Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          GdD2aE8YR9otilWWRlM3EsDdLtI9KUjz1maiKqU20yY=
Subject key identifier:   B7:56:4B:0B:E2:74:7E:AD:AE:54:EE:78:6C:B7:61:64:59:BD:7E:C7
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       01A0CC6C512153267D98F06988FB88AB5B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          179A
Signing time:             Wed 23 Sep 2026 04:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:45 +0000
Files and hashes:         1: 5QndnAXxTMXkddGPqIa4AhopT7U.roa (hash: WQ5LOCc3w2MzAgRdeMPpx23W0eVQ5o+Ve2XyefK4ALY=)
                          2: JVYjUEJRSspUdz__TKZidi1E9kM.roa (hash: 6fSEHzErFHj5znFN4gzU6BMdwVWv++ipvAi/nsLL2B8=)
                          3: b_y_rOE1QQam257CWGtkHOr-6Kw.roa (hash: YvhDiuELqEgFsL9eKGZyie6pLZWySNNGa/49rD66WcU=)
                          4: e0VDraMVbp6hbgi2MMgN_ufZ9Ag.roa (hash: yF3EIY5SN06yITcgN88LaWXgWuID454hcpVOXq+lBq8=)
                          5: eib3lQLHEZGs9VPJQb57J-vUb4M.asa (hash: INWM2at42v6knbwFbz/Uv57DXeTXbV7TBPGySu2rKgE=)
                          6: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: +Cbn2F392jE+zQcYWVndJgbQnEEPW2+cCwCWIed6sow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:51:21:53:26:7d:98:f0:69:88:fb:88:ab:5b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Sep 23 04:00:45 2026 GMT
            Not After : Sep 24 04:00:45 2026 GMT
        Subject: CN=b7564b0be2747eadae54ee786cb7616459bd7ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:d1:83:01:57:96:15:6e:a5:e2:52:2c:dd:
                    4b:cb:5a:b0:63:1f:73:53:ea:0d:c1:4e:b1:c2:b5:
                    ab:98:7f:c7:7c:a6:65:1a:80:17:f0:6b:8c:2e:c8:
                    74:6a:4e:86:9e:f8:dc:d5:ec:a1:89:a2:21:98:51:
                    f4:41:0a:58:1a:36:f3:4f:4f:3e:3f:57:c2:06:45:
                    ea:02:60:6c:e8:d9:16:97:87:62:92:ce:fe:e6:f1:
                    9f:3b:d7:46:5f:96:31:74:7c:1b:16:ed:54:fc:64:
                    d9:40:92:45:a2:a3:bf:ab:dd:a3:c9:e5:09:c7:24:
                    1c:a3:0c:c3:0b:fe:24:86:f3:24:fd:77:5e:7f:de:
                    c4:37:1f:50:0c:fd:d2:2f:35:eb:15:c9:4e:57:36:
                    33:8e:68:8d:59:6c:14:c4:74:ad:8f:f0:40:92:e1:
                    af:33:c7:a0:9a:e6:fc:52:eb:38:89:e9:ee:a9:df:
                    4d:85:65:f9:e7:35:46:a3:8a:0f:d8:39:5c:14:af:
                    3a:c9:58:02:ad:ce:f5:91:c3:c9:2d:ba:e0:27:0d:
                    fd:ed:81:2f:bb:01:86:de:71:09:72:8d:88:ad:6d:
                    eb:2d:5c:c0:97:19:e1:b9:fe:73:7c:c5:c7:2d:34:
                    70:74:14:9c:b2:48:37:ca:d0:d1:e7:9f:82:a1:54:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:4B:0B:E2:74:7E:AD:AE:54:EE:78:6C:B7:61:64:59:BD:7E:C7
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:76:a0:3f:b2:1e:07:0b:32:10:b0:18:97:2d:12:72:7b:
         eb:fc:ec:ea:63:b3:7c:e6:9e:09:f3:4c:0f:b5:cb:41:a9:52:
         ee:37:35:38:eb:e0:c6:5e:83:98:31:9f:08:9e:29:be:ce:c0:
         f1:cc:0a:74:d4:9a:b8:eb:c0:7c:65:b2:24:4c:c4:4d:71:f7:
         2f:f1:a7:d6:2d:91:5c:c9:a2:c2:77:0a:40:0a:6a:ba:59:1b:
         50:57:bf:25:0d:7f:b8:0c:6a:9e:4c:b3:5e:d8:94:cb:eb:26:
         ff:19:6e:cb:82:32:2d:55:5e:76:0e:e0:6f:b4:1a:3b:af:56:
         ac:49:3b:be:d2:84:4b:82:4d:e7:16:38:e9:aa:b3:5d:7c:5e:
         52:08:3b:03:39:ae:8e:17:b6:ef:04:59:4a:79:57:f8:e7:3a:
         80:ec:d0:8c:cd:9c:3f:e0:d8:1c:79:01:07:58:70:06:68:a9:
         97:67:6c:01:f6:a3:6d:17:e4:f4:61:6c:97:66:3f:d7:44:f7:
         4a:f9:35:c0:4c:8e:f3:4d:4d:21:69:f3:23:21:cd:ee:33:46:
         75:ba:3f:65:a1:e2:72:bc:e4:71:49:c0:13:7c:24:25:71:a0:
         a8:e4:e3:56:39:3f:d4:75:6b:2c:91:11:1e:72:9a:a3:70:13:
         94:f7:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:45:53 2026 by rpki-client