Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File:                     sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier:          YuFydq3Jx+m0wERxxJmCvnQGU25qVD3Lv8H1l5VP93A=
Subject key identifier:   36:2D:AD:6A:E5:55:FF:46:DB:82:E3:F8:0B:F5:03:18:98:58:E7:CC
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer:       /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial:       019FC9A525AF947C3E5F6A967214C61F0B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number:          0DD6
Signing time:             Mon 03 Aug 2026 22:01:11 +0000
Manifest this update:     Mon 03 Aug 2026 22:01:11 +0000
Manifest next update:     Tue 04 Aug 2026 22:01:11 +0000
Files and hashes:         1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
                          2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: 1XstyrU28tNut+KLzRU9sZKJtzj3zTVcjBeFHUMwMtc=)
                          3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c9:a5:25:af:94:7c:3e:5f:6a:96:72:14:c6:1f:0b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
        Validity
            Not Before: Aug  3 22:01:11 2026 GMT
            Not After : Aug  4 22:01:11 2026 GMT
        Subject: CN=362dad6ae555ff46db82e3f80bf503189858e7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:d2:e6:52:81:23:1c:29:ab:1b:42:68:e3:
                    da:e3:37:01:ba:73:5d:34:53:8a:24:50:26:3c:9b:
                    26:1a:00:01:d8:8b:29:d1:29:18:a7:c5:5a:27:78:
                    34:6a:6c:89:f2:ae:a5:f1:99:1a:4a:e3:4f:5e:ab:
                    56:74:21:3b:02:e3:d1:60:2c:18:23:ce:12:e0:59:
                    9b:95:43:ba:4e:e8:e3:8d:67:d0:52:7a:9e:56:8f:
                    25:b6:1c:34:b2:33:6b:e6:1e:8d:9e:0b:60:62:ed:
                    0b:6c:94:e3:5f:bf:15:b2:1a:46:99:89:c3:0a:40:
                    ca:a0:a9:e0:52:ae:76:cb:5c:90:03:69:e3:27:df:
                    41:c1:33:90:4f:f1:4e:f0:24:94:2e:af:ff:b1:96:
                    a8:3a:17:5d:83:c7:26:e9:56:97:59:68:45:79:f1:
                    1a:e4:98:2b:7b:dd:c8:60:d5:96:16:03:17:ef:8e:
                    6d:5a:19:c1:30:95:d4:0e:06:a2:0b:92:d3:ce:1a:
                    5f:dd:14:aa:62:d0:37:df:d1:41:f2:25:c5:77:dd:
                    41:11:5f:10:42:49:9b:24:14:43:48:78:4e:a0:6d:
                    d3:c3:71:0c:07:52:62:dd:a3:0b:d4:97:c1:84:dc:
                    c9:25:ec:bf:38:23:76:d4:0c:20:2b:c1:b5:cd:37:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:AD:6A:E5:55:FF:46:DB:82:E3:F8:0B:F5:03:18:98:58:E7:CC
            X509v3 Authority Key Identifier:
                keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:6e:26:33:63:e6:7c:d3:0a:30:fc:36:5e:0f:32:03:7d:
         3a:23:0c:aa:7d:0d:53:29:05:8f:1a:72:d7:6e:71:eb:b3:94:
         34:22:b9:0b:0b:2c:07:bb:eb:c4:9c:b5:1f:cf:ab:53:29:30:
         f1:01:10:78:35:e5:42:4c:06:9a:e1:0e:27:2d:4c:6f:80:36:
         c3:7e:9f:4c:5c:b1:57:01:b0:48:2d:45:f5:2c:ef:a2:f3:6d:
         84:8a:7a:3b:bb:d1:23:60:ea:6e:dd:29:a8:98:69:71:b7:b6:
         e8:bc:5e:23:2b:1c:56:6c:1a:28:74:ef:e6:80:d3:8f:30:54:
         42:56:da:4e:d8:e5:52:e0:4d:5c:44:bc:ac:1c:b4:a9:f8:33:
         7d:f1:ca:40:55:b4:f0:02:ad:13:05:f7:48:18:e3:05:e0:48:
         03:2d:c3:62:8e:ad:a9:67:af:50:56:39:29:63:fb:97:e7:9f:
         df:61:fd:07:46:fa:d7:e6:36:a7:0b:00:82:e4:fc:b6:23:c2:
         0f:6c:db:78:c9:e6:60:95:63:7e:46:69:e3:f6:3e:49:e1:d8:
         ed:1a:31:fc:ae:b9:da:7c:58:6f:ca:89:d6:22:32:68:04:58:
         da:da:ec:f4:f7:e8:d5:2a:d8:dc:91:ae:21:d2:d3:e4:b7:87:
         15:9b:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:55:54 2026 by rpki-client