Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          qsmEdEudhlEQYhBBjfW495WOFtuMW4zqcutBirum0G4=
Subject key identifier:   00:11:EC:FE:54:CA:77:97:7B:1D:95:DF:F1:21:A4:06:E6:B0:79:76
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       01A08AC3A4C6F2E367C827EB4EB975013F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          1778
Signing time:             Thu 10 Sep 2026 10:01:12 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:12 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:12 +0000
Files and hashes:         1: 5QndnAXxTMXkddGPqIa4AhopT7U.roa (hash: WQ5LOCc3w2MzAgRdeMPpx23W0eVQ5o+Ve2XyefK4ALY=)
                          2: JVYjUEJRSspUdz__TKZidi1E9kM.roa (hash: 6fSEHzErFHj5znFN4gzU6BMdwVWv++ipvAi/nsLL2B8=)
                          3: b_y_rOE1QQam257CWGtkHOr-6Kw.roa (hash: YvhDiuELqEgFsL9eKGZyie6pLZWySNNGa/49rD66WcU=)
                          4: e0VDraMVbp6hbgi2MMgN_ufZ9Ag.roa (hash: yF3EIY5SN06yITcgN88LaWXgWuID454hcpVOXq+lBq8=)
                          5: eib3lQLHEZGs9VPJQb57J-vUb4M.asa (hash: INWM2at42v6knbwFbz/Uv57DXeTXbV7TBPGySu2rKgE=)
                          6: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: bHvdVQwgvmruSWeeyfIeAgo4puy1fy06lbtR/DsNojg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:a4:c6:f2:e3:67:c8:27:eb:4e:b9:75:01:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Sep 10 10:01:12 2026 GMT
            Not After : Sep 11 10:01:12 2026 GMT
        Subject: CN=0011ecfe54ca77977b1d95dff121a406e6b07976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:af:2e:47:e6:0d:53:19:33:98:17:f3:1f:
                    c7:9c:33:c1:ca:05:b9:10:3d:ff:66:74:4f:af:35:
                    69:95:1a:fa:e1:34:59:37:1a:29:4b:a0:7f:0b:f2:
                    9e:75:59:55:2a:9d:3e:20:03:a6:6a:96:2a:a6:14:
                    14:6a:0a:b0:ee:f8:8d:d5:26:41:51:31:bc:8b:4b:
                    67:8d:f2:b7:83:93:aa:15:9f:73:3c:c7:43:0f:69:
                    a1:90:8d:c9:7a:14:53:40:4d:90:62:b4:94:7a:46:
                    9c:6a:3d:e2:38:12:46:40:99:87:3b:ee:b7:0c:1b:
                    7b:80:83:77:e9:03:ea:4c:53:74:0e:be:0e:40:e4:
                    30:77:f0:48:ba:bf:8b:5a:45:1f:7e:76:2b:82:57:
                    c5:c0:05:32:7b:66:f6:d5:73:15:ea:be:af:bc:6e:
                    dc:82:d7:5a:40:a2:8a:c4:67:c2:74:6e:cf:9f:db:
                    38:15:71:08:1a:7a:cc:7b:00:88:fc:76:49:0a:4b:
                    2f:3a:45:45:87:2f:17:7e:2a:11:ae:35:f8:50:ae:
                    6e:68:02:42:ba:5c:16:df:71:9a:d8:5f:5d:37:33:
                    5f:0f:b3:c2:0e:f7:1f:b4:de:df:a1:73:40:83:69:
                    6f:d6:b9:8b:a0:0f:f8:1f:21:f5:e7:79:af:cf:d3:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:11:EC:FE:54:CA:77:97:7B:1D:95:DF:F1:21:A4:06:E6:B0:79:76
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:e7:2c:d3:46:ef:49:db:59:1e:7c:00:da:00:c4:6d:51:
         e5:eb:6a:a6:f5:0e:24:71:03:b6:75:35:45:3c:32:b2:57:65:
         9a:ad:dc:86:e5:07:43:6f:06:b0:93:d1:c2:e8:b4:1e:45:e0:
         a0:d6:d3:5f:ad:20:5d:59:6c:4f:7c:5a:f9:2e:0b:08:18:72:
         db:7e:eb:a0:4c:da:de:eb:87:d0:5b:f5:f8:c3:e3:b7:e3:15:
         cf:96:a9:2c:a6:10:52:28:f2:52:7e:89:4a:05:d9:88:3c:7e:
         79:b6:58:c3:a0:9f:c0:bb:45:67:2e:97:e4:ee:0a:9f:f7:ac:
         b4:ca:fb:e7:bb:6c:d0:09:b6:ea:6a:9d:9a:7e:3f:2d:b4:0a:
         eb:bb:ef:65:0c:3e:97:79:37:6c:8f:40:e4:18:ad:f0:08:45:
         cc:69:da:0e:ea:69:7d:08:42:6b:a6:83:f0:09:46:95:4f:fc:
         bb:07:d3:a9:85:78:99:6a:85:57:01:a2:c5:ef:5d:13:a0:ca:
         24:2b:4a:3d:c0:a5:80:67:20:90:98:63:1e:a0:cd:7a:40:cd:
         0d:c7:67:84:fc:06:64:26:75:e9:09:6b:5a:6b:ea:8f:de:b5:
         ed:2f:dd:32:af:a5:b4:2d:cf:09:c3:65:88:35:c3:7e:2d:18:
         b0:24:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:34:59 2026 by rpki-client