Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          duFnvs8hbMMDhZIk1p++7bfbsKK1SnBUlPodqmDXwxY=
Subject key identifier:   2C:75:25:46:AF:CB:34:57:E6:64:7F:0D:58:08:F8:06:F5:0F:03:DB
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       01A179283735F7EDC7C786B17FE89EAD642A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1AD4
Signing time:             Mon 26 Oct 2026 17:00:40 +0000
Manifest this update:     Mon 26 Oct 2026 17:00:40 +0000
Manifest next update:     Tue 27 Oct 2026 17:00:40 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa (hash: RWTdXUa+iSybycGajkLlOunVuvAlO58dNpaXACjUKZs=)
                          4: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          5: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          6: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: /eb128FODtHKSOyGGRIKsqAqwxeoQiv5cAIjueKvIJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:28:37:35:f7:ed:c7:c7:86:b1:7f:e8:9e:ad:64:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Oct 26 17:00:40 2026 GMT
            Not After : Oct 27 17:00:40 2026 GMT
        Subject: CN=2c752546afcb3457e6647f0d5808f806f50f03db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:42:a1:7c:53:95:9f:c6:5a:25:e1:8f:97:
                    d1:84:74:63:f7:3e:26:1a:79:dd:88:0f:f6:00:e3:
                    c7:30:fc:57:4d:62:42:33:ba:e6:e5:56:0e:34:9d:
                    42:e7:c8:28:61:6b:9a:39:65:73:1d:36:f8:e3:95:
                    a7:30:75:c4:63:48:94:98:be:c6:69:ff:80:67:4d:
                    9b:f3:1f:6e:e0:4d:8e:79:e1:76:ec:f7:aa:bd:32:
                    ae:62:31:49:51:95:8d:85:24:d3:6c:6f:4f:aa:eb:
                    5a:6a:0a:4d:fc:87:88:e1:e1:89:8e:f1:ad:b3:93:
                    82:11:ca:15:03:09:07:c4:f8:b9:ed:e0:f9:1e:b9:
                    31:d9:9c:f0:31:8c:2b:b7:b7:e9:e0:99:00:e9:bb:
                    df:9c:cb:fa:29:23:71:3b:13:79:82:83:6c:86:fc:
                    8c:2d:7c:ca:33:0f:91:f6:f5:ab:c2:f5:76:a3:1f:
                    21:d7:be:39:f3:05:db:22:d6:62:55:64:39:78:de:
                    fd:3a:32:db:28:c4:ef:57:2c:8d:b0:75:6e:47:b7:
                    90:ea:de:15:e4:01:ac:a4:fd:fa:af:ff:d5:33:13:
                    ee:f3:04:51:a0:bb:64:1c:d3:8b:2f:de:11:5e:8b:
                    36:20:8a:35:ce:be:98:c4:b0:0c:4f:72:e2:e6:8b:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:75:25:46:AF:CB:34:57:E6:64:7F:0D:58:08:F8:06:F5:0F:03:DB
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:31:78:c3:6f:c1:99:ef:a1:d9:93:0e:a5:3b:37:38:a9:
         17:1a:46:25:cf:76:8e:69:89:08:bc:f5:94:b3:84:84:88:c1:
         38:db:1a:09:5a:bb:d5:23:41:76:e1:d1:eb:cf:e5:5e:04:f3:
         54:15:ed:c8:3b:9c:43:e0:e2:b9:d0:27:05:f6:54:7c:eb:bb:
         66:4a:29:17:34:4f:29:d1:3a:90:33:60:bd:e6:8b:81:da:04:
         91:e4:3f:55:51:9b:27:f1:a6:40:4b:fc:50:47:fb:c5:cc:ed:
         49:a8:51:10:ed:33:39:8d:72:8b:6c:ee:1f:82:fd:0b:42:0e:
         6d:f1:17:3c:8f:5f:14:fe:04:04:a1:b4:15:76:4d:ac:ed:09:
         c8:21:85:a4:c3:da:4c:79:67:61:c1:25:4b:10:74:15:f5:27:
         17:70:e9:8a:0a:e6:1a:e3:48:a0:94:bf:39:7b:87:34:ee:14:
         dd:26:19:00:82:1c:3d:f3:93:ec:63:e7:3e:ab:5e:90:54:02:
         45:49:ce:47:c2:c6:97:09:5e:98:e0:23:69:1c:a6:03:68:cd:
         01:82:ec:9f:93:f9:ac:97:fc:cc:7a:6c:2e:13:10:fe:51:fb:
         83:7d:7b:bd:05:d3:a1:c8:23:d3:6e:42:f5:de:fe:6c:03:dd:
         3f:76:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:57:29 2026 by rpki-client