Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          z6QxIeMsuR+1bi+EBS+2cYbLv6Y2m4/Wy9surN00cXk=
Subject key identifier:   75:E1:7F:AD:0C:C9:D5:30:28:7A:05:FB:61:56:EF:7E:B4:61:4C:46
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       01A001DD7ACFF972714F75D59885B9A22BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          1A06
Signing time:             Fri 14 Aug 2026 20:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:27 +0000
Files and hashes:         1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
                          2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
                          3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: T1mmqI/DfoJozoKjSPmzzwRD1aOgTz0Sq1uFFT9gg64=)
                          4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7a:cf:f9:72:71:4f:75:d5:98:85:b9:a2:2b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Aug 14 20:01:27 2026 GMT
            Not After : Aug 15 20:01:27 2026 GMT
        Subject: CN=75e17fad0cc9d530287a05fb6156ef7eb4614c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:95:3d:43:2e:00:2c:5f:5a:36:cf:42:0d:
                    d6:53:56:3a:82:8e:38:fe:f3:ff:94:8a:6f:9b:f3:
                    ce:21:5a:ce:7b:f5:6c:d3:42:10:89:e2:92:5d:28:
                    cb:05:7a:5e:66:9d:87:8b:fd:13:9c:1d:3b:5e:75:
                    5a:8a:fe:60:b4:fc:02:13:23:33:8d:f7:84:be:d8:
                    1f:12:7f:ec:98:4f:80:4c:53:c2:0c:97:eb:19:c1:
                    68:9a:09:df:49:4f:44:9d:3f:fe:d2:45:c1:fb:9e:
                    8d:ec:67:cc:55:42:ff:24:72:22:7f:73:ff:5a:d7:
                    51:c2:2a:d8:b8:d7:54:97:8b:8b:7c:b2:8d:6d:14:
                    89:08:7e:d0:5c:b5:76:b3:40:55:65:d4:9f:7a:0e:
                    1c:7a:f5:ec:87:75:61:3f:6c:d6:75:bd:97:ce:93:
                    38:37:52:6d:a6:b7:f9:3a:1a:eb:8a:af:ec:10:b2:
                    2b:3f:f7:fb:91:2c:87:c3:5a:45:c8:bd:63:aa:6b:
                    3c:26:37:f9:4c:c0:34:c4:7e:19:3d:b9:84:9d:52:
                    37:12:f4:ca:02:28:70:d4:95:ca:74:52:e5:74:b6:
                    01:29:6f:41:77:f5:53:eb:48:b5:59:ea:e5:f5:d2:
                    0d:5f:7b:d8:87:b9:57:bb:c5:ab:75:25:53:3a:07:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:7F:AD:0C:C9:D5:30:28:7A:05:FB:61:56:EF:7E:B4:61:4C:46
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:94:20:32:d7:ec:e3:4a:ed:16:d7:57:e8:36:07:75:3e:e0:
         a0:33:9c:3d:e3:40:b0:b8:f4:dd:d6:dd:05:bd:2b:50:62:ab:
         c3:1e:31:d7:21:39:3c:1a:1d:ed:0a:d4:f0:b0:20:65:b0:a2:
         95:a4:10:97:88:77:32:1b:87:c4:d2:17:29:c6:f2:83:e4:d6:
         ff:78:d2:b6:3d:91:88:4c:75:97:03:c5:b1:a2:8e:ec:06:87:
         22:f5:2f:24:6d:b9:8f:55:b3:59:63:87:24:05:9a:2f:d4:51:
         8e:e6:77:17:83:e0:f4:3e:d2:39:46:a1:62:c0:1e:b9:de:4c:
         12:0a:bc:5e:e8:13:f8:25:12:2b:1e:46:b5:83:f3:fd:0b:53:
         e2:bd:1e:44:87:30:3e:b5:49:e6:d0:c2:aa:e9:7d:f6:73:b1:
         8e:6b:8a:58:49:a8:93:2e:a8:db:8c:6d:d9:db:4a:0e:37:3f:
         88:4a:dd:36:e9:48:52:40:89:2d:cd:5f:3a:aa:bc:ac:a2:88:
         14:04:04:37:cb:1a:61:d1:8c:72:e8:f7:c5:e5:a4:d6:1b:28:
         48:d7:43:d7:d5:59:5e:6e:6e:9b:b0:b0:0f:6c:9e:43:78:4f:
         06:b9:69:b9:14:c6:93:c4:42:22:d1:34:03:2e:b3:10:f2:b4:
         9e:7d:0e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3XrP+XJxT3XVmIW5oiv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx
NDlkNTYwHhcNMjYwODE0MjAwMTI3WhcNMjYwODE1MjAwMTI3WjAzMTEwLwYDVQQD
Eyg3NWUxN2ZhZDBjYzlkNTMwMjg3YTA1ZmI2MTU2ZWY3ZWI0NjE0YzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UCVPUMuACxfWjbPQg3WU1Y6go44
/vP/lIpvm/POIVrOe/Vs00IQieKSXSjLBXpeZp2Hi/0TnB07XnVaiv5gtPwCEyMz
jfeEvtgfEn/smE+ATFPCDJfrGcFomgnfSU9EnT/+0kXB+56N7GfMVUL/JHIif3P/
WtdRwirYuNdUl4uLfLKNbRSJCH7QXLV2s0BVZdSfeg4cevXsh3VhP2zWdb2XzpM4
N1Jtprf5Ohrriq/sELIrP/f7kSyHw1pFyL1jqms8Jjf5TMA0xH4ZPbmEnVI3EvTK
Aihw1JXKdFLldLYBKW9Bd/VT60i1Werl9dINX3vYh7lXu8WrdSVTOgfGXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXhf60MydUwKHoF+2FW7360YUxGMB8GA1UdIwQY
MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt
MGZlYjY2ZTdmMjhhLzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh
LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJQgMtfs
40rtFtdX6DYHdT7goDOcPeNAsLj03dbdBb0rUGKrwx4x1yE5PBod7QrU8LAgZbCi
laQQl4h3MhuHxNIXKcbyg+TW/3jStj2RiEx1lwPFsaKO7AaHIvUvJG25j1WzWWOH
JAWaL9RRjuZ3F4Pg9D7SOUahYsAeud5MEgq8XugT+CUSKx5GtYPz/QtT4r0eRIcw
PrVJ5tDCqul99nOxjmuKWEmoky6o24xt2dtKDjc/iErdNulIUkCJLc1fOqq8rKKI
FAQEN8saYdGMcuj3xeWk1hsoSNdD19VZXm5um7CwD2yeQ3hPBrlpuRTGk8RCItE0
Ay6zEPK0nn0OZw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:45 2026 by rpki-client