Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          NzZbX0oE8EkdgfHO2RWc4KkHJnwwuZgYt+wISfGjzXk=
Subject key identifier:   FA:59:05:A2:C1:8E:FD:7D:74:78:87:80:9D:31:18:3F:97:19:E8:FB
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       019FA2299A2421DDA769A1AA2A66B3B7B1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 06:01:02 +0000
Manifest this update:     Mon 27 Jul 2026 06:01:02 +0000
Manifest next update:     Tue 28 Jul 2026 06:01:02 +0000
Files and hashes:         1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: ZxcLlybMfAtV1qwxaQjlRhp+i+gN5Euws7xUekWvVB0=)
                          2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:9a:24:21:dd:a7:69:a1:aa:2a:66:b3:b7:b1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: Jul 27 06:01:02 2026 GMT
            Not After : Jul 28 06:01:02 2026 GMT
        Subject: CN=fa5905a2c18efd7d747887809d31183f9719e8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:be:e3:46:3c:1f:2f:50:5b:ec:82:03:68:
                    e2:0d:b8:b0:7b:0f:a4:9e:79:5b:d7:4a:a1:0b:d2:
                    43:0c:52:4a:86:f0:81:a4:dd:c6:bc:60:25:69:05:
                    d1:76:a5:ee:fd:16:62:a1:a2:58:fd:7c:08:6a:9b:
                    db:ff:1a:b5:b3:98:48:d4:fb:19:2c:8d:38:be:c7:
                    e7:8a:95:bd:50:31:8e:e8:48:26:74:b0:e1:ff:5c:
                    48:47:af:ac:eb:96:a2:f8:07:41:6c:e5:4d:d9:d7:
                    28:6c:a8:c0:d7:bd:5c:39:75:48:41:78:af:7e:ab:
                    53:c5:20:cd:90:41:ac:7b:06:4e:ec:49:d0:47:75:
                    e7:df:0f:1f:60:16:05:80:55:05:23:60:0f:f4:06:
                    ae:65:bd:ff:ec:67:f8:3f:94:11:d6:c4:78:37:ea:
                    a9:e9:7e:f8:96:e1:ff:6e:bb:aa:4b:c4:41:1d:20:
                    bd:4b:b7:23:27:81:b2:ae:55:d1:87:84:ba:61:27:
                    b3:95:d1:95:3c:ef:d0:8f:e0:cd:25:09:4e:ff:c7:
                    fa:b3:2b:e8:d8:c8:12:53:2f:42:0b:42:eb:20:ab:
                    19:aa:f6:f0:ad:1f:9d:2f:e3:12:0f:f8:ef:00:4c:
                    d0:46:9f:ff:dc:e7:f5:c1:a1:ac:3d:0c:d2:68:b6:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:05:A2:C1:8E:FD:7D:74:78:87:80:9D:31:18:3F:97:19:E8:FB
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:c2:0e:d0:b0:d0:06:41:09:c3:bd:b7:a9:9f:25:db:57:be:
         6a:45:15:86:9e:d1:f3:00:99:51:9e:74:27:6f:0f:e3:a7:fe:
         96:62:41:a3:62:d9:9c:ba:ca:16:fc:11:73:62:c4:13:2c:b5:
         e0:e3:c2:4c:00:7d:b5:a4:d8:19:51:b1:92:fa:1c:ea:d5:27:
         53:aa:6a:8d:06:10:18:8c:50:4d:f3:0e:01:08:29:62:76:5d:
         33:5f:c0:ae:40:1b:cd:69:b6:da:26:a3:8f:e5:ad:ba:5e:41:
         3f:3f:53:ec:e2:b0:af:9b:9d:0c:22:b7:90:1b:ae:b5:3d:e5:
         2a:63:08:86:68:b1:1e:72:9c:3b:55:bb:87:20:91:f7:f7:ee:
         89:60:67:3b:4f:1f:df:a8:37:c7:89:eb:06:e9:f3:b5:6d:b2:
         47:fd:1c:75:66:6c:6f:a6:29:23:08:e6:1f:02:ec:bd:29:1f:
         35:c2:0b:a6:d8:e5:2e:60:3a:b3:fb:22:fc:b6:a0:f4:c5:0c:
         8d:6f:29:52:fa:0e:e4:ec:19:d2:3a:00:e6:5c:87:f0:11:15:
         2a:17:d6:b8:3a:7c:31:f4:03:76:4b:b8:2d:a5:51:09:a2:fd:
         ee:2c:20:91:bc:a4:ca:20:3e:3b:e0:67:d2:2e:7c:e1:b3:b9:
         d5:24:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:22 2026 by rpki-client