Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          4v5c1qJTnoTO80KcriisGT/he/UPuWr80JNTXIzoyXw=
Subject key identifier:   E5:8D:19:73:C4:8B:26:E9:24:5C:1B:FD:49:70:5C:45:07:0F:A2:37
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       01A06E70A75BDE72CCE91D5E8A22A41AFA2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          11D5
Signing time:             Fri 04 Sep 2026 22:01:11 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:11 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:11 +0000
Files and hashes:         1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: t+PlJsJFdtVenP+jmcz4RNzU5UsnVSqINuSTrXpGwZ0=)
                          2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
                          3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
                          4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
                          5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:a7:5b:de:72:cc:e9:1d:5e:8a:22:a4:1a:fa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Sep  4 22:01:11 2026 GMT
            Not After : Sep  5 22:01:11 2026 GMT
        Subject: CN=e58d1973c48b26e9245c1bfd49705c45070fa237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:82:c4:d4:78:8d:35:09:c3:57:3c:58:94:
                    b2:e5:02:4c:3e:24:c3:a4:83:b5:dc:ac:b5:68:07:
                    13:1c:3b:35:62:86:06:52:22:f3:da:f0:d9:30:16:
                    d0:6c:31:b7:23:c8:27:45:65:dd:4b:a0:54:b8:de:
                    45:50:0b:90:b2:ba:66:3a:73:28:bf:1c:3a:28:8a:
                    6d:65:50:85:3f:dc:0e:0c:e7:06:fd:c6:cc:ab:c1:
                    ff:18:fc:60:fa:46:2e:31:6c:50:d2:83:fe:23:90:
                    af:16:3a:92:70:c3:73:06:21:93:aa:49:20:21:12:
                    34:67:0f:e7:e9:80:3d:4f:d0:82:20:37:f7:d2:03:
                    f0:0f:7e:ed:03:31:29:77:6d:00:ef:68:11:b3:6a:
                    f5:2d:6a:c5:a8:7f:9b:b6:5e:97:48:d2:33:a1:c2:
                    37:a7:e4:7d:9a:8b:00:b9:76:cc:9b:d7:cc:56:21:
                    30:99:f6:ff:71:42:f4:7d:7d:28:16:3a:c9:77:83:
                    dd:58:82:34:ad:34:7b:9f:8b:86:ec:8c:c3:f0:21:
                    08:0c:5a:22:60:6d:cd:68:de:1e:4e:4f:28:e5:46:
                    a7:a6:a7:2e:fb:f1:fc:83:2a:8a:21:b9:bb:bc:b8:
                    a1:af:51:a8:f9:73:b6:c5:0c:f6:6f:12:fd:b0:fd:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8D:19:73:C4:8B:26:E9:24:5C:1B:FD:49:70:5C:45:07:0F:A2:37
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:29:65:f5:a0:4d:9f:82:47:41:8d:35:a6:b0:a6:45:c0:5a:
         d2:4e:8c:f7:41:4d:31:aa:b9:f1:39:99:9f:ba:a3:b6:c9:0f:
         b3:c4:9c:69:06:9b:9e:d4:0d:56:07:2d:f9:d1:41:42:2d:9b:
         43:e4:72:d7:b6:d4:d7:fe:ed:90:ba:b5:21:a3:3e:21:98:c3:
         62:3b:35:9c:b8:a1:9b:7e:13:69:6a:f5:87:07:3e:ff:8b:5c:
         6a:0d:2c:ce:4f:f4:58:25:b5:2e:a7:06:d4:4f:93:28:b7:ec:
         da:04:d0:bd:1e:8f:0a:6a:4e:83:95:cf:24:b9:69:d8:65:fb:
         34:74:67:09:27:f0:09:1a:ac:04:6d:4d:5d:c2:42:05:4c:cd:
         f4:41:e3:53:f1:1a:87:a1:3f:2e:ae:ad:f8:06:88:69:dc:cd:
         3b:71:87:a5:5b:c1:26:b4:00:f8:17:65:5e:3a:55:9f:f7:23:
         4a:ab:18:1b:72:1c:16:d2:8a:ed:30:32:6b:e8:1f:eb:f5:50:
         bd:9f:7c:4e:5d:9c:13:81:82:7d:87:5a:99:85:78:53:9f:7f:
         43:0c:e0:43:75:76:5d:a7:4e:6d:e0:5d:00:f7:a4:ee:b9:a5:
         38:c1:9b:df:ff:61:4b:da:ba:60:c7:fd:3a:c6:57:ca:04:48:
         78:34:20:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucKdb3nLM6R1eiiKkGvosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1
ZWQ4NjAwHhcNMjYwOTA0MjIwMTExWhcNMjYwOTA1MjIwMTExWjAzMTEwLwYDVQQD
EyhlNThkMTk3M2M0OGIyNmU5MjQ1YzFiZmQ0OTcwNWM0NTA3MGZhMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL2CxNR4jTUJw1c8WJSy5QJMPiTD
pIO13Ky1aAcTHDs1YoYGUiLz2vDZMBbQbDG3I8gnRWXdS6BUuN5FUAuQsrpmOnMo
vxw6KIptZVCFP9wODOcG/cbMq8H/GPxg+kYuMWxQ0oP+I5CvFjqScMNzBiGTqkkg
IRI0Zw/n6YA9T9CCIDf30gPwD37tAzEpd20A72gRs2r1LWrFqH+btl6XSNIzocI3
p+R9mosAuXbMm9fMViEwmfb/cUL0fX0oFjrJd4PdWII0rTR7n4uG7IzD8CEIDFoi
YG3NaN4eTk8o5Uanpqcu+/H8gyqKIbm7vLihr1Go+XO2xQz2bxL9sP18qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWNGXPEiybpJFwb/UlwXEUHD6I3MB8GA1UdIwQY
MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt
ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx
LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCll9aBN
n4JHQY01prCmRcBa0k6M90FNMaq58TmZn7qjtskPs8ScaQabntQNVgct+dFBQi2b
Q+Ry17bU1/7tkLq1IaM+IZjDYjs1nLihm34TaWr1hwc+/4tcag0szk/0WCW1LqcG
1E+TKLfs2gTQvR6PCmpOg5XPJLlp2GX7NHRnCSfwCRqsBG1NXcJCBUzN9EHjU/Ea
h6E/Lq6t+AaIadzNO3GHpVvBJrQA+BdlXjpVn/cjSqsYG3IcFtKK7TAya+gf6/VQ
vZ98Tl2cE4GCfYdamYV4U59/QwzgQ3V2XadObeBdAPek7rmlOMGb3/9hS9q6YMf9
OsZXygRIeDQg0g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:22 2026 by rpki-client