Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          PQqWOZayulrK9JZZqntCUM3SJL3lx4QhgTg5ENc6DaE=
Subject key identifier:   C2:ED:4F:DE:C3:4B:E7:1D:A1:57:1F:09:6D:9D:CB:FE:10:12:BC:76
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       01A08B687037C27F79C98518C9F341C970B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          1429
Signing time:             Thu 10 Sep 2026 13:01:12 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:12 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:12 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          4: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          5: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: adlfbUfrPTL1rJhtEnBXXCoL/SXbc96yQmnF9LGHci0=)
                          7: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (hash: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:70:37:c2:7f:79:c9:85:18:c9:f3:41:c9:70:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Sep 10 13:01:12 2026 GMT
            Not After : Sep 11 13:01:12 2026 GMT
        Subject: CN=c2ed4fdec34be71da1571f096d9dcbfe1012bc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:8a:62:0a:bb:d7:9d:87:34:f9:18:8e:6e:
                    1a:ac:a8:85:12:b0:91:bb:28:da:de:fb:6c:7b:25:
                    d6:cf:4c:53:4a:68:15:66:95:bc:08:05:a5:ef:58:
                    d5:63:f7:c2:af:6c:bd:ed:3d:f3:01:88:0a:eb:07:
                    b8:e2:bc:cd:2f:67:c5:57:18:22:29:62:01:93:c0:
                    49:d2:40:bc:18:3d:f1:14:0a:97:61:7f:75:cd:57:
                    05:ec:0c:93:b8:9b:1a:65:cc:af:57:30:8e:99:73:
                    14:1d:32:0e:ea:68:82:77:c8:6b:a2:5c:10:c7:a9:
                    af:e9:cc:d2:90:2c:f1:77:ac:21:48:a4:4e:8b:48:
                    ae:df:06:84:8b:a9:ec:84:b0:64:28:d8:22:fb:21:
                    ea:68:b1:6d:c3:2d:d6:76:76:ff:5f:ce:dd:be:10:
                    b3:27:ad:97:7b:9c:d8:80:a7:6e:ed:52:e3:d5:2c:
                    33:a9:6a:b3:e5:87:1d:59:d3:44:73:88:ae:3c:07:
                    95:68:8a:14:50:bd:fd:f6:f8:4b:90:de:18:84:6d:
                    bf:ed:e5:7a:6a:8a:ff:fe:a1:91:75:0d:0e:60:e3:
                    21:27:91:57:74:a3:f8:24:98:f6:8e:d5:a6:43:a7:
                    1a:32:b2:7c:b3:ae:87:3a:15:8d:0b:be:16:f4:8a:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:4F:DE:C3:4B:E7:1D:A1:57:1F:09:6D:9D:CB:FE:10:12:BC:76
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:46:e1:ec:dc:88:c7:1d:f9:ab:7b:11:98:ca:ae:4f:45:08:
         ae:db:5d:d4:06:8e:37:44:cc:a5:d5:76:cc:6e:19:de:c9:26:
         85:27:15:4d:48:bc:15:a5:51:64:ce:16:9e:e6:2d:d8:ee:4a:
         ed:f0:aa:b5:86:d0:8a:e5:fe:14:06:6e:53:ce:66:6d:b3:23:
         9d:ee:e1:9f:81:ce:19:71:ac:d7:57:f5:2c:3f:0a:b6:39:41:
         5a:eb:12:29:7e:fb:06:85:59:17:67:13:08:26:71:c9:b0:be:
         17:5d:df:30:9d:02:87:af:85:01:32:e5:98:00:56:a4:fc:f1:
         31:a8:0c:a6:5e:22:d1:20:c4:32:66:f7:33:91:0a:f9:83:55:
         21:16:3e:08:ea:6c:19:af:ac:33:48:a8:05:36:98:e9:ca:c7:
         cf:e6:ee:58:fc:fa:9e:cf:3b:8a:7f:88:9f:c4:f9:87:d6:2b:
         52:2f:19:af:85:2e:81:3e:1e:62:db:81:81:b7:d0:84:16:79:
         35:fe:bd:20:3b:4d:f4:6d:0d:c3:ea:8c:df:9e:cc:2f:d1:2f:
         6a:f6:fd:b5:22:1f:ef:73:c8:8f:c2:a4:3c:05:8f:50:f0:34:
         00:39:da:8d:7f:47:ac:8f:ef:5b:4c:99:11:e3:a5:8b:b2:fa:
         60:b9:e9:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaHA3wn95yYUYyfNByXC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjYwOTEwMTMwMTEyWhcNMjYwOTExMTMwMTEyWjAzMTEwLwYDVQQD
EyhjMmVkNGZkZWMzNGJlNzFkYTE1NzFmMDk2ZDlkY2JmZTEwMTJiYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzaKYgq7152HNPkYjm4arKiFErCR
uyja3vtseyXWz0xTSmgVZpW8CAWl71jVY/fCr2y97T3zAYgK6we44rzNL2fFVxgi
KWIBk8BJ0kC8GD3xFAqXYX91zVcF7AyTuJsaZcyvVzCOmXMUHTIO6miCd8hrolwQ
x6mv6czSkCzxd6whSKROi0iu3waEi6nshLBkKNgi+yHqaLFtwy3Wdnb/X87dvhCz
J62Xe5zYgKdu7VLj1SwzqWqz5YcdWdNEc4iuPAeVaIoUUL399vhLkN4YhG2/7eV6
aor//qGRdQ0OYOMhJ5FXdKP4JJj2jtWmQ6caMrJ8s66HOhWNC74W9IpeNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLtT97DS+cdoVcfCW2dy/4QErx2MB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkbh7NyI
xx35q3sRmMquT0UIrttd1AaON0TMpdV2zG4Z3skmhScVTUi8FaVRZM4WnuYt2O5K
7fCqtYbQiuX+FAZuU85mbbMjne7hn4HOGXGs11f1LD8KtjlBWusSKX77BoVZF2cT
CCZxybC+F13fMJ0Ch6+FATLlmABWpPzxMagMpl4i0SDEMmb3M5EK+YNVIRY+COps
Ga+sM0ioBTaY6crHz+buWPz6ns87in+In8T5h9YrUi8Zr4UugT4eYtuBgbfQhBZ5
Nf69IDtN9G0Nw+qM357ML9Evavb9tSIf73PIj8KkPAWPUPA0ADnajX9HrI/vW0yZ
EeOli7L6YLnpnQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:54:17 2026 by rpki-client