Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          INLNt6mUHK1sWbac8Cw3ATJUSa6UmbPJ62s/9KfduV4=
Subject key identifier:   E2:6B:86:6A:F6:05:13:BD:FC:54:38:EE:C1:1E:69:73:23:49:4E:45
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       01A1DB6F639FA8DE4E2ABB884962D03DC2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          14D7
Signing time:             Sat 14 Nov 2026 19:01:12 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:12 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:12 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          4: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          5: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: MyxbSag25LuOvi+x5LypFwmIT8RXJEw/WLsPUv9Ksrw=)
                          7: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (hash: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:63:9f:a8:de:4e:2a:bb:88:49:62:d0:3d:c2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Nov 14 19:01:12 2026 GMT
            Not After : Nov 15 19:01:12 2026 GMT
        Subject: CN=e26b866af60513bdfc5438eec11e697323494e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:32:f3:d2:ec:6e:fa:2b:15:d2:75:02:36:
                    34:ac:52:56:b5:32:87:d7:9e:7c:69:40:03:fe:86:
                    b8:42:5a:b1:ed:a4:e6:51:8e:a8:08:01:ae:68:00:
                    a3:01:26:15:c8:ef:29:ab:74:62:d7:f1:a4:81:ee:
                    d5:85:fb:22:45:a2:fd:42:8d:d9:dc:8b:bc:7e:b8:
                    0a:2e:d6:a0:1c:9b:dd:30:c7:4a:2e:f7:bf:db:99:
                    e3:b4:d6:ac:6f:35:85:ab:c3:29:6d:a5:f1:14:6b:
                    2d:9a:bb:e0:d4:a2:10:a8:f0:d5:e2:23:fc:72:38:
                    2b:88:75:7f:c2:a9:fb:12:76:e7:29:df:7a:cf:d1:
                    62:49:5e:56:20:27:57:37:6a:69:e6:dd:f4:7d:c4:
                    bc:ff:2d:ae:7a:e2:b7:59:c5:65:6a:ee:fe:b1:35:
                    e6:4b:91:d0:26:5a:24:e2:f6:d4:cd:42:4f:29:6f:
                    d8:27:13:e5:ff:cd:9b:a3:18:59:35:2f:4e:06:3a:
                    5b:b0:a1:f8:83:e4:30:08:dc:2e:41:b5:9e:1e:25:
                    a2:ad:7f:c3:66:a0:f6:85:d8:99:9d:03:9a:45:66:
                    57:ea:61:79:07:bb:11:60:83:24:52:8c:34:80:7e:
                    0c:46:b4:6e:96:f2:ef:5a:00:9c:8b:d9:d3:7e:2c:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:86:6A:F6:05:13:BD:FC:54:38:EE:C1:1E:69:73:23:49:4E:45
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:69:b1:eb:46:73:63:42:d9:66:44:6a:75:12:e4:b3:1c:
         61:f1:34:8e:77:80:d1:dd:79:5c:8a:fb:a7:20:e3:76:21:c1:
         28:8b:09:08:73:43:7d:51:44:4f:8e:c3:68:f4:23:e4:e5:84:
         8a:a3:04:56:f9:b7:72:8d:65:28:a1:0f:bb:0f:da:fe:8e:92:
         be:ee:c6:4e:c7:09:63:6e:11:d6:37:46:6b:c8:0e:e8:d7:b2:
         29:ad:e2:2e:91:73:3c:fe:ca:cb:1a:b3:21:dd:a8:ce:f7:98:
         40:23:e0:21:f4:63:06:63:1c:4b:d6:ac:a7:fb:88:89:7e:97:
         50:1d:5d:59:3d:c5:86:12:df:3b:fb:77:15:f2:50:88:4c:08:
         80:b6:99:f9:2e:56:3a:cc:ef:8b:1b:74:fb:ec:e0:4a:c2:95:
         06:5a:e0:22:42:31:9b:e9:4e:b2:03:5f:fc:28:66:eb:0f:cb:
         9c:c5:29:da:a3:83:29:8f:6d:10:50:0e:90:d2:0b:cf:d9:94:
         dd:c6:0a:d9:e5:45:bd:26:2a:eb:9b:cc:81:a1:08:d6:05:e7:
         82:58:cf:7e:e4:c4:5e:ef:96:d7:49:fa:45:fd:35:f2:1c:aa:
         01:a1:d2:42:1a:bb:71:29:c6:78:ee:a8:be:28:94:2c:aa:55:
         e5:b6:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:19:55 2026 by rpki-client