Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          psEsVO/KvXv3b/owISJXo7vrvvik235UncRy28ZmRt4=
Subject key identifier:   7C:C8:F2:9D:23:9A:A9:49:E6:64:66:A8:24:CF:AB:BB:EB:0B:49:D6
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       019CE5234D613B6FBC3CC393B2B6AF27638C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          1864
Signing time:             Fri 13 Mar 2026 03:00:21 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:21 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:21 +0000
Files and hashes:         1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: p8a1Fi7A17FBV4O2pq+Qkv9A3C3ritu6gwxC0mUxCac=)
                          2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:4d:61:3b:6f:bc:3c:c3:93:b2:b6:af:27:63:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: Mar 13 03:00:21 2026 GMT
            Not After : Mar 14 03:00:21 2026 GMT
        Subject: CN=7cc8f29d239aa949e66466a824cfabbbeb0b49d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ce:59:d0:ba:56:e9:cd:67:8a:11:38:58:e9:
                    7f:dc:33:0d:aa:8b:20:2b:a9:bd:4d:42:68:c5:14:
                    2c:ff:28:da:0c:2c:a4:4c:3f:01:61:2d:55:a1:d2:
                    19:83:5d:33:0a:86:03:ea:e5:f3:47:5c:f6:9d:ea:
                    d3:24:d7:5a:00:07:4b:ba:6c:27:4d:35:23:73:86:
                    a1:db:6c:e1:da:77:3c:51:a0:0f:83:77:69:e3:41:
                    80:00:0b:e3:57:82:d2:d3:66:90:18:65:a9:bf:69:
                    f3:89:cd:ef:eb:7e:8c:e7:4d:51:21:77:fd:b3:7d:
                    5a:d0:85:e0:a2:d7:ed:3c:a7:18:fa:c8:57:b2:c8:
                    1c:07:f2:88:0d:e8:6d:2b:d9:b8:12:f2:e7:0f:68:
                    b7:b2:01:40:74:43:0c:f1:56:b5:6f:66:61:a5:1b:
                    0d:c9:22:8b:29:8e:1f:c8:53:4d:bc:04:17:5e:78:
                    7e:52:be:84:55:e0:64:a1:7b:c5:36:02:f7:9f:c3:
                    db:49:96:52:83:c8:6b:e6:6f:72:b5:23:82:ec:da:
                    8c:d1:6c:31:8f:3c:7c:db:0e:29:5f:f9:12:2b:1a:
                    25:a6:38:3a:34:9d:97:54:63:03:dd:96:02:fb:9b:
                    c6:a3:2a:d9:e3:77:08:7d:b0:74:ba:86:e7:ee:1d:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C8:F2:9D:23:9A:A9:49:E6:64:66:A8:24:CF:AB:BB:EB:0B:49:D6
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:39:79:5f:46:86:d5:ff:af:bb:42:7b:4a:fd:97:d8:37:
         6a:d1:36:f7:fd:c7:92:f0:57:9b:e1:bc:c6:05:94:9a:09:3a:
         39:72:08:08:9e:4f:67:bc:84:7d:80:f3:be:89:1a:69:08:22:
         11:b3:68:be:cc:b0:26:17:35:8f:81:8b:79:47:8e:cc:84:09:
         c1:7e:23:e1:17:7a:d5:70:30:25:87:72:8a:de:69:0f:f1:22:
         37:17:cf:da:64:01:15:8e:30:e9:31:5f:fb:57:0e:2c:d1:41:
         9c:d3:65:70:b0:75:94:c3:b9:29:1f:cf:d4:d1:82:16:37:72:
         b6:dd:0b:5f:84:f2:b9:7e:e0:f1:0f:4b:0f:c3:b7:09:3e:5f:
         ef:b5:95:97:84:34:87:ab:b2:87:a9:cd:de:2e:39:74:3b:8b:
         02:e7:7f:64:1b:4d:11:99:67:5f:4f:2a:7f:fb:97:a3:3b:41:
         45:e6:15:6c:a6:a9:63:d0:37:50:44:65:fe:bc:d3:f4:7a:69:
         56:90:aa:04:6c:19:ce:51:11:bb:d5:28:2f:fa:35:e7:d7:be:
         1b:cc:b7:cd:ee:b5:3f:ab:8d:02:ab:b5:12:da:46:d3:28:13:
         2d:20:10:29:bc:c8:45:af:05:29:1b:79:18:89:27:16:ee:c3:
         c7:45:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:36:14 2026 by rpki-client