Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File:                     9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier:          0+mq6Y9On3iCuFrl4S97BKGjVZGNvSvYC+FhzxqxWsc=
Subject key identifier:   FF:1C:94:CA:D8:67:50:36:56:70:64:E7:8B:59:C3:1D:3C:10:B0:5D
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer:       /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial:       01A13D811ADE61FF1E5EBC9D77D4C7876AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number:          19A1
Signing time:             Thu 15 Oct 2026 03:00:33 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:33 +0000
Files and hashes:         1: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: ldEaCthlIMENa/enfiLvl7qmZbsvjm1+9TRiAOF7Iho=)
                          2: arliBhhCazfqYB3QIekl14-Z-Tc.roa (hash: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:1a:de:61:ff:1e:5e:bc:9d:77:d4:c7:87:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
        Validity
            Not Before: Oct 15 03:00:33 2026 GMT
            Not After : Oct 16 03:00:33 2026 GMT
        Subject: CN=ff1c94cad8675036567064e78b59c31d3c10b05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:bf:b3:12:89:f6:69:e2:b1:2a:5e:18:8d:
                    e3:88:71:45:cd:0c:c4:55:99:7f:45:05:a4:95:dd:
                    0d:6f:d6:35:a8:84:91:4f:cf:9a:f9:2e:12:84:f8:
                    7f:be:7a:0b:8b:af:67:c7:ad:90:11:49:4d:1e:11:
                    48:1f:d1:3d:1b:3a:fd:9c:a9:dd:0b:63:a3:96:22:
                    41:f3:ff:60:1b:e6:fd:6d:a5:35:a5:18:97:40:7d:
                    94:82:71:5f:90:34:dd:c1:24:f7:a4:b9:6c:8e:e3:
                    9c:80:ef:62:89:01:2d:27:1c:00:49:ba:07:67:6b:
                    d1:2c:e9:7f:e4:5a:4f:86:32:2f:a3:3b:c2:eb:39:
                    0e:c9:11:29:c8:fc:52:0d:71:00:2e:cd:70:e7:40:
                    45:4e:5b:9b:19:cc:2c:83:f0:91:87:66:cf:eb:94:
                    b2:ec:a6:79:b2:e3:11:82:ca:83:91:aa:9c:d6:3f:
                    69:a5:ea:e1:15:79:8b:7b:8d:48:75:1a:1f:5c:d6:
                    d6:bf:2d:12:56:0c:73:27:35:2f:8a:ba:5b:8e:40:
                    73:e4:a7:48:6a:28:1f:89:07:6a:6d:43:38:11:f2:
                    47:bb:9c:ea:26:17:4c:e5:e9:bf:bc:40:58:5d:71:
                    75:de:1f:e9:0d:03:a9:63:b7:5f:9f:31:0a:07:2b:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:94:CA:D8:67:50:36:56:70:64:E7:8B:59:C3:1D:3C:10:B0:5D
            X509v3 Authority Key Identifier:
                keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:89:d9:63:b7:8f:28:2e:bc:5b:91:80:1a:73:a0:6d:04:
         f1:71:c2:27:d4:fa:34:bc:cd:c7:63:b1:23:b8:7a:95:5a:17:
         a1:33:ea:86:c0:2f:1b:b8:97:9b:e4:f5:c8:29:0b:91:1e:62:
         93:bf:51:78:ea:f4:2f:53:a2:24:29:bb:22:23:f9:32:67:b2:
         c0:78:cf:bc:03:b6:47:e8:8a:7d:d1:32:76:a3:76:61:5f:76:
         9e:e6:ca:b5:8a:97:44:a3:7a:25:b8:05:2b:3e:b6:52:55:ec:
         98:c0:25:44:9b:7a:e8:63:b7:2c:74:05:b1:68:35:bd:4e:4e:
         5c:20:36:b4:65:6b:d6:2c:1f:0d:54:63:08:57:0a:e9:6f:f2:
         7b:58:6b:26:e8:b7:51:72:cf:4b:75:18:37:fc:eb:f9:d0:8c:
         de:ec:e1:39:26:27:ce:c5:9d:18:7b:b4:67:b6:f1:b6:58:83:
         0a:c3:83:2d:55:a5:6f:e8:72:cc:9c:c1:cb:b9:34:e0:e9:9b:
         c8:28:96:b1:b3:ad:60:87:e3:4a:49:51:59:d6:aa:c2:5a:ec:
         41:20:c5:5b:74:7d:fb:c7:d0:32:06:a5:c1:6d:e1:95:23:ed:
         2e:d8:99:a2:20:aa:bb:a3:83:c5:cd:72:03:95:0e:b2:01:0d:
         09:cf:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:49 2026 by rpki-client