Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File:                     OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier:          FQf8eBpvkIODNPNSE/lUaylMrTmMbtduAsXw6x/WYQw=
Subject key identifier:   F7:30:A3:7D:72:96:59:02:85:D3:C8:8B:96:26:A8:59:EF:6F:34:B8
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer:       /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial:       01A152F69B6A04A296603523125A695DDDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number:          029F
Signing time:             Mon 19 Oct 2026 07:00:55 +0000
Manifest this update:     Mon 19 Oct 2026 07:00:55 +0000
Manifest next update:     Tue 20 Oct 2026 07:00:55 +0000
Files and hashes:         1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
                          2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: 2n32a+AaWC86bIXZejFjPMEBh8/LNBUT6o/CfWXuGE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:f6:9b:6a:04:a2:96:60:35:23:12:5a:69:5d:dd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
        Validity
            Not Before: Oct 19 07:00:55 2026 GMT
            Not After : Oct 20 07:00:55 2026 GMT
        Subject: CN=f730a37d7296590285d3c88b9626a859ef6f34b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:24:4a:b0:d8:20:ba:c0:b6:28:9f:41:e0:
                    b1:f1:e0:29:8e:a9:51:cd:fe:8d:04:2c:e0:bf:89:
                    58:00:d3:39:0e:ee:9f:61:1e:11:c6:d6:f4:88:d0:
                    50:48:ec:fb:11:63:29:ea:23:03:d9:d6:1a:f9:e2:
                    78:52:23:e3:3b:75:46:34:bd:f6:79:ff:32:53:0d:
                    a0:9c:ac:36:82:84:97:df:c0:31:28:17:a0:74:c3:
                    0b:06:c5:60:99:27:d9:b8:1e:41:b7:cb:1c:5e:d0:
                    34:e6:e0:bb:f9:76:46:b1:f4:e2:5d:fb:1b:30:ca:
                    ff:db:f0:36:ff:60:b8:ff:4f:bf:d4:df:b2:bd:41:
                    c4:60:de:b3:ae:75:9e:6e:c6:f2:b9:84:33:53:3d:
                    bb:e8:7e:35:cc:83:f1:70:b0:d5:bc:92:2b:11:75:
                    cf:0c:75:76:4f:bf:d2:13:09:5e:77:72:0d:8c:fb:
                    1b:67:97:b8:9f:fd:eb:94:d1:01:79:58:1e:e8:b2:
                    00:70:9d:ca:42:db:f3:9c:f5:fa:96:72:e2:2c:c4:
                    ee:10:de:38:ee:48:62:5b:16:d8:06:53:08:b6:8e:
                    ac:67:08:3f:7a:f8:54:92:03:1d:f0:0d:38:d8:07:
                    30:7a:d4:2d:e4:49:0a:01:9c:05:3a:7d:1b:47:a6:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:30:A3:7D:72:96:59:02:85:D3:C8:8B:96:26:A8:59:EF:6F:34:B8
            X509v3 Authority Key Identifier:
                keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:23:e5:cf:8f:24:f1:f5:c1:47:e2:95:77:43:e2:95:56:
         76:5d:b4:3e:91:64:cd:8f:34:74:70:f7:1b:87:df:d8:3a:55:
         01:7c:39:14:93:90:8b:ca:f4:e0:75:b0:31:49:ee:40:7a:8c:
         36:4a:cf:b8:2c:31:24:38:6f:84:0d:02:92:65:99:e4:f9:e7:
         30:0a:71:a1:c2:fd:84:c2:d5:6e:f8:dd:21:c7:98:21:1a:0a:
         34:ba:fb:aa:f2:29:e1:a6:10:f7:41:7c:54:46:a5:d8:7c:b8:
         7e:5c:82:63:15:2f:e2:27:cb:70:b6:11:ee:50:98:cb:3a:e6:
         cb:b2:8b:b4:af:31:ae:b0:33:53:6e:27:98:ea:30:1a:7d:78:
         2a:3b:4b:22:10:48:d0:6d:91:d8:32:d8:05:c0:20:68:94:c5:
         c0:e5:8b:37:56:31:2c:a5:c3:27:c2:5c:7b:fd:da:3d:e4:69:
         2f:4d:81:0d:8c:57:17:48:cf:fb:72:59:08:f0:6a:0b:26:82:
         f3:bb:fa:12:4a:08:61:6d:58:9e:2d:84:cb:eb:c7:60:9e:c6:
         38:dd:cf:75:42:ee:d3:b9:f8:d0:7a:88:12:1b:21:5c:5c:96:
         64:68:af:8b:a2:ac:1b:64:a5:26:a6:e6:08:7c:7b:91:6e:d0:
         03:02:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:41:45 2026 by rpki-client