Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File:                     OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier:          9flW7BRfpO9lGS3R9SUc9/QYnp4sJgwpaos0KqqZoTM=
Subject key identifier:   36:74:51:B3:94:07:71:FA:36:A9:7C:FF:1D:E4:B5:C0:AF:57:29:D4
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer:       /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial:       01A18F7960E6956321FE874641FCC1DCF6C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number:          1AC0
Signing time:             Sat 31 Oct 2026 01:00:58 +0000
Manifest this update:     Sat 31 Oct 2026 01:00:58 +0000
Manifest next update:     Sun 01 Nov 2026 01:00:58 +0000
Files and hashes:         1: 58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa (hash: HV8V9oTjMmtSDQrOPyii7uMO61tXElSbpadVB9OFkKU=)
                          2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: GgpDJlkqMRQgJfE6KaB72Gg06lv7eZhS+K1j3kub52I=)
                          3: alsVPKZrpQmUXj0uEcZT1N8yiVg.roa (hash: 09uKm4BmAwWDMsqvYSjsTw7MlQ2Dn7dIn/6Gf+Scpew=)
                          4: ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa (hash: xg5lwYc2/XUF5liNH+ui3OtMGbwyGCJPDg20ByKgo34=)
                          5: zGS1iGBGVdelcYyC8IZVLuo4YF8.roa (hash: xNhCCvgxABfH6yRt+p+v0793m+1n0z/VA8lzriBuOf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:79:60:e6:95:63:21:fe:87:46:41:fc:c1:dc:f6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
        Validity
            Not Before: Oct 31 01:00:58 2026 GMT
            Not After : Nov  1 01:00:58 2026 GMT
        Subject: CN=367451b3940771fa36a97cff1de4b5c0af5729d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:f4:82:36:1c:4a:5a:fb:62:b2:3a:a5:b6:
                    8c:ca:da:ef:d0:c8:88:8e:dc:a5:db:4b:a1:e3:fa:
                    39:e5:77:14:54:e8:8e:28:7c:ff:1f:20:c5:d5:2f:
                    e5:33:51:d3:15:66:92:7d:92:ef:be:fc:92:5b:73:
                    fb:4d:23:c1:f2:04:db:12:4f:bb:2d:8d:1d:c0:bb:
                    f6:fe:2a:b5:c7:91:01:52:5c:0e:8c:24:74:a3:48:
                    e5:78:8b:6c:a1:8c:81:8e:93:9f:92:3f:94:28:71:
                    04:e0:8b:ff:57:cb:cd:fd:68:93:c6:e8:d9:14:6d:
                    d8:47:44:af:fd:32:39:40:1c:b0:40:26:e5:aa:e5:
                    c3:da:41:d6:28:ba:bb:6c:dc:df:75:f5:4a:19:24:
                    da:b3:2d:c9:0b:92:6b:f0:3c:b1:a4:05:cb:08:ed:
                    b4:5d:4c:75:59:9d:6a:b3:30:ff:2b:80:17:b3:79:
                    6e:12:66:74:24:6c:21:a7:ad:59:3e:99:32:39:71:
                    02:16:62:1b:54:bf:ab:63:b9:48:93:58:e1:b5:d1:
                    30:5a:cc:14:5a:9b:7d:fa:67:77:a9:a3:2b:ee:1c:
                    7e:a0:c0:be:97:04:6d:30:b8:40:ad:8e:75:2e:ed:
                    74:57:0a:d6:c8:ce:82:95:d8:f0:51:f2:03:1f:65:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:51:B3:94:07:71:FA:36:A9:7C:FF:1D:E4:B5:C0:AF:57:29:D4
            X509v3 Authority Key Identifier:
                keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:3f:bb:ee:f9:04:8a:53:38:3d:33:21:c6:3a:75:0d:4d:
         3a:6c:10:fe:47:6d:89:b0:d5:82:ac:a3:a2:2a:5d:bd:c0:57:
         cf:a7:9f:67:7e:7b:54:72:a0:29:77:09:8c:51:01:d6:8c:44:
         04:f7:2a:bb:e7:52:1a:9a:84:d8:01:38:99:76:a5:7c:a8:d1:
         f0:e2:a6:f0:7f:ac:1b:80:00:75:d3:a7:1f:cb:1c:7c:76:d6:
         df:dc:e5:94:9b:02:b3:c4:a5:98:e3:1a:91:e8:e6:60:9e:a1:
         e7:5b:20:07:09:b6:f3:b5:23:9c:f6:62:97:41:00:2f:65:cc:
         71:00:cd:d3:fe:12:2e:5c:28:f6:cf:ca:5b:67:c2:8e:4a:b1:
         c6:76:37:6f:52:a0:a4:fb:8f:6e:4f:d6:ba:a3:a3:ae:c9:40:
         b7:43:6a:a6:72:8e:c8:05:fa:af:48:11:7a:80:ff:c7:8d:d7:
         c5:1f:6e:88:30:5c:ef:79:fd:2b:cc:96:50:fe:bb:d9:cd:73:
         8c:71:43:40:a9:3a:f5:2d:c3:28:56:44:64:7e:8d:74:07:32:
         c0:d8:af:68:a5:ca:b7:03:f0:d2:fe:5e:ff:6e:6a:c9:76:bf:
         fa:59:d4:37:69:68:e4:29:1c:f5:fe:28:ed:63:11:37:57:c0:
         a1:c0:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:56:29 2026 by rpki-client