Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File:                     oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier:          GFQRaouGSJrX8pJQvN0f4RJrdz1GsxlWBiODTG5+BlM=
Subject key identifier:   8E:87:9C:C9:DB:28:6A:14:CF:5F:78:62:F4:E7:28:8B:B1:1B:96:DD
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer:       /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial:       019F9EF166CE78757C33C780A9D094388015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number:          034A
Signing time:             Sun 26 Jul 2026 15:00:48 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:48 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:48 +0000
Files and hashes:         1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
                          2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
                          3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: DtTrxztEIRe34ON34JOtgu2Hg/80ab0OXBm0JdwnQwY=)
                          4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:66:ce:78:75:7c:33:c7:80:a9:d0:94:38:80:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
        Validity
            Not Before: Jul 26 15:00:48 2026 GMT
            Not After : Jul 27 15:00:48 2026 GMT
        Subject: CN=8e879cc9db286a14cf5f7862f4e7288bb11b96dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:a6:6b:bf:71:9d:d3:46:a8:68:db:b5:8a:
                    7e:9a:d7:3d:d1:15:b9:8b:61:b4:e0:8f:95:44:e8:
                    65:61:18:1c:06:2f:c0:f1:56:3f:f4:3b:97:93:52:
                    77:ae:6e:3b:83:d6:0e:62:a2:f5:03:a0:d7:15:d1:
                    d6:37:89:e0:5e:d2:6d:44:81:57:32:27:e7:62:40:
                    b1:dd:7b:19:94:9b:66:d9:c1:b6:b2:1f:95:df:0e:
                    9b:8c:b4:b5:cb:fe:52:70:91:bc:51:4e:42:83:9a:
                    29:c0:07:e4:5e:b2:a6:72:e5:c5:77:d0:2b:df:71:
                    8c:ca:b7:eb:9a:dc:bd:45:18:75:81:13:01:66:84:
                    53:55:85:42:73:f4:9d:ce:98:96:38:b2:86:a5:48:
                    29:b2:70:24:1c:bc:d7:8e:ca:b9:e0:e4:0d:80:41:
                    35:a2:9f:4a:c6:0b:7e:84:7d:b7:6a:76:42:9d:30:
                    11:08:18:c7:96:db:32:c7:ac:f3:64:b9:7b:2b:1f:
                    3a:3f:de:03:4d:9a:98:30:40:66:ec:8a:bc:e6:33:
                    33:83:6c:9b:a3:21:87:4b:4d:7a:5a:1e:48:87:af:
                    dc:89:cf:3a:ea:03:58:3e:60:fb:ca:fa:d6:17:7a:
                    e6:27:eb:bf:57:2f:03:a6:b8:b7:43:aa:ff:50:c6:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:87:9C:C9:DB:28:6A:14:CF:5F:78:62:F4:E7:28:8B:B1:1B:96:DD
            X509v3 Authority Key Identifier:
                keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:12:04:27:8f:a6:25:81:ad:5b:53:8a:ce:eb:3e:00:ee:
         ab:a7:8d:53:91:aa:98:07:14:52:0c:7f:29:a5:d1:42:9e:fa:
         99:9d:4b:04:83:a5:1e:59:51:d5:f5:56:7f:db:88:27:7a:a7:
         95:0b:62:2c:20:b7:b8:4a:dd:1f:5a:52:dd:a1:32:59:f2:ba:
         8f:ca:04:d2:0e:66:36:7b:f2:44:61:37:a7:35:8e:d4:09:ab:
         87:9f:ed:df:02:a8:50:6d:76:74:91:88:92:b4:4e:3f:59:d0:
         62:08:65:87:55:07:75:b9:11:cf:34:d1:dc:a4:0b:96:76:c0:
         f7:de:b6:ff:a8:0e:01:13:01:dc:26:b5:af:e1:fd:6a:bf:7e:
         b5:27:79:28:44:4c:a0:3c:53:71:8f:f6:72:79:ad:72:18:b1:
         7c:67:df:f9:53:b5:a6:16:fc:b0:85:45:31:1b:95:21:97:86:
         99:d5:c2:75:68:25:8b:bd:97:05:49:24:4e:65:dc:19:b4:6b:
         b2:7f:90:73:7e:ae:f8:2e:75:db:94:72:d0:c3:d5:3a:04:8e:
         6d:bd:0d:7a:28:75:27:e7:94:3a:8a:47:c7:ed:40:7f:e9:1f:
         b9:66:a0:c4:65:2a:b5:51:f4:9f:e6:4d:ab:49:b9:fd:ad:a5:
         b1:8c:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:26:31 2026 by rpki-client