Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          RNUBoHj1VkUtQEBc1sPWGBHclAe6JGg/5XZf51WEGfY=
Subject key identifier:   F6:CE:B8:4E:FC:25:2C:53:45:83:A3:83:89:94:5B:CF:20:EC:05:6E
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       019F864457D4A0370ABF6C1AA5D04130C292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          0EA1
Signing time:             Tue 21 Jul 2026 20:00:53 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:53 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:53 +0000
Files and hashes:         1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
                          2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: fW2ElyfUY460zWeNB8ME/tjDN0CYO3d2jwKa/8TcC8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:57:d4:a0:37:0a:bf:6c:1a:a5:d0:41:30:c2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: Jul 21 20:00:53 2026 GMT
            Not After : Jul 22 20:00:53 2026 GMT
        Subject: CN=f6ceb84efc252c534583a38389945bcf20ec056e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:35:89:22:7d:25:dd:80:97:44:53:f7:35:
                    87:f7:c0:7e:dc:f3:9d:46:ba:ad:9b:57:aa:e2:d3:
                    cc:58:2b:23:4e:a2:96:3c:48:2f:3d:b8:78:3d:fb:
                    e0:50:6a:eb:db:e0:f3:2a:83:d1:4d:4b:12:27:cc:
                    80:99:03:f4:17:3f:3f:d1:b6:75:3d:cd:44:df:ef:
                    0f:13:df:27:d5:12:9d:46:08:2c:70:9d:80:a5:1b:
                    91:48:ee:36:72:d1:1d:af:f7:18:a8:05:2f:4a:4a:
                    6e:9d:31:13:22:54:fa:9b:5b:b0:99:4c:02:55:fb:
                    fc:01:1f:43:25:e6:d7:7f:e0:c8:5f:6f:c6:ee:b2:
                    09:4e:de:93:08:85:70:25:6f:73:35:6e:91:59:c3:
                    1d:25:96:21:59:c4:89:13:14:fb:f4:a2:c4:f2:e3:
                    da:74:5d:f3:0d:91:4a:37:00:54:5f:e2:6a:94:0a:
                    f5:f4:cf:80:78:3b:ba:00:a8:4b:ce:eb:27:a7:b8:
                    50:e2:51:5e:95:df:9d:45:9f:ba:18:63:bc:71:3f:
                    b5:5d:e7:d8:26:e4:e3:dd:0c:6d:d0:5b:c8:cc:1f:
                    f5:e4:50:b3:c3:38:78:71:62:23:85:cf:f9:0d:90:
                    a2:d7:83:62:6c:31:64:d5:e4:b1:a8:53:ee:f6:d6:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:B8:4E:FC:25:2C:53:45:83:A3:83:89:94:5B:CF:20:EC:05:6E
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:28:20:b8:a7:db:69:fb:99:c1:41:a8:0c:a0:27:f1:f6:
         a2:41:b4:c2:de:14:fc:71:cd:8d:26:7c:88:aa:0e:d3:0d:bd:
         e3:b7:50:ce:b9:24:51:b6:0e:86:77:1b:44:17:89:45:22:3d:
         eb:a8:17:75:d2:57:e4:58:0d:37:09:b2:53:2b:12:39:ea:d8:
         47:85:c1:7c:f3:bd:f0:6e:83:f0:a2:cd:7e:73:b7:17:da:ff:
         d0:0e:f8:20:ae:cf:6c:b2:9f:a4:93:fe:7c:cb:5b:af:d2:07:
         fd:5a:33:92:96:43:c3:7e:ef:4b:67:e6:17:7e:68:93:05:ef:
         eb:58:a5:91:31:6f:f0:7e:58:c7:00:73:59:01:53:13:68:97:
         7c:71:31:16:3e:e5:36:11:d1:9a:56:41:6a:03:c8:35:4d:17:
         d6:02:c5:7e:e6:90:60:60:cc:2d:03:0b:cd:ee:87:f9:bd:83:
         3f:99:29:bd:2f:d5:28:2f:06:08:97:5b:b2:e0:e9:65:3f:c5:
         f5:c0:5d:16:32:b5:32:30:85:52:43:9b:55:de:f6:62:13:94:
         a7:61:88:8d:33:57:b3:4d:bb:70:58:83:fc:74:c3:a3:28:ce:
         af:1e:ee:23:6f:27:ab:c0:90:ac:89:e0:d8:e5:cc:3d:98:1a:
         83:67:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:41:39 2026 by rpki-client