Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File:                     OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier:          5BCeAxqkvykkA4xsT9z4totqh36JvOorRdXTX8OlycU=
Subject key identifier:   EA:FB:EB:04:87:14:13:53:44:8A:33:9E:21:63:ED:2E:98:7B:04:F2
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer:       /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial:       019D2AE0F9C2B8ACD2E6A6840D2AAE713759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number:          78
Signing time:             Thu 26 Mar 2026 16:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:20 +0000
Files and hashes:         1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
                          2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: ev2pSmYjX7jUtjpTX8KUgvhjRUhNXZMHg9HEER9zpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:f9:c2:b8:ac:d2:e6:a6:84:0d:2a:ae:71:37:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
        Validity
            Not Before: Mar 26 16:01:20 2026 GMT
            Not After : Mar 27 16:01:20 2026 GMT
        Subject: CN=eafbeb0487141353448a339e2163ed2e987b04f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:bd:08:96:fa:68:b6:0c:54:e7:ca:c6:e6:
                    4c:f4:50:c0:19:86:24:8e:66:79:ed:a4:a7:a4:c8:
                    53:1c:38:3d:a4:f7:90:bd:9b:42:29:6e:98:d9:bd:
                    68:8c:57:ab:62:13:76:db:7f:9d:9b:56:be:24:70:
                    cf:24:55:f3:a7:4d:be:86:2c:dd:e0:d2:0c:4a:30:
                    f8:be:2b:33:24:dd:d5:4f:8b:d7:a1:05:b6:8f:9a:
                    3a:97:ee:68:95:19:c7:46:8c:ad:ae:27:cf:cb:8b:
                    6b:38:f0:81:64:c0:bd:06:3b:c0:a0:ee:41:96:30:
                    89:c6:be:74:b9:90:be:90:0c:3f:02:ec:ba:31:f9:
                    c3:76:31:03:32:21:1a:78:28:79:64:31:bf:86:3f:
                    c3:f6:62:0a:eb:c6:ca:f0:38:07:29:95:51:78:2c:
                    93:d5:b0:19:59:2b:e6:d8:be:c4:7b:bc:fb:0f:82:
                    0c:ef:0c:7b:17:96:55:ba:c2:a7:79:a3:d8:91:b5:
                    22:f1:4b:a8:f8:38:2d:1c:2f:ed:75:57:1a:99:a7:
                    e8:3f:a2:52:55:69:c8:d9:45:e6:dc:db:23:66:ad:
                    df:f6:77:75:28:ff:9f:9f:8a:53:ae:39:3f:a5:9e:
                    36:63:4b:94:58:f4:cc:ba:07:21:f2:96:0d:e1:27:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:EB:04:87:14:13:53:44:8A:33:9E:21:63:ED:2E:98:7B:04:F2
            X509v3 Authority Key Identifier:
                keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:7f:58:6a:af:29:3a:d1:76:64:75:41:e5:69:61:91:4a:
         87:13:7a:02:5b:ee:bc:4f:cf:b2:b4:a3:79:47:41:d0:f9:e8:
         c8:d7:2b:e7:69:39:27:59:87:57:b4:8d:eb:46:5c:c6:d9:38:
         f4:24:8e:27:6d:f6:81:f0:b9:a3:ba:71:f4:a7:8b:7b:76:36:
         1e:a4:75:74:6e:71:35:75:a1:a0:49:69:b4:74:06:dd:c0:34:
         4f:f0:8f:69:e9:67:ae:80:76:13:29:82:70:f1:62:e9:04:26:
         08:4c:92:95:9a:14:44:c3:2f:8e:df:e5:91:ae:5c:c3:fc:8e:
         87:23:44:e0:2f:5c:f5:1c:1e:2c:36:9a:e5:14:a0:9d:b8:16:
         96:f3:3a:2d:21:36:15:1a:51:a3:33:3d:9a:18:49:18:f0:7f:
         6d:24:0d:19:e5:7f:ce:8a:ca:2e:c0:89:9a:77:ac:bf:a1:36:
         19:34:3f:6b:e2:e7:1a:d9:b7:d7:97:c4:a7:83:e6:dc:26:a9:
         8e:6c:bd:bb:e2:9b:72:10:ff:f4:66:5f:9e:28:79:72:26:79:
         87:1b:76:11:ff:35:0b:96:79:32:28:c4:b3:09:32:84:7a:23:
         47:41:88:f2:ec:f6:83:23:3d:c2:8b:f6:2e:ab:be:46:23:ea:
         70:f3:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:24:03 2026 by rpki-client