8d:c1:15:0a:80:5a:a3:ff:aa:61:
         9c:27:55:91:5b:51:99:9f:e2:95:e5:29:5b:94:4d:9a:c0:82:
         fd:c4:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:11:07 2026 by rpki-client