Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File:                     ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier:          dFqK/w+uZMWxxkcASksFpBN8btUrsVPAJeskx8pIn7Q=
Subject key identifier:   D0:0B:01:12:D6:68:A6:E5:1E:19:C9:8F:16:C8:6A:8D:D0:DD:F8:CC
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer:       /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial:       01A06D279886ECC0AEF26C08CA4841B426B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number:          0355
Signing time:             Fri 04 Sep 2026 16:01:46 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:46 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:46 +0000
Files and hashes:         1: 5kXDHLDSjZAiVMFLveILTRxDNMc.roa (hash: PW8kbjXuOxH53eIcya9Iptxt2w97yH9EEIP9BBnXX6Y=)
                          2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: wJhgrPswHyx6BO6yehCQxKMWPMk1QcPgNPU1FGd0908=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:98:86:ec:c0:ae:f2:6c:08:ca:48:41:b4:26:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
        Validity
            Not Before: Sep  4 16:01:46 2026 GMT
            Not After : Sep  5 16:01:46 2026 GMT
        Subject: CN=d00b0112d668a6e51e19c98f16c86a8dd0ddf8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:58:5a:47:2c:0a:20:eb:7e:ad:df:b3:b3:
                    c7:3b:c4:fd:3d:47:a7:e2:99:c0:1f:ea:42:66:17:
                    de:83:06:c6:1e:7f:34:95:70:27:98:e8:e1:45:2f:
                    d3:b4:7a:54:03:1a:ba:d0:a1:2b:3f:c8:76:21:d9:
                    c9:24:4a:c0:4f:df:25:fe:3e:fa:dc:87:d5:ae:d9:
                    07:e2:2e:59:5d:5b:41:3a:f6:cf:9d:92:16:15:63:
                    ee:89:72:da:5f:a3:22:bf:f7:65:dc:1a:2b:5e:60:
                    f2:87:ea:94:49:f0:35:29:28:d8:22:b0:32:83:2f:
                    cd:eb:e3:ce:c7:1a:1d:19:24:b0:97:62:83:e5:e9:
                    94:f8:1a:a6:0f:7d:90:86:be:80:1f:e5:ca:21:de:
                    33:0f:76:b9:0f:a9:a6:3c:3e:53:1a:87:d2:f7:fa:
                    8d:e6:eb:ee:33:61:03:d0:56:86:b6:a8:44:e9:7f:
                    5f:68:48:88:1b:55:f7:09:8e:1c:7f:1b:5f:3d:ab:
                    20:3a:20:8c:78:08:5d:91:0d:d4:05:76:94:1a:9b:
                    76:fc:70:23:6d:55:0a:59:0e:aa:5d:6c:ff:e1:14:
                    17:2a:9e:13:2f:ed:a2:6b:ac:89:c1:3e:f1:d4:bb:
                    21:89:cf:0d:c4:92:08:0d:6a:5d:d3:f3:18:35:49:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:01:12:D6:68:A6:E5:1E:19:C9:8F:16:C8:6A:8D:D0:DD:F8:CC
            X509v3 Authority Key Identifier:
                keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:94:d3:b3:f1:c5:b4:94:ff:63:90:67:e4:38:d3:83:56:
         28:db:17:17:f4:ec:75:d4:19:7c:12:44:dd:1e:b8:9c:72:c5:
         69:af:ea:77:d5:d5:61:6f:b0:ce:eb:dc:8d:b2:f2:f4:56:fc:
         86:a3:53:4b:c2:43:76:7a:bc:32:4e:e6:20:ad:19:5f:51:df:
         98:71:e1:03:2c:3c:79:b9:8f:a7:a2:56:21:dd:3e:a8:56:eb:
         e9:1b:07:72:7f:f0:70:4a:a5:29:53:da:e1:5b:39:ef:8d:00:
         b9:52:bc:49:01:ed:27:52:4a:8b:a3:a2:59:03:f9:34:ac:51:
         af:cb:6f:e1:ff:7a:29:4c:ff:1e:93:3e:d3:33:bf:92:82:af:
         4e:dc:d1:06:16:3e:e7:9d:ca:23:ae:9f:db:a8:62:7a:80:d4:
         3d:44:34:08:86:ac:e7:f9:4a:7b:60:97:d0:1c:b1:28:a8:61:
         f8:8e:7b:89:28:73:85:f9:ef:5e:c1:06:a2:9a:f4:9b:9c:99:
         e8:5b:a2:38:e9:35:7e:10:ac:4e:a7:bc:cd:13:7f:62:b7:67:
         6e:d4:d1:b4:3a:97:ac:4f:8d:b4:3d:50:fc:d8:59:26:65:2b:
         c7:c5:4e:8d:f5:39:2f:64:43:97:ee:6a:27:3a:d1:17:50:79:
         04:d6:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:21 2026 by rpki-client