Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          z2tPyMZucmMJ04ldhERTRVtmhgpMVrJtM59zv/7VpYA=
Subject key identifier:   40:ED:6B:53:52:8C:27:6C:8A:ED:DA:38:67:4F:32:F6:A3:13:7F:A2
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       019F9248DB244D1840FD942A4ED1E1EB92E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          0B1C
Signing time:             Fri 24 Jul 2026 04:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:15 +0000
Files and hashes:         1: Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa (hash: kvdg8wCS9egZQzAgHG4zTvTOgP+Bu8A9k8hcSeFomOA=)
                          2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: 3g/177c/6JH6LM9MjO47FZAJn05+NePcWaqXw2dYZYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:db:24:4d:18:40:fd:94:2a:4e:d1:e1:eb:92:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: Jul 24 04:01:15 2026 GMT
            Not After : Jul 25 04:01:15 2026 GMT
        Subject: CN=40ed6b53528c276c8aedda38674f32f6a3137fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:d7:db:e7:9f:9c:5d:0d:20:e7:d7:6e:9c:
                    56:90:bc:eb:83:10:55:3b:68:27:20:48:e9:4b:f3:
                    a2:7e:c4:c9:a1:f3:d7:f7:15:b6:83:3e:e7:dd:56:
                    21:e0:e0:80:e3:50:8f:9a:a1:d1:5d:29:3f:3f:a8:
                    3d:29:00:0f:d4:c9:9c:88:b8:e6:b5:6f:08:71:c1:
                    9d:07:67:4b:1e:d2:68:90:5e:bb:df:dc:83:f0:8a:
                    57:7c:7c:6e:e0:06:c2:3a:29:ef:a1:cf:e0:df:ce:
                    07:76:b8:ef:69:24:4e:39:5c:08:33:fd:4c:fa:1a:
                    81:db:19:42:1e:91:a7:a1:86:a0:d4:20:ad:b8:7e:
                    02:6e:d6:b8:f9:c0:b2:05:7e:2d:42:4b:04:b2:28:
                    ba:65:e2:3c:d2:f2:c6:55:61:d7:0a:ff:a8:a2:77:
                    58:c0:06:0b:86:55:4e:38:00:db:5b:b2:c8:82:e6:
                    f7:f9:87:f3:66:1f:20:45:14:42:71:14:b3:2c:98:
                    ea:74:31:b2:a5:12:5b:a6:37:ed:73:25:ad:85:65:
                    3f:b7:81:df:98:ec:0a:33:35:0e:db:1a:18:7f:ce:
                    75:dc:a1:f8:93:9f:3c:45:b9:92:27:2d:be:00:a3:
                    88:3e:1b:3b:d5:9e:84:2d:14:f5:52:09:d0:46:f9:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:ED:6B:53:52:8C:27:6C:8A:ED:DA:38:67:4F:32:F6:A3:13:7F:A2
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:c8:fc:37:43:58:b9:c9:08:16:9b:88:ea:c7:c3:09:7c:
         9c:90:ce:a1:52:d7:4a:da:a7:a8:fe:74:03:e5:02:89:95:67:
         a9:0a:a0:f0:2b:01:77:1d:ea:28:74:b2:99:5f:f4:51:b8:db:
         27:6d:33:67:f9:34:82:3a:99:49:2e:54:33:25:87:7e:05:69:
         ca:79:84:37:c8:4c:03:14:44:0f:6d:22:f1:75:5c:23:92:ac:
         1f:06:47:2e:db:24:95:a6:25:9e:c1:f0:18:37:0a:a8:ba:33:
         e4:bb:83:bd:09:ad:58:2f:a7:c9:50:0d:e9:b8:a1:7b:9d:f9:
         39:d5:02:fb:17:ff:66:2c:b6:cb:27:94:5a:fc:29:d6:a0:d3:
         75:30:bd:05:37:8b:fb:61:f4:4e:8d:b9:33:f2:00:75:33:f9:
         b4:72:66:ec:82:a0:90:8f:93:11:cd:7f:55:b2:89:09:1b:2c:
         5d:86:a9:75:b7:dc:bc:74:c7:98:d1:11:f6:ce:62:7d:cb:a2:
         17:e4:83:3d:65:91:ff:c0:be:53:14:e6:92:b1:5e:c3:ae:bf:
         52:9b:7e:79:4b:80:00:da:6c:a7:e6:8e:c8:df:23:e1:8e:a4:
         8d:d4:e8:4f:ae:01:1c:ae:12:7c:78:0a:b5:8f:76:dd:ce:c5:
         af:3f:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:36 2026 by rpki-client