Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File:                     9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier:          n3W5L1ZwWTBUpisT6DygfKgZAxgdviGLwFSNJF7bMy4=
Subject key identifier:   87:22:93:2A:49:7C:38:57:2C:B4:55:68:81:91:E6:28:3B:38:2D:16
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer:       /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial:       019D382E056238C3796857034230815D51E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number:          178C
Signing time:             Sun 29 Mar 2026 06:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:33 +0000
Files and hashes:         1: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: TnobK8X8FM4NInGFoK9OSWN/d75DjH6Pc5LVpzQrwVA=)
                          2: arliBhhCazfqYB3QIekl14-Z-Tc.roa (hash: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:05:62:38:c3:79:68:57:03:42:30:81:5d:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
        Validity
            Not Before: Mar 29 06:00:33 2026 GMT
            Not After : Mar 30 06:00:33 2026 GMT
        Subject: CN=8722932a497c38572cb455688191e6283b382d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:fc:66:9b:7b:b4:33:e0:c1:a1:a0:e5:bd:
                    12:4a:36:cf:bc:4d:1d:9c:a3:56:3d:12:ef:d4:c4:
                    e2:72:2c:3f:33:f7:40:c2:96:b2:80:8d:57:9b:d2:
                    8e:fc:76:f3:39:4b:35:86:97:fa:01:d7:dd:b3:50:
                    79:d0:72:dc:ed:b0:d8:a7:a4:7d:14:fc:60:fa:9e:
                    ec:d4:f1:e5:d0:e6:5b:28:0d:33:17:2a:d9:7b:17:
                    1d:1f:c8:9b:3f:c8:e1:43:fc:8f:9d:af:37:2e:7b:
                    27:4a:4e:42:14:36:5f:fa:ec:0a:56:54:5d:7b:31:
                    89:99:c7:0a:b8:6c:ff:a5:b7:4b:9f:79:3c:6b:38:
                    f1:19:7b:bb:66:a9:05:05:e2:9d:19:be:0d:83:2b:
                    e7:c1:b1:97:d8:84:7a:6c:53:07:9d:c6:cb:21:58:
                    b5:93:fe:1f:54:c1:ad:ff:33:90:d9:ac:e5:fe:03:
                    85:77:30:44:27:b5:50:a3:aa:34:61:cb:9e:dc:4b:
                    95:e0:3d:7d:be:75:19:7a:0d:c3:b8:f3:12:49:1f:
                    25:33:00:c8:16:55:6f:6c:10:71:58:da:91:69:68:
                    21:41:85:18:68:f6:80:a7:ee:e2:7c:ae:1b:4b:ff:
                    26:32:f3:11:a8:3b:8a:c7:29:1e:63:64:6c:8d:a1:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:93:2A:49:7C:38:57:2C:B4:55:68:81:91:E6:28:3B:38:2D:16
            X509v3 Authority Key Identifier:
                keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:f8:bc:26:d8:07:e8:5e:f8:5e:d6:73:5f:f9:95:98:12:
         c4:a1:09:3b:0b:61:b5:43:ec:e7:07:99:cf:71:3b:5e:21:bb:
         88:45:9d:1a:22:19:02:3c:79:5d:20:69:83:3e:b2:90:37:c8:
         e6:c6:db:4f:15:93:75:15:88:00:2e:7e:d8:ff:da:12:f8:7b:
         22:57:da:f4:35:38:9d:73:11:04:ae:4b:3a:a3:49:dd:af:d4:
         58:27:02:b2:74:bb:88:f6:4c:c9:f3:36:92:30:e5:31:17:5d:
         b7:62:16:b8:77:0b:b1:0d:7e:d5:a2:79:86:44:6a:4f:5b:81:
         db:e9:7a:8f:8a:7c:cc:a8:a4:45:29:e7:55:4b:98:76:1f:a8:
         38:5d:27:a8:de:a8:0c:66:47:e1:29:e0:76:8a:5b:c8:a7:a0:
         a0:b5:18:6a:83:ee:81:54:00:85:57:b9:e1:66:aa:68:99:79:
         ad:99:f4:8a:a0:20:d3:22:65:c0:e4:63:46:2f:bb:aa:e8:80:
         4a:c2:0d:07:ae:ef:01:55:a0:d5:a5:d0:a7:a5:80:d6:71:e3:
         46:74:11:22:ab:49:fd:02:f4:e9:3d:94:ba:44:de:25:db:89:
         3a:e0:e3:0f:83:c6:2e:2b:d4:1d:0a:37:56:e9:94:8e:8b:6e:
         51:db:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:09 2026 by rpki-client