Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File:                     0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier:          f9PLm3nDaKWM/j9bR9al8kwVAlQUQ1itgpLUZgSrXiQ=
Subject key identifier:   7B:86:2E:37:91:8C:FC:2D:3A:6E:D4:A7:1C:E9:E1:61:8D:F6:F9:02
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer:       /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial:       01A001DD55FD77E59B9D594A0332EA0ED6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number:          0F83
Signing time:             Fri 14 Aug 2026 20:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:17 +0000
Files and hashes:         1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: axliuqDCLC+Gp3/7Z1XNWDpsOE4gp8FfV4054CgpePs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:55:fd:77:e5:9b:9d:59:4a:03:32:ea:0e:d6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
        Validity
            Not Before: Aug 14 20:01:17 2026 GMT
            Not After : Aug 15 20:01:17 2026 GMT
        Subject: CN=7b862e37918cfc2d3a6ed4a71ce9e1618df6f902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:dd:df:71:64:ea:87:af:04:35:bf:da:bf:
                    bc:5a:89:b9:6f:31:f8:6c:59:35:82:b5:ee:b8:8d:
                    98:0b:70:1a:44:5f:00:33:b6:23:8a:7a:2a:8f:2a:
                    1c:a2:d0:29:e1:99:a3:66:1a:58:6c:f1:53:09:54:
                    ab:19:25:4f:5f:96:8c:8f:19:73:44:a2:77:84:87:
                    aa:f7:56:0c:a3:be:27:ba:70:12:67:87:dd:58:b0:
                    02:c4:df:6b:29:ba:0d:cf:7b:e7:5b:64:b5:78:45:
                    50:d9:30:bf:b7:c5:49:c0:3a:8e:44:e1:0d:66:35:
                    9c:95:77:59:99:ba:25:9b:2f:77:0b:15:79:83:2a:
                    2d:ca:f5:97:0e:ab:9c:60:5f:8a:e2:6b:f3:65:ce:
                    f4:15:9b:21:d0:5b:d3:76:7c:20:6f:6b:fc:d2:fd:
                    45:b6:58:0f:1d:07:a3:a2:a5:2d:0e:01:80:c5:a8:
                    2d:b3:0b:31:c6:dc:0a:f8:2c:97:52:e2:ed:a9:87:
                    8c:14:d6:70:19:36:f2:e0:41:60:02:ef:b0:e2:f7:
                    fb:d0:fb:b0:a9:d4:b9:68:0a:16:39:4d:fa:50:d3:
                    6f:1a:9e:c3:34:80:c0:5e:fa:f9:21:3a:b2:dc:95:
                    bc:17:4c:f8:62:c0:51:09:59:4a:35:80:b2:4c:22:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:2E:37:91:8C:FC:2D:3A:6E:D4:A7:1C:E9:E1:61:8D:F6:F9:02
            X509v3 Authority Key Identifier:
                keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:cb:4a:81:f6:df:3e:a8:61:5f:b6:61:c7:ec:36:d4:3b:
         19:01:57:6d:ee:40:f3:01:19:dd:fe:6a:16:f7:ab:cb:36:62:
         1b:3e:5c:29:07:e6:42:d7:a1:02:b4:6e:14:de:2e:f4:fb:bb:
         51:71:16:03:5e:93:62:6a:ae:e5:50:b9:5c:ba:29:f6:dc:7f:
         29:9f:a1:10:2c:d8:1d:b4:2d:14:82:0c:98:d7:cf:ef:b5:fd:
         da:0c:46:24:82:78:7f:8d:bc:ef:a6:19:ce:bd:d4:c1:40:26:
         02:64:a8:25:bf:bf:17:44:17:cb:15:a5:8f:f6:4a:fc:99:38:
         ac:ab:20:23:a5:3b:2e:a4:b5:11:e7:4f:b1:59:6a:b5:d9:8c:
         0a:12:b2:10:67:51:f7:5f:40:ab:ec:15:03:fb:8d:9b:ec:78:
         e8:7c:bf:ca:ed:22:e1:4e:f1:3d:e4:b7:d1:5b:5b:26:4b:68:
         76:a0:77:46:6b:ae:26:76:9f:6b:23:10:80:30:15:fa:be:db:
         6d:30:87:ae:7e:8b:53:ac:d9:16:88:28:00:ea:6b:59:e7:e8:
         96:0f:14:04:5a:b9:dc:38:34:0e:74:80:e5:ce:74:6a:7d:ea:
         89:55:a9:6e:91:35:0c:67:fc:da:72:ff:d8:bc:c7:e9:c9:50:
         8b:6e:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:27 2026 by rpki-client