Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          tkYwNmXKQrzeSVD3rD/M9zbxLIqCwmw0vM4OdvaJ4Bw=
Subject key identifier:   D0:2D:79:FE:94:F1:DF:94:73:CD:57:36:06:DC:7F:76:8B:97:AB:9A
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       019E1F10DF619AD310017540313B0FD0BF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          0DE7
Signing time:             Wed 13 May 2026 02:00:59 +0000
Manifest this update:     Wed 13 May 2026 02:00:59 +0000
Manifest next update:     Thu 14 May 2026 02:00:59 +0000
Files and hashes:         1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
                          2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: yLo3LGDqS/22Z9eKXo9g89Xjt36iOHRsLHW546/qwWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:df:61:9a:d3:10:01:75:40:31:3b:0f:d0:bf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: May 13 02:00:59 2026 GMT
            Not After : May 14 02:00:59 2026 GMT
        Subject: CN=d02d79fe94f1df9473cd573606dc7f768b97ab9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:9b:15:98:18:c5:6a:44:c5:7e:65:af:e4:
                    33:68:63:74:eb:ac:69:07:1d:a8:51:01:1f:f6:e2:
                    84:dd:4d:52:03:19:5c:00:8f:de:01:dc:f6:f2:10:
                    66:65:64:da:4d:cc:7e:37:73:c8:36:01:5d:65:7f:
                    6e:cf:93:7c:60:50:38:57:00:e7:b0:60:9b:3b:48:
                    75:7b:11:1c:be:74:ba:17:11:b9:a2:8a:81:dc:da:
                    15:2b:ee:be:6a:e7:6e:80:3c:a1:80:53:00:77:3b:
                    97:73:64:c4:9e:df:d0:b4:80:27:c0:e4:7b:19:85:
                    72:a3:a7:9b:72:35:9e:1b:78:4b:d4:cd:ee:35:c5:
                    b1:1d:dd:2f:3e:a3:31:1f:4e:cc:8a:8d:9b:16:4a:
                    d3:71:dc:ec:2b:ca:e2:c6:9d:6e:6e:e1:f1:ef:a0:
                    97:9d:02:06:89:a6:61:ca:ea:9c:2a:cb:7f:d5:4e:
                    2a:dc:04:48:40:9b:cf:6c:ff:6a:f4:31:3a:f9:8f:
                    34:62:95:16:ba:92:b8:1d:fa:1e:68:52:31:17:16:
                    f0:f3:58:57:37:e6:cf:55:ab:22:ce:40:2f:6d:d0:
                    73:fc:a1:bc:51:58:67:bd:a6:44:35:55:33:17:51:
                    80:b8:be:22:2b:7b:3f:ee:a7:10:94:f6:e4:53:ec:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:79:FE:94:F1:DF:94:73:CD:57:36:06:DC:7F:76:8B:97:AB:9A
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:28:b4:4a:d6:88:05:eb:1a:5d:88:2f:4b:19:74:2d:00:
         12:59:57:34:c4:81:79:0f:27:4f:46:00:fc:5e:9c:d9:14:de:
         8a:bc:c9:cf:d1:6f:16:61:1f:ac:aa:fb:42:05:64:db:5d:5d:
         2b:80:10:2d:27:6f:ae:06:d3:d9:e2:f8:d4:d8:1e:af:2d:b3:
         f6:c2:3a:3e:2e:f4:25:8a:13:8c:0f:0c:d3:64:4e:93:a3:4d:
         d5:1e:95:d5:91:02:72:7f:cc:47:0d:a7:9f:d7:64:7b:6d:57:
         3e:99:f6:4a:79:9c:93:3b:45:f4:36:dc:01:f1:49:a5:c1:46:
         f1:9b:e1:fe:9e:a0:bc:3d:e0:53:0d:54:7f:fa:49:82:d9:85:
         bb:38:e6:8d:8c:e8:6d:f7:57:4b:37:63:49:0a:1d:ab:f4:dd:
         e4:bc:01:43:49:6f:cb:7c:f0:08:38:82:4a:74:d8:42:5f:c2:
         c6:0f:1c:d1:06:1b:c0:a7:e9:84:73:63:73:df:2c:1f:e8:ea:
         a9:87:a7:ce:5c:fa:87:2f:3a:2b:c1:6b:68:0a:1c:d2:16:f8:
         1b:e5:a8:63:ed:14:30:01:0d:52:ad:56:c5:a8:80:ca:83:42:
         42:7d:90:72:fa:f2:d5:bc:09:af:8e:bd:b5:1f:40:d7:92:fa:
         c6:4e:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:11 2026 by rpki-client