Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File:                     oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier:          GHSXcfq0mo89MHroJsXn0iM6zSqYtV2gW76+NsLnVOo=
Subject key identifier:   C3:05:0C:9D:1F:7F:CD:07:AA:40:76:55:E4:73:0A:7C:C5:06:A6:97
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer:       /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial:       01A089B13499C77FEBAD0AC40D8CEDFF796C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number:          1A63
Signing time:             Thu 10 Sep 2026 05:01:26 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:26 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:26 +0000
Files and hashes:         1: McIHeSgScebcIpkPT4THS1jto5Q.roa (hash: fdb99PeEhGhn7zMv+ymuqGVl1nC5qV/Bm2pOoVJfRTc=)
                          2: QOOLONPw0mL0zRM6xNCnZ8lu_HA.roa (hash: t5PPKx70RsbnvkvxFWuFNiVu0RY4KKSyPrpAVr06jsQ=)
                          3: lfZvGuublTghs87OLe3YBrTz9rw.roa (hash: 33L3jHKPnMn4vOjKfAOLDS9PGwe/ZxS6Z/D2j8Yjgis=)
                          4: mBsIhxGKE9P1VcdBmaDVaq-y2yg.roa (hash: FjrD6MxlebN9aOC6ecpbIK3eMGRCmF4PugIT8px8qes=)
                          5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: OwXhMukR27lXFqhu/6gLSDPApwJKloANwAJ/idAYZKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b1:34:99:c7:7f:eb:ad:0a:c4:0d:8c:ed:ff:79:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
        Validity
            Not Before: Sep 10 05:01:26 2026 GMT
            Not After : Sep 11 05:01:26 2026 GMT
        Subject: CN=c3050c9d1f7fcd07aa407655e4730a7cc506a697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:dc:7c:4c:c9:a1:e2:2c:52:e5:17:2b:9f:
                    a5:d8:e5:7d:21:46:e5:79:88:54:dd:a3:e0:c5:a0:
                    1e:a7:d9:1c:1d:0c:4e:61:f1:f7:29:22:dc:31:60:
                    eb:ad:64:a6:a8:09:d6:67:a6:f7:23:f4:7f:97:c4:
                    1d:30:80:37:bb:b7:7a:1e:a6:3f:7c:3a:8b:81:47:
                    80:29:d3:48:8f:c4:0e:6a:99:f6:e3:4b:67:3d:27:
                    50:de:92:39:a2:81:23:eb:dd:73:24:73:0e:b8:3b:
                    e7:2d:a8:e3:97:fe:53:b6:fb:12:46:5b:13:92:85:
                    37:02:ee:3a:66:91:1a:7c:a0:f8:71:f2:6e:a7:8b:
                    0a:f7:21:3c:62:e8:4f:3d:8c:1a:5c:e7:64:7c:a5:
                    2c:d3:83:68:e9:17:2e:91:78:55:cc:58:c0:3b:e7:
                    50:cb:b2:eb:2f:d6:c5:3b:16:6a:57:0b:4e:e8:03:
                    0c:5a:d0:05:0e:48:3c:f1:e4:e9:e6:de:05:45:09:
                    79:5a:8b:8d:5f:1f:79:5e:10:9e:dc:cf:3f:45:5a:
                    9b:b8:6f:18:e1:93:0e:bd:d0:a3:47:ba:76:b7:96:
                    55:b5:9d:2c:25:62:ee:b9:5c:15:8c:a9:05:87:73:
                    5d:bb:5e:0d:c9:1c:f3:de:76:39:83:76:0c:b7:70:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:0C:9D:1F:7F:CD:07:AA:40:76:55:E4:73:0A:7C:C5:06:A6:97
            X509v3 Authority Key Identifier:
                keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:93:89:db:c0:1b:f5:d9:f0:29:7b:de:50:ec:04:01:14:
         27:35:bd:0c:00:36:b3:b8:55:bf:5b:fe:54:66:c4:a3:46:56:
         5c:00:ac:ac:70:cc:5a:96:3b:e3:bb:ad:e3:76:69:71:a2:41:
         19:bf:bc:be:fc:e0:87:1b:c9:24:85:e0:29:60:75:36:0c:67:
         ac:02:e1:55:6c:cd:85:e4:0b:49:9e:e2:37:d5:7e:3e:94:95:
         4b:d4:70:24:05:bb:bc:0e:99:73:b2:d5:c7:18:5a:4e:1c:3f:
         8c:0f:99:bd:bd:17:3d:da:58:86:ad:22:dd:2f:c4:e3:38:3c:
         0b:e2:38:83:b7:62:87:45:33:1f:99:bb:8f:19:93:65:2b:84:
         95:c9:07:51:36:98:eb:18:87:08:50:d3:9e:23:59:35:fd:4f:
         4c:65:e9:cb:fd:bb:c5:22:c5:53:0d:dd:cc:8c:e4:d3:02:15:
         40:3a:6a:20:7e:5a:8e:05:2e:6e:91:ed:3f:68:0a:27:45:d5:
         26:cc:1a:d3:dc:55:28:41:06:26:eb:ee:65:ae:52:b1:49:f1:
         30:45:75:bc:df:a9:be:82:a8:09:83:0d:3b:27:29:6e:1e:71:
         7e:6e:c0:3c:02:64:db:eb:f6:06:f6:00:16:88:d7:08:c7:ca:
         e6:bf:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:00:09 2026 by rpki-client