Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          45Lord1dzPfGCkSxE1hnAeqUqf+PLV4Np5bdT7MQOrk=
Subject key identifier:   2F:84:B3:EC:D8:AC:EA:41:84:24:79:57:FA:8B:54:E4:D6:C6:D2:43
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       019D2928F4F13A9FD25E780999A23D062C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0E60
Signing time:             Thu 26 Mar 2026 08:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:42 +0000
Files and hashes:         1: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
                          2: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
                          3: BvusQ7m5Gd85FbE0UgtInYnVcn4.roa (hash: Yn9PHGdu9Tcdgh7Fe+cf2+vspMOJboE+b5bi5KZdy/k=)
                          4: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
                          5: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
                          6: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: nKlAmi9a/VaP7wlTOjLj9idMXeX07sX5RY9JrLL0bsw=)
                          7: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:f4:f1:3a:9f:d2:5e:78:09:99:a2:3d:06:2c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Mar 26 08:00:42 2026 GMT
            Not After : Mar 27 08:00:42 2026 GMT
        Subject: CN=2f84b3ecd8acea4184247957fa8b54e4d6c6d243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:2a:ff:53:45:72:bf:09:44:7d:c5:f1:40:
                    df:12:39:36:f3:02:ff:ed:c9:2e:73:66:8f:e1:13:
                    fa:41:58:41:b4:70:bb:7a:de:36:08:8d:62:6d:24:
                    53:6d:ca:e3:28:6b:a5:3e:3d:17:c2:93:b1:02:ee:
                    55:0a:58:e1:09:27:43:52:89:bc:87:f8:76:ed:60:
                    1a:68:ee:fd:9d:3f:f5:d7:59:2d:a7:a7:5f:00:9c:
                    f9:97:1e:32:66:e5:5a:99:1d:8b:31:50:45:e4:10:
                    b5:fe:26:be:b3:34:6c:c0:6b:ca:d1:c0:6f:01:21:
                    49:49:ff:4b:97:4e:ba:aa:3c:7b:89:60:fd:e0:23:
                    0e:51:4c:0c:49:64:ba:ee:2b:a1:86:04:d7:ea:53:
                    8e:55:3f:43:2b:a8:e0:4f:44:45:49:a5:cb:d5:36:
                    2b:52:8b:18:6e:74:fd:de:b8:f4:e9:40:e2:c6:f5:
                    10:1b:ef:c9:56:73:69:b3:18:c3:4b:96:df:dd:eb:
                    b9:ba:7f:dd:e5:fe:e0:d2:a6:8d:40:e9:c7:4a:62:
                    b1:93:f6:a2:18:95:36:0e:c8:b1:59:3e:7f:79:71:
                    5d:8b:68:8a:cf:76:3c:ee:5d:b7:d8:95:ab:dc:2f:
                    bb:f6:3d:d7:8f:fe:6c:dd:2f:13:eb:d2:1e:19:68:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:B3:EC:D8:AC:EA:41:84:24:79:57:FA:8B:54:E4:D6:C6:D2:43
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:1e:d5:28:ef:32:5a:ea:b0:b1:0b:d1:65:0c:e9:51:ec:04:
         c8:1e:cc:96:2b:48:01:e8:3a:df:cc:06:49:4e:73:bd:7b:b0:
         8c:d7:58:5d:41:1f:32:9b:d2:2a:64:05:f3:24:8d:8c:d5:5e:
         10:f5:91:41:99:b5:05:3b:51:25:ef:c8:63:07:26:4d:75:5b:
         df:eb:9d:32:23:3d:94:f4:48:24:84:95:a3:43:4f:f4:e4:6d:
         fb:5e:8f:46:d9:ba:aa:fe:4f:6e:10:9c:65:c1:ec:15:7c:cf:
         da:3f:fb:f3:15:81:d2:23:c9:8b:3c:c9:0a:50:af:78:94:a9:
         96:d5:b5:b8:ef:45:2b:52:bd:26:b0:51:20:ee:69:7c:64:de:
         62:b2:5b:da:4e:af:5b:95:06:f0:ac:b6:99:8f:f2:b7:84:38:
         09:09:c0:5a:1b:2b:38:fb:8b:bc:8d:06:78:15:5e:64:f3:09:
         00:b7:82:97:ae:77:38:d9:7b:4e:66:a8:8d:ab:b3:79:81:23:
         15:d8:a0:8d:01:72:20:9c:6d:2b:f7:b4:18:df:b0:54:7a:12:
         11:9d:9b:90:50:95:15:00:f2:c7:f1:10:32:88:5c:26:5b:b7:
         cf:0a:0f:43:a5:24:d6:05:30:71:61:57:18:9d:6d:6b:04:23:
         19:d2:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:13 2026 by rpki-client