Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          nSFOBboY1Taw2UZWM4TQVcVnnrXFSNHNIqzGadqs33c=
Subject key identifier:   AD:37:C4:43:A1:7C:54:92:F7:21:DF:0F:42:47:75:4F:23:58:79:3B
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       01A1860854CB28280D457745AB6A5E489A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          0A94
Signing time:             Thu 29 Oct 2026 05:00:55 +0000
Manifest this update:     Thu 29 Oct 2026 05:00:55 +0000
Manifest next update:     Fri 30 Oct 2026 05:00:55 +0000
Files and hashes:         1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: DTit1c9vJPAKAi3kbCzpNKMCrFVtmMDe/2MfPppsfIY=)
                          2: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (hash: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY=)
                          3: y2_r5sbY9Lv_uRDh7BVz6TP_Rqk.roa (hash: elggw6C3t4Wz+4yMu7U0O34nBVY/GyhPWM7xDo4hWNU=)
                          4: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (hash: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:08:54:cb:28:28:0d:45:77:45:ab:6a:5e:48:9a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Oct 29 05:00:55 2026 GMT
            Not After : Oct 30 05:00:55 2026 GMT
        Subject: CN=ad37c443a17c5492f721df0f4247754f2358793b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:8e:68:7f:16:9c:fd:d7:7b:94:e5:1a:5c:
                    be:c7:f3:c9:a8:de:c8:a0:9c:16:68:19:85:72:d7:
                    ff:1a:4a:c0:29:4f:5a:7c:cb:5a:83:09:cd:87:79:
                    15:b4:9f:1b:9b:5d:58:14:f2:96:0c:53:c1:da:6c:
                    d9:51:41:bc:bb:3b:f1:65:72:08:c9:ee:4c:80:c3:
                    06:40:9f:90:56:99:db:43:1f:d4:91:b6:c5:6a:f8:
                    d9:78:6a:91:96:b7:01:40:d3:69:e7:5f:8a:59:ed:
                    68:44:92:67:dd:48:b8:ee:95:58:d3:8a:e0:0b:db:
                    94:3d:c1:4d:5e:2d:53:60:94:f3:f4:a7:bb:51:a3:
                    94:85:d6:99:c6:45:f9:92:33:e5:5d:e9:a1:5e:e1:
                    71:13:c7:67:84:e6:e4:db:c2:8d:62:ab:86:ce:fe:
                    f7:5c:80:4e:db:e4:9b:1c:22:56:78:b0:3c:d2:6d:
                    bd:e2:c5:6f:4a:3f:52:5d:38:3e:6b:34:5a:ad:87:
                    2d:09:82:fc:fc:c3:33:c0:85:b9:8f:b5:79:6b:f5:
                    2b:79:2f:6a:cd:54:a5:7a:47:c8:81:f2:77:07:55:
                    40:ad:37:80:f6:38:4e:10:f2:2c:4e:96:42:36:e6:
                    31:76:61:37:5f:09:6f:30:70:9e:df:fe:e6:30:41:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:C4:43:A1:7C:54:92:F7:21:DF:0F:42:47:75:4F:23:58:79:3B
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a9:dd:e0:12:f6:03:a5:a1:0c:96:7a:8a:7d:b8:46:12:63:
         08:c6:bd:e5:0e:05:c5:bd:e5:94:35:63:fc:34:ac:fe:2a:3e:
         9d:d2:03:6d:cc:94:b8:e0:58:2b:8e:6e:29:87:2d:44:12:bd:
         78:57:ad:39:e4:71:ad:7a:cc:9b:64:ab:20:8e:e0:1e:3c:34:
         85:59:06:8b:22:1e:74:e8:97:65:99:2a:52:f6:46:c6:0d:9e:
         99:78:b4:c7:92:36:40:be:b4:48:09:17:bd:12:24:9d:10:a0:
         b8:77:0c:c7:f9:49:dd:8d:48:b3:ef:5a:6c:15:76:59:a6:af:
         51:c3:1b:ed:37:fa:f2:7f:cd:37:0f:b5:30:5a:d6:ad:38:e4:
         ae:1a:6b:b6:63:75:a6:75:20:ae:69:3c:1c:c0:4b:d7:81:49:
         06:fd:bc:9e:40:56:49:fb:27:63:2e:e0:ab:ed:9b:ed:e5:97:
         e6:79:6d:28:21:cd:e3:49:eb:ea:25:3a:29:38:23:bc:6d:ca:
         a1:1c:1d:ca:91:83:b4:9d:8c:1a:e8:ba:94:2b:46:22:6f:47:
         61:39:5f:a2:c3:35:e7:cb:96:43:23:30:e0:56:01:22:a9:9a:
         f7:9d:b9:e0:e9:e1:0b:ef:ee:57:e7:ae:dc:5f:87:07:81:e4:
         c1:d8:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:37 2026 by rpki-client