Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          T7ymziq+BH7039V4XPrTRHBZ/R5AgsATp3ZJMVpx3a4=
Subject key identifier:   23:10:2D:C3:41:C1:76:01:C7:F2:62:3D:9D:EB:23:81:FD:1C:3E:CD
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       01A161FB5BEF8945383E0940EC2C3814EEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          06C2
Signing time:             Thu 22 Oct 2026 05:00:25 +0000
Manifest this update:     Thu 22 Oct 2026 05:00:25 +0000
Manifest next update:     Fri 23 Oct 2026 05:00:25 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: hGHuGUVfdlAkk9EcK3VpcCg4r2m/IgsYL8ff9DeDMIg=)
                          2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:fb:5b:ef:89:45:38:3e:09:40:ec:2c:38:14:ee:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Oct 22 05:00:25 2026 GMT
            Not After : Oct 23 05:00:25 2026 GMT
        Subject: CN=23102dc341c17601c7f2623d9deb2381fd1c3ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:31:79:70:d5:7f:e2:5f:48:70:e9:16:56:
                    66:40:0a:b9:e5:cd:71:11:a8:8e:94:ad:2b:eb:86:
                    9f:68:d9:c7:c7:c2:df:9c:56:e6:30:46:62:9c:26:
                    eb:18:8d:32:2d:a6:10:b2:c5:d4:6d:d0:9f:4c:42:
                    4a:d8:d2:60:be:6d:2f:fa:cd:a8:ca:94:05:fa:33:
                    c8:08:a7:15:97:26:22:47:2b:cd:d1:50:f9:e9:ed:
                    7d:e2:53:5a:68:fc:a1:b5:6b:e5:9f:fb:fe:0e:d5:
                    38:9c:8d:6e:99:fb:27:01:64:40:01:7e:84:8c:ca:
                    7a:19:14:bc:65:12:c6:8c:8c:36:d9:8d:1c:92:f8:
                    25:55:df:ae:e0:39:28:70:5d:36:29:a9:4d:a3:d2:
                    bb:b8:57:82:c4:3b:ba:13:a2:2c:37:7f:33:c7:75:
                    bb:07:f8:e6:87:f7:6f:5c:b5:9a:47:32:4c:5c:f9:
                    39:37:9e:93:a1:75:ab:5e:ab:13:3a:81:1c:c5:8b:
                    e1:1b:2c:cf:c1:71:e0:45:9b:82:77:5a:0f:90:17:
                    60:54:60:19:e6:13:4e:90:76:f8:72:9b:a6:d5:9d:
                    85:20:05:83:be:5b:d3:20:3a:9a:2b:10:36:de:7e:
                    c7:6d:af:0f:9a:cd:f1:37:45:7c:66:e1:20:3b:4e:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:2D:C3:41:C1:76:01:C7:F2:62:3D:9D:EB:23:81:FD:1C:3E:CD
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a0:1f:fe:0c:77:18:5e:1d:3e:b3:ae:d5:29:b9:93:a5:4c:
         10:26:c3:82:a7:ba:15:56:7f:d6:62:a8:0c:45:fa:b1:97:a5:
         d8:ad:d4:0a:ac:6b:5d:83:3e:c4:4e:06:f4:5b:fd:d8:10:4b:
         6b:44:ee:2f:e6:95:c3:0b:5f:57:1b:b5:2d:a1:48:32:c0:db:
         54:e8:c2:ec:b3:6d:da:a9:4e:d0:a6:ef:8c:f5:e7:c6:aa:81:
         36:a6:f0:d5:e8:60:a0:7d:1e:9d:fb:d3:48:cb:b5:b6:f3:e4:
         a5:b7:99:b3:b1:a7:5d:f6:d0:28:4b:14:37:08:c6:f0:e8:e1:
         e0:63:47:4b:a7:3d:28:b0:7a:07:9b:1e:0a:dd:62:7b:99:f6:
         29:79:2f:85:04:7b:66:d8:c2:da:22:67:7c:ca:6c:08:bb:b5:
         27:6e:eb:2d:70:b7:95:5a:41:f3:b1:77:60:f7:ad:1b:76:f1:
         55:31:e0:fb:71:de:a6:d0:2e:1f:f4:a2:c8:d2:87:95:29:f1:
         0e:14:50:a2:c1:66:c7:ec:c7:ac:7e:8c:00:79:a4:92:3e:0c:
         5d:90:99:38:50:66:2e:87:dc:22:11:70:2c:1a:52:42:82:a6:
         8a:5c:65:80:5e:2c:c1:e1:6a:68:1d:e4:ae:f3:b6:bf:74:11:
         78:eb:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:26:14 2026 by rpki-client