Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          VNy87j8oql5gzkHAZICg9jOTwGI3Xnz/s4dDegkXVQ0=
Subject key identifier:   74:48:4C:62:52:31:96:4E:18:26:8F:CF:36:6E:A1:30:A3:7D:BD:37
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       019D273A8CD6C1D313552717E78475CE2A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0E5F
Signing time:             Wed 25 Mar 2026 23:00:41 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:41 +0000
Files and hashes:         1: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
                          2: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
                          3: BvusQ7m5Gd85FbE0UgtInYnVcn4.roa (hash: Yn9PHGdu9Tcdgh7Fe+cf2+vspMOJboE+b5bi5KZdy/k=)
                          4: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
                          5: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
                          6: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: Y8GkzNKtQbaYTHIMJ+2E6g07FC+ZVoHZkWqBg7DFNFo=)
                          7: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:8c:d6:c1:d3:13:55:27:17:e7:84:75:ce:2a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Mar 25 23:00:41 2026 GMT
            Not After : Mar 26 23:00:41 2026 GMT
        Subject: CN=74484c625231964e18268fcf366ea130a37dbd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:41:a3:35:5a:44:1a:49:50:9d:57:ad:08:
                    8d:21:12:e8:b6:f0:27:2f:c0:64:6a:c5:20:d4:1f:
                    24:76:f5:44:d6:65:b6:a9:99:69:bc:5e:35:6f:b1:
                    2e:de:77:85:dc:81:ba:83:5b:2d:c3:85:25:66:4f:
                    8e:77:b1:4d:22:ed:87:57:3b:b6:9b:71:5b:54:43:
                    00:6a:d8:3d:12:85:70:35:e9:3a:3a:7d:67:58:82:
                    d7:b6:db:b6:20:a9:c8:d8:7d:ce:9d:f4:ed:28:fe:
                    0c:04:75:c7:ee:bd:88:24:70:59:76:ce:0b:97:a6:
                    bc:7e:f8:86:e4:28:c3:4e:b2:7b:04:8f:1c:bd:28:
                    68:e8:5b:cc:6d:a1:b8:9d:1c:32:79:51:60:5b:e2:
                    74:69:d3:3d:fc:4b:00:0d:08:49:50:d8:34:39:9f:
                    c2:16:1f:f6:c6:a3:08:3a:64:b0:88:f9:e2:85:ab:
                    9c:59:11:22:a5:b1:01:e7:27:b3:ae:2d:69:6f:5b:
                    46:28:81:8f:06:1f:96:75:b0:7d:33:6c:bf:6d:e2:
                    48:e7:da:52:3f:85:61:5d:8b:e7:1f:64:28:8a:ab:
                    c2:e3:d8:0d:df:c7:34:f6:ca:45:b0:db:f3:4a:bc:
                    ef:e1:7e:ed:00:f9:ea:cd:f9:6e:c1:31:cb:f1:06:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:4C:62:52:31:96:4E:18:26:8F:CF:36:6E:A1:30:A3:7D:BD:37
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:f2:7f:87:e6:09:cd:55:63:1c:d8:13:4f:25:5b:71:7f:
         3e:96:8d:86:f0:ad:75:e4:ab:ae:82:99:9a:61:b7:c2:2b:84:
         86:08:a0:a3:6f:84:86:59:ec:33:2f:8f:34:f6:e1:1e:04:98:
         c2:fa:ba:ef:13:b5:ed:6d:b9:60:ca:e0:ad:47:3d:df:ef:8e:
         8b:55:e1:59:a6:6a:f9:d8:f4:5e:cc:85:9b:1f:09:09:52:b6:
         b2:51:63:88:5f:3e:f5:ab:06:30:48:63:ba:a2:8a:ee:ac:77:
         49:28:b8:57:49:28:e4:f8:8a:e8:68:73:fc:2a:50:ba:91:81:
         c7:dc:00:21:8c:f2:b8:fd:e0:d7:6e:28:4b:3e:11:8b:7e:0a:
         7e:88:9f:6c:a2:82:d9:fe:96:4a:26:0a:7c:9c:3d:b4:16:b8:
         d2:41:ec:1c:08:36:8a:1f:a1:77:b4:2f:ba:fc:39:22:ac:87:
         e8:56:d1:3c:f9:77:12:8f:63:bd:b4:90:8a:d3:1d:34:ba:6d:
         3f:66:b1:52:4d:e0:80:ba:d0:91:4e:31:a9:48:cf:c5:db:10:
         63:43:c7:b2:11:c2:6f:2d:ee:f6:28:4b:85:db:9b:0a:38:e5:
         47:47:e2:19:57:d3:b4:fe:d7:83:32:3e:5a:f9:29:b2:c4:06:
         57:5d:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:53 2026 by rpki-client