Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File:                     o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier:          fg17dUZWZ4ZWOASyQetBsMvlWQpOYmA4bpFI85paias=
Subject key identifier:   FB:C4:56:A6:96:39:21:24:D6:6C:42:AD:6B:50:7F:46:1C:14:FA:6C
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer:       /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial:       019F93FFE87DB412F97F6B66F1D0A5251E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number:          0757
Signing time:             Fri 24 Jul 2026 12:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:49 +0000
Files and hashes:         1: mRzXoHd1mByeqxe7zEzrQOkUywA.roa (hash: 8SKmwd2mxeGHXUa+EavAITPtq3W4rgD8HwfvXh+DLAw=)
                          2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: bcWZIstlAn65jPFESw4ZfEJE7S2bZt5m+1UFYRIAY70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:e8:7d:b4:12:f9:7f:6b:66:f1:d0:a5:25:1e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
        Validity
            Not Before: Jul 24 12:00:49 2026 GMT
            Not After : Jul 25 12:00:49 2026 GMT
        Subject: CN=fbc456a696392124d66c42ad6b507f461c14fa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:80:ae:c8:0c:23:35:09:12:b6:aa:55:42:
                    cf:a2:c7:54:5b:05:01:b2:7e:ba:0b:ec:0e:57:e1:
                    97:c0:e5:84:6c:08:7e:e1:78:05:1b:21:c8:7f:27:
                    c3:b7:73:c9:fe:2f:eb:04:ad:e2:04:fe:ea:d0:fa:
                    6f:df:51:96:28:61:6b:e1:a2:47:29:0f:1a:4e:f5:
                    df:05:69:04:0a:43:2f:0e:15:70:00:fa:5a:1c:de:
                    12:7b:bb:63:b4:36:d5:aa:8c:32:58:23:91:ed:14:
                    5b:77:42:2c:44:d2:4b:f1:67:9e:c2:32:79:cf:83:
                    6d:b0:22:3f:17:01:7c:0b:48:c3:db:0b:c8:11:38:
                    2b:be:5f:5a:9d:c8:8b:2a:f3:5e:f8:28:09:5e:59:
                    b9:14:de:38:aa:88:cc:40:65:c9:ec:b2:e1:41:7d:
                    9d:7c:a3:fa:59:14:eb:06:c0:75:5e:a5:f3:b5:4f:
                    e0:85:e3:28:0a:17:24:d1:59:c9:5a:2c:ae:b8:91:
                    80:50:08:05:f3:0e:68:bb:84:64:e7:81:14:e4:75:
                    ed:2a:ac:cd:29:3b:bc:d8:0b:8e:08:c5:1b:2b:71:
                    ce:4e:b6:e7:e8:81:5e:24:83:17:cc:c4:85:f8:fb:
                    10:76:2b:d0:64:4a:64:12:f5:e1:e3:24:00:81:c4:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C4:56:A6:96:39:21:24:D6:6C:42:AD:6B:50:7F:46:1C:14:FA:6C
            X509v3 Authority Key Identifier:
                keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:66:5b:bb:3a:52:46:91:2e:a7:ee:4f:6b:d2:64:88:22:f0:
         53:62:ff:e5:b9:34:7b:34:17:88:de:1b:46:34:f4:33:be:24:
         b9:5f:18:fd:52:ca:4c:1a:b0:0a:b3:fb:af:d8:26:ed:45:c7:
         6d:07:f2:c7:2f:1c:3d:c5:c0:ab:e7:df:08:1d:40:f6:98:04:
         37:19:cc:a6:7f:a4:d1:03:bd:11:d7:de:25:e8:7a:14:bb:b9:
         19:cd:b4:74:6b:03:cb:2a:46:0d:bb:f9:81:6a:01:32:21:b4:
         a4:76:4f:3f:a4:32:ba:2f:e6:cf:be:91:c5:e3:14:78:eb:ac:
         81:98:53:54:4a:d2:79:e8:1e:cf:f6:4d:92:5b:7a:f7:54:b1:
         ae:2e:38:1b:fa:ee:d3:4e:c4:3f:0e:d2:b3:0e:7e:55:64:2e:
         24:9e:a8:07:65:48:57:ad:4a:36:0c:89:ec:f3:c6:8c:30:ac:
         ba:bd:d9:45:4a:d4:77:c5:d1:df:10:b5:8e:b1:6e:b5:0d:aa:
         03:81:6c:a0:91:94:c0:1e:03:e3:1f:9e:61:9f:5d:f7:e5:ee:
         61:f6:ec:66:90:5b:06:0c:4c:f2:0a:54:88:80:4a:b6:48:53:
         6a:04:9c:63:b1:50:ee:8e:e2:85:12:cd:a5:69:27:c2:63:fc:
         aa:da:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:13:01 2026 by rpki-client