Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          s4LzHm0ZvR9XHFZ/7sUkQGiAY8zQS/q2puhh59SHlCM=
Subject key identifier:   77:EF:CC:1A:1D:A5:2C:28:62:78:F1:11:8A:79:A2:62:21:EB:FD:A9
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       01A08AC3B5C2A6B0D4B6128F14AACA6D8332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1A57
Signing time:             Thu 10 Sep 2026 10:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:16 +0000
Files and hashes:         1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
                          2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
                          3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
                          4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
                          5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
                          6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: V/ybQjGhM+ygy8M9dVBEOmHMgg3IprGmFQuEKt3QP+A=)
                          7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
                          8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
                          9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:b5:c2:a6:b0:d4:b6:12:8f:14:aa:ca:6d:83:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Sep 10 10:01:16 2026 GMT
            Not After : Sep 11 10:01:16 2026 GMT
        Subject: CN=77efcc1a1da52c286278f1118a79a26221ebfda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:86:f4:d5:85:fb:98:76:38:4e:3e:92:d0:
                    57:29:a5:65:a3:0c:74:cb:19:24:64:91:f0:41:e7:
                    59:23:1e:81:ab:d6:96:6c:f3:ab:26:0d:0d:9e:47:
                    86:28:8b:f7:a7:b5:37:57:8f:21:e9:bb:3e:c4:31:
                    a9:ff:66:20:c4:c6:46:07:df:95:a2:8a:28:05:b8:
                    7e:c6:69:cf:ea:cf:86:37:0c:87:d1:be:8d:44:0f:
                    c9:d0:d8:c9:4e:16:fe:35:d7:78:c9:a1:9d:05:84:
                    c9:1f:27:50:08:42:f9:7b:6d:cc:a6:2c:05:3b:a1:
                    a8:8f:6b:96:0b:68:58:a3:ab:bc:9e:08:3a:c0:6f:
                    12:2e:26:1d:4a:49:3f:ce:3c:6c:07:b6:54:6a:b9:
                    c0:87:12:8a:0b:b0:ec:2c:f4:2b:9a:c0:8f:b6:32:
                    8c:70:ec:92:82:31:a0:3b:db:f7:fe:02:48:ee:05:
                    b2:eb:81:8f:eb:9a:2c:52:db:87:8c:2b:39:74:1d:
                    bf:f3:03:ec:e9:f1:5d:e3:e8:2e:d2:71:81:70:e4:
                    fc:59:50:44:89:8f:2c:5a:a7:49:67:f0:32:2c:90:
                    a2:da:f3:fa:2d:5f:0a:a5:64:48:a8:48:34:fc:a6:
                    ae:ef:77:66:5b:16:7f:7e:27:0d:e1:a7:b9:c0:e6:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EF:CC:1A:1D:A5:2C:28:62:78:F1:11:8A:79:A2:62:21:EB:FD:A9
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:07:4e:b3:8b:f9:92:e7:95:a1:bd:e3:cd:9a:b8:3d:b1:
         ba:71:6e:f2:f5:7c:f6:fb:38:a5:a1:e0:e3:e2:7f:1e:5a:1c:
         1f:46:3c:72:21:49:48:79:b7:be:66:f9:10:11:46:85:68:e2:
         1c:7e:82:92:04:1d:af:50:7e:a2:14:11:94:11:d8:af:c4:26:
         7e:18:4e:25:a2:89:6f:2a:3d:ca:ea:35:da:5c:b4:bb:26:e3:
         cb:e3:66:bc:e0:de:20:62:ad:88:3a:90:6c:6c:f1:ec:f4:d5:
         6f:25:95:cd:2a:03:31:c6:0e:7a:1c:1a:21:ce:55:77:9c:21:
         78:d2:dc:99:8f:2a:c6:23:0b:4b:72:33:7e:57:a5:8c:4e:51:
         77:ae:73:91:5d:db:23:c8:6e:45:0f:ac:dd:86:c1:db:96:41:
         00:9a:82:99:99:15:b0:fd:50:92:17:88:58:82:25:af:d7:7c:
         a1:4f:2d:66:b4:f3:5f:ee:5a:c2:54:06:b0:ca:33:24:ae:58:
         da:a6:f6:17:f8:22:4e:a2:9d:b9:e1:d1:2c:dd:c6:ef:ab:96:
         96:ec:ba:7f:28:dd:15:52:43:48:26:2d:8f:9d:bf:ec:f1:da:
         73:a7:78:a0:09:44:04:63:c8:15:58:ee:6f:84:26:ae:f7:bd:
         c4:7a:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:31:03 2026 by rpki-client