Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          ch4tB3OkLGKSyZMEfjuIFqM6LPBAw9v8Tquj75NbVv0=
Subject key identifier:   74:54:53:E9:48:77:D8:EB:A7:2A:D0:FA:43:06:A2:A6:48:ED:99:7F
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019F8EA28A590B4B50A274C18785E466773A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 11:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:44 +0000
Files and hashes:         1: 0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (hash: dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=)
                          2: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: 2QakKFR1gDwMZWwjBVgqoVgneVvEA7kMP/OOJOMy8bE=)
                          4: wvfBOreCybbt9afiUMU5R2NBdJQ.asa (hash: IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:8a:59:0b:4b:50:a2:74:c1:87:85:e4:66:77:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Jul 23 11:00:44 2026 GMT
            Not After : Jul 24 11:00:44 2026 GMT
        Subject: CN=745453e94877d8eba72ad0fa4306a2a648ed997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:e0:d8:fb:c0:7c:84:56:e0:1a:76:5d:88:
                    b6:c2:4d:00:a8:1a:74:86:ad:ba:88:40:99:33:ec:
                    36:d2:c2:86:9e:17:43:b6:f4:f4:94:ce:81:b9:95:
                    bc:92:43:4a:76:2d:5c:ef:74:eb:a9:b2:ad:e0:94:
                    66:d3:6c:b9:17:4b:cf:5d:d9:11:a4:91:c9:d9:09:
                    98:7a:f1:5e:76:4e:f5:95:29:a5:1d:3a:96:f5:5c:
                    20:fe:01:98:d2:e8:ef:ae:6b:21:17:7c:00:bb:6d:
                    ff:b0:2e:9d:b0:68:37:05:33:d9:22:f4:ee:ea:a4:
                    13:f5:ec:ae:b2:c4:e0:7a:57:b6:a4:4b:f5:73:20:
                    83:bf:89:55:12:01:a4:61:5d:08:c1:65:8f:29:ff:
                    82:42:b0:9b:15:a2:ba:8f:77:e4:d0:5c:90:71:ea:
                    41:77:f7:37:db:c2:99:6e:83:27:32:8b:04:8b:20:
                    80:75:1a:5d:9f:1a:45:42:80:68:ea:19:0e:c4:ab:
                    9f:8a:ee:9e:1c:78:47:1b:e6:58:8b:50:d0:fd:e1:
                    f4:27:67:6e:8b:d5:ed:b7:d4:af:56:5e:f1:53:82:
                    f6:e0:b0:2f:13:9b:91:fb:11:2f:78:39:c6:7e:96:
                    84:0c:63:bd:fa:ea:02:af:e1:ba:6d:86:64:b4:fc:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:53:E9:48:77:D8:EB:A7:2A:D0:FA:43:06:A2:A6:48:ED:99:7F
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:fa:3c:b6:57:e9:40:77:2d:26:3f:8b:48:08:fa:da:26:
         2f:b1:2f:1f:a5:3c:4a:34:27:34:e2:67:bc:42:b9:80:10:89:
         24:ba:89:2b:c5:9a:73:c9:88:17:6a:1e:77:25:b0:9b:74:52:
         fb:43:ea:11:be:59:f3:a8:83:0f:18:0c:0a:55:85:12:44:fa:
         d3:38:35:24:c9:0a:ce:a2:43:4b:c3:1d:79:b3:ec:0f:d2:c5:
         99:e4:ef:80:82:12:7e:62:14:ba:4e:29:19:59:2c:4e:3e:a5:
         80:fa:37:50:56:59:3e:5d:99:8e:ef:d4:5e:d0:fc:50:23:40:
         33:98:35:36:77:f1:26:d3:c1:a6:8f:4d:17:0c:18:b3:50:a8:
         6a:80:b7:b0:6d:65:9f:05:6e:cd:24:a0:13:cb:d5:8e:e1:eb:
         69:fe:97:ad:78:3b:78:4e:f4:6c:ab:0a:09:c6:89:16:73:a9:
         52:6a:bb:15:0a:43:ce:f3:b1:54:76:36:f3:b4:d7:f8:3b:87:
         33:32:6e:5d:a3:96:f5:cc:46:bd:35:d6:34:72:fb:cf:5e:03:
         d5:45:99:a4:07:7c:aa:5c:c3:07:e1:02:9e:89:53:38:1b:63:
         f1:64:dc:6d:ee:5e:68:41:26:8d:00:74:c5:c0:d9:1b:69:13:
         f7:a4:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:46 2026 by rpki-client