Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File:                     OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier:          gFZAM/CkRgc/xd3Ccsupmm91w3e/EzPOPyxB7ZcmMUg=
Subject key identifier:   FE:F0:BD:06:25:3E:5C:CD:50:24:CD:76:6F:DD:E2:E4:1F:26:79:24
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer:       /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial:       01A001DD28F9647A8458D4B9C7FC2186D9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number:          1991
Signing time:             Fri 14 Aug 2026 20:01:06 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:06 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:06 +0000
Files and hashes:         1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: V1CdwazDsBu1Y2VWXbVj9ojsmrmQ6nGPXnH4VgrAN4c=)
                          2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:28:f9:64:7a:84:58:d4:b9:c7:fc:21:86:d9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
        Validity
            Not Before: Aug 14 20:01:06 2026 GMT
            Not After : Aug 15 20:01:06 2026 GMT
        Subject: CN=fef0bd06253e5ccd5024cd766fdde2e41f267924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:ea:9a:5e:62:bd:67:ce:2b:8f:d2:ec:c7:
                    5a:23:42:cc:c0:68:c8:9e:9e:4f:5f:b2:57:8a:01:
                    92:fd:a0:da:94:2f:09:74:b4:3f:39:22:fd:42:45:
                    ec:67:7a:6d:e9:e0:eb:04:f3:03:e4:e2:ec:61:49:
                    50:6b:aa:68:fd:92:24:7e:c3:aa:ab:12:78:ce:3a:
                    3b:56:37:43:97:b0:09:5a:b4:a3:c3:89:c8:ec:c6:
                    0e:d7:dd:bd:24:44:42:78:46:08:88:28:7c:24:67:
                    7d:55:82:f5:34:8f:55:7c:b8:31:f6:10:0a:79:f3:
                    bf:b0:0f:c6:b0:25:10:e4:c4:b9:0f:7f:41:1c:0a:
                    0f:00:ab:fc:2a:15:78:72:48:3a:b0:f9:51:95:04:
                    87:9f:d7:31:82:12:97:9f:8f:83:21:4e:dc:ac:f1:
                    56:62:ae:7c:47:eb:ab:f8:e9:5f:08:18:75:03:df:
                    2e:aa:7e:1c:5f:5a:ba:21:47:22:b8:5c:25:6b:b0:
                    4d:c7:34:e6:28:a0:ea:30:26:09:98:57:6d:fa:ab:
                    2c:e0:1f:13:88:01:5a:13:45:d6:9f:bb:ab:82:45:
                    ad:7d:71:9e:c4:02:a5:d2:6c:bc:25:a0:92:60:26:
                    2b:c3:20:a7:3a:99:4f:62:49:d1:f7:14:a7:49:e6:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:BD:06:25:3E:5C:CD:50:24:CD:76:6F:DD:E2:E4:1F:26:79:24
            X509v3 Authority Key Identifier:
                keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:65:cc:2e:38:86:08:fd:74:5f:ef:59:bd:bd:68:b6:05:
         f4:a4:85:73:e7:b4:ab:00:0b:ca:40:37:3c:1d:86:c9:f9:42:
         98:2e:d4:5c:4a:fb:d5:32:2f:2d:eb:ca:c7:6f:c3:cb:95:20:
         da:39:f0:4c:86:71:ce:3d:61:fd:67:bd:e1:78:85:c2:af:5a:
         90:05:08:c9:a1:cd:60:6b:cd:56:61:f2:c9:2b:ef:c1:34:21:
         93:e2:21:66:3e:78:2d:cf:b3:2a:bf:ad:4a:ef:c4:ab:df:5f:
         30:6e:3e:d5:1f:e9:76:8a:1b:43:85:82:c6:55:71:d3:7e:10:
         09:82:35:22:34:26:6c:c9:95:fe:d9:0d:1e:83:55:9a:c8:af:
         52:f4:52:1c:47:b1:de:c9:e6:76:06:6e:c3:62:53:d3:59:cd:
         e1:04:c2:c5:41:91:22:0b:f1:50:2b:f7:25:5b:14:bc:85:f6:
         3b:a3:c8:2d:be:ff:b0:d4:39:1e:76:c6:ac:82:2f:df:2e:b1:
         4a:c2:9b:0a:09:37:b4:70:54:51:56:39:c7:19:c5:96:f0:16:
         ee:69:a8:11:a1:63:f0:f8:1e:5e:0b:ad:c1:32:d0:02:6e:5a:
         b0:b2:b9:f7:b7:0e:a4:20:96:d0:3d:d5:22:6a:ab:56:1e:f0:
         d9:c4:a9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Sj5ZHqEWNS5x/whhtnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2
NDRjZGIwHhcNMjYwODE0MjAwMTA2WhcNMjYwODE1MjAwMTA2WjAzMTEwLwYDVQQD
EyhmZWYwYmQwNjI1M2U1Y2NkNTAyNGNkNzY2ZmRkZTJlNDFmMjY3OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ3qml5ivWfOK4/S7MdaI0LMwGjI
np5PX7JXigGS/aDalC8JdLQ/OSL9QkXsZ3pt6eDrBPMD5OLsYUlQa6po/ZIkfsOq
qxJ4zjo7VjdDl7AJWrSjw4nI7MYO1929JERCeEYIiCh8JGd9VYL1NI9VfLgx9hAK
efO/sA/GsCUQ5MS5D39BHAoPAKv8KhV4ckg6sPlRlQSHn9cxghKXn4+DIU7crPFW
Yq58R+ur+OlfCBh1A98uqn4cX1q6IUciuFwla7BNxzTmKKDqMCYJmFdt+qss4B8T
iAFaE0XWn7urgkWtfXGexAKl0my8JaCSYCYrwyCnOplPYknR9xSnSea6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7wvQYlPlzNUCTNdm/d4uQfJnkkMB8GA1UdIwQY
MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt
ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx
LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKllzC44
hgj9dF/vWb29aLYF9KSFc+e0qwALykA3PB2GyflCmC7UXEr71TIvLevKx2/Dy5Ug
2jnwTIZxzj1h/We94XiFwq9akAUIyaHNYGvNVmHyySvvwTQhk+IhZj54Lc+zKr+t
Su/Eq99fMG4+1R/pdoobQ4WCxlVx034QCYI1IjQmbMmV/tkNHoNVmsivUvRSHEex
3snmdgZuw2JT01nN4QTCxUGRIgvxUCv3JVsUvIX2O6PILb7/sNQ5HnbGrIIv3y6x
SsKbCgk3tHBUUVY5xxnFlvAW7mmoEaFj8PgeXgutwTLQAm5asLK597cOpCCW0D3V
ImqrVh7w2cSpSw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:43 2026 by rpki-client