Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File:                     OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier:          SM+T1fxXd/SEUn9h8onv9NhFqqp1VAEhaEvtnQ5Ly1k=
Subject key identifier:   FC:C5:4B:67:5A:44:5B:8F:D5:A1:49:A9:68:11:0E:4E:D6:0C:F4:BA
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer:       /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial:       019FA116B55AA9DCC65ABBD1322EAABB88A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number:          19C0
Signing time:             Mon 27 Jul 2026 01:00:47 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:47 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:47 +0000
Files and hashes:         1: 58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa (hash: HV8V9oTjMmtSDQrOPyii7uMO61tXElSbpadVB9OFkKU=)
                          2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: IMFj97LE+Ax49LWEMkWHd/wm5nvYmLbwsxftHK/e2wo=)
                          3: alsVPKZrpQmUXj0uEcZT1N8yiVg.roa (hash: 09uKm4BmAwWDMsqvYSjsTw7MlQ2Dn7dIn/6Gf+Scpew=)
                          4: ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa (hash: xg5lwYc2/XUF5liNH+ui3OtMGbwyGCJPDg20ByKgo34=)
                          5: zGS1iGBGVdelcYyC8IZVLuo4YF8.roa (hash: xNhCCvgxABfH6yRt+p+v0793m+1n0z/VA8lzriBuOf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:b5:5a:a9:dc:c6:5a:bb:d1:32:2e:aa:bb:88:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
        Validity
            Not Before: Jul 27 01:00:47 2026 GMT
            Not After : Jul 28 01:00:47 2026 GMT
        Subject: CN=fcc54b675a445b8fd5a149a968110e4ed60cf4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:40:d3:06:c8:27:35:41:bc:81:ff:0a:af:
                    fd:a7:11:61:ee:d9:8e:79:05:4d:52:c9:7d:a3:6e:
                    ed:7b:27:a1:4c:0c:fc:23:b3:8b:b8:1b:42:a4:d0:
                    27:1d:d1:28:24:91:eb:03:ca:57:d3:20:86:1c:d3:
                    d0:2b:b8:21:09:f5:8e:3c:54:d9:5a:96:83:7b:5b:
                    cd:0f:83:33:b1:18:84:fd:f7:8f:84:3d:ff:84:f9:
                    83:b8:d1:d9:e8:7e:c9:72:55:27:cf:79:c8:7f:d4:
                    2c:7a:d9:b0:fe:9b:0c:04:87:02:e9:03:d1:a8:c0:
                    cf:aa:2a:af:56:ed:aa:3a:24:83:a4:4e:28:45:f2:
                    b0:db:6a:cf:c6:b8:52:9e:bc:55:62:68:8b:25:21:
                    08:5f:31:46:11:08:b2:a0:46:8c:f1:71:86:a0:85:
                    82:50:ca:98:e6:71:a3:1a:01:40:6b:3a:0f:20:b8:
                    74:25:b8:e6:3f:cd:56:f8:71:ea:68:f1:be:b4:15:
                    27:56:c3:11:50:22:02:71:d9:ad:d5:da:f8:4c:fc:
                    9b:84:1f:34:c3:ff:95:64:3d:a9:62:47:cd:01:d3:
                    4e:42:3f:2a:f8:0f:69:0c:93:ed:5d:fe:f4:29:b8:
                    8f:65:dd:38:f7:a1:14:84:2b:cf:b0:0b:7e:24:13:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C5:4B:67:5A:44:5B:8F:D5:A1:49:A9:68:11:0E:4E:D6:0C:F4:BA
            X509v3 Authority Key Identifier:
                keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a0:7d:f4:a6:b9:3e:d5:3b:5e:61:f4:55:98:60:51:45:c5:
         c5:39:b8:ec:5f:16:7f:8a:34:71:97:05:c8:c0:16:58:e7:d9:
         bd:7e:93:c8:5b:06:67:01:d8:21:f9:ff:69:d7:1b:9c:48:f5:
         7a:92:7c:e1:73:f0:55:ea:a7:1d:1e:de:3b:75:b9:9a:af:09:
         6f:d7:4e:e4:85:ba:a8:56:77:ac:45:c2:18:a0:e1:61:8c:fb:
         96:92:3c:6e:96:9c:af:6b:79:8a:34:8f:59:9e:82:13:46:fb:
         80:ef:30:79:38:3f:63:1c:ff:2a:dc:72:0c:ac:0a:d2:53:86:
         03:81:5d:fc:77:7f:9b:58:7f:10:f5:22:69:a4:dd:e3:ee:70:
         f0:57:49:4b:72:38:37:16:32:5c:35:27:1e:c4:69:d8:52:e6:
         30:43:21:24:16:70:31:71:69:bf:c6:7a:7e:59:2e:b2:4e:51:
         b5:e7:de:a6:d7:9e:e9:ff:48:2c:91:5a:fe:e0:c5:7e:d4:f8:
         73:9b:47:64:4e:bc:e9:88:34:8c:6a:8d:ea:aa:77:32:17:48:
         df:f4:26:05:4d:28:c2:60:ea:da:96:7f:c6:2e:79:ea:d4:80:
         c7:d3:0a:26:d0:73:3b:99:40:5a:ab:55:08:86:dd:cf:af:de:
         b1:be:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:08:33 2026 by rpki-client