Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File:                     _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier:          aTkE2xxHydx5cCoqdmC2Bk8kDS+3EzUW5hMJX/+RrsU=
Subject key identifier:   55:44:92:7A:DB:93:D5:D8:4C:A4:1A:AA:8F:1E:83:10:0A:2F:3E:76
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer:       /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial:       019F837A86C2ECF2EDB05AEA78BC7D0D065B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number:          19C3
Signing time:             Tue 21 Jul 2026 07:01:12 +0000
Manifest this update:     Tue 21 Jul 2026 07:01:12 +0000
Manifest next update:     Wed 22 Jul 2026 07:01:12 +0000
Files and hashes:         1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
                          2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: ff2tXxM9KnU3ZQfRsTFCtMfuGyjOigpWf5D4ipGANoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:7a:86:c2:ec:f2:ed:b0:5a:ea:78:bc:7d:0d:06:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
        Validity
            Not Before: Jul 21 07:01:12 2026 GMT
            Not After : Jul 22 07:01:12 2026 GMT
        Subject: CN=5544927adb93d5d84ca41aaa8f1e83100a2f3e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:15:c0:8c:31:90:ed:e8:78:9a:75:6f:9a:
                    ae:6f:52:6b:bd:90:8b:25:d9:72:a7:f7:bc:3c:1b:
                    b4:84:73:9a:2e:dc:73:97:9d:b3:9b:01:be:4c:1c:
                    b6:45:c5:dc:af:55:09:25:d5:02:ad:29:44:d8:12:
                    25:2e:14:5f:2c:33:7b:18:84:b0:63:b3:e9:3e:29:
                    b7:74:bc:ec:b6:38:5a:e5:a9:5d:5d:42:50:6d:69:
                    0d:12:91:f2:37:60:5e:e7:a9:4e:4c:a7:3e:4e:1e:
                    e2:eb:28:7f:3a:9d:11:3f:f8:db:68:92:d1:56:bc:
                    75:de:1e:33:ef:b3:f0:da:6b:f6:90:fa:48:3d:87:
                    01:e7:7a:4a:ee:1c:09:6f:3e:1c:6d:2b:05:05:72:
                    ec:1e:e1:51:82:17:0b:d7:d8:89:05:12:33:d0:74:
                    64:43:96:70:91:d9:74:fe:43:15:7b:24:41:6d:cf:
                    01:e3:27:ec:03:38:55:c9:ef:83:3a:32:4f:59:20:
                    27:72:54:e2:be:3f:37:ae:20:3c:c3:74:58:5b:de:
                    c5:aa:b4:26:92:13:90:30:d7:35:11:f6:4f:83:c0:
                    77:c0:75:c7:a0:84:96:0e:6a:6b:0a:66:55:3b:38:
                    e0:43:2f:19:49:9b:bf:24:55:e2:ab:c3:5a:dc:57:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:92:7A:DB:93:D5:D8:4C:A4:1A:AA:8F:1E:83:10:0A:2F:3E:76
            X509v3 Authority Key Identifier:
                keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:8e:e9:04:89:dc:0e:c0:45:e0:5f:f8:77:90:1b:7e:54:
         f2:09:04:bb:6b:f0:14:7f:c3:a9:3e:e8:ef:61:42:ba:67:8c:
         5f:45:12:91:d4:95:a2:28:62:3f:3d:ba:2d:57:c4:ff:67:65:
         90:a4:3a:2c:1e:b5:f4:19:04:3e:1a:5f:40:e8:bc:f0:44:ed:
         8f:62:5e:0f:0f:35:77:c5:d3:1d:ff:83:81:75:22:4d:ad:49:
         f0:1f:84:de:d0:5d:c5:5e:b7:d4:5c:23:21:0d:48:8e:a4:e3:
         b5:f4:55:2e:1f:ca:12:26:53:1b:d0:5b:84:47:b1:28:7a:65:
         2f:b4:18:1f:0b:eb:00:bd:c4:24:68:a1:d1:ae:fe:9e:f8:de:
         dc:81:17:ee:23:c9:ba:76:72:17:8f:d8:10:1b:ee:b9:ca:5e:
         73:a7:a0:60:3d:0b:bd:f4:a4:27:51:99:3b:ef:c0:77:64:9a:
         38:72:a5:b8:13:1c:7a:e4:75:c8:78:f3:d5:93:c9:f3:fe:97:
         c2:89:e4:a0:9f:a1:91:45:a3:6c:d5:2f:dc:c7:91:bc:87:40:
         f4:ac:fa:4d:06:df:2f:f3:49:ed:8d:e5:52:c6:4b:d8:a1:5f:
         3e:91:6f:4a:ca:d9:e1:74:34:fd:95:cb:a5:b2:e3:a1:bf:85:
         0b:b8:0f:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DeobC7PLtsFrqeLx9DQZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTI1YWNhNDM0ZmVlYjZmNTczYWE0NjNhMTJjNjk0MGJj
NGQxOTgwHhcNMjYwNzIxMDcwMTEyWhcNMjYwNzIyMDcwMTEyWjAzMTEwLwYDVQQD
Eyg1NTQ0OTI3YWRiOTNkNWQ4NGNhNDFhYWE4ZjFlODMxMDBhMmYzZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohcVwIwxkO3oeJp1b5qub1JrvZCL
Jdlyp/e8PBu0hHOaLtxzl52zmwG+TBy2RcXcr1UJJdUCrSlE2BIlLhRfLDN7GISw
Y7PpPim3dLzstjha5aldXUJQbWkNEpHyN2Be56lOTKc+Th7i6yh/Op0RP/jbaJLR
Vrx13h4z77Pw2mv2kPpIPYcB53pK7hwJbz4cbSsFBXLsHuFRghcL19iJBRIz0HRk
Q5Zwkdl0/kMVeyRBbc8B4yfsAzhVye+DOjJPWSAnclTivj83riA8w3RYW97FqrQm
khOQMNc1EfZPg8B3wHXHoISWDmprCmZVOzjgQy8ZSZu/JFXiq8Na3FdlzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVEknrbk9XYTKQaqo8egxAKLz52MB8GA1UdIwQY
MBaAFPziWspDT+629XOqRjoSxpQLxNGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUt
NjQzZTQ0NzQ0NGQ2LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUtNjQzZTQ0NzQ0NGQ2
LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWSO6QSJ
3A7AReBf+HeQG35U8gkEu2vwFH/DqT7o72FCumeMX0USkdSVoihiPz26LVfE/2dl
kKQ6LB619BkEPhpfQOi88ETtj2JeDw81d8XTHf+DgXUiTa1J8B+E3tBdxV631Fwj
IQ1IjqTjtfRVLh/KEiZTG9BbhEexKHplL7QYHwvrAL3EJGih0a7+nvje3IEX7iPJ
unZyF4/YEBvuucpec6egYD0LvfSkJ1GZO+/Ad2SaOHKluBMceuR1yHjz1ZPJ8/6X
wonkoJ+hkUWjbNUv3MeRvIdA9Kz6TQbfL/NJ7Y3lUsZL2KFfPpFvSsrZ4XQ0/ZXL
pbLjob+FC7gPKQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:56:23 2026 by rpki-client